Re: [outages] DNS SERVFAIL for nist.gov

2021-06-15 Thread Jay R. Ashworth via Outages
- Original Message - > From: "Mel Beckman via Outages" > Subject: Re: [outages] DNS SERVFAIL for nist.gov > I support many financial networks, and comply with the same FINRA rule 6820 > you > do. This rule doesn’t state that the time must be synchronized over th

Re: [outages] DNS SERVFAIL for nist.gov

2021-06-14 Thread Raymond Burkholder via Outages
On 6/14/21 8:58 AM, Jay R. Ashworth via Outages wrote: - Original Message - From: "Matthew Huff via Outages" Of course. Like I stated in the original email, we don’t use NIST for time sync. We actually have a GPS and a PTP feed. WE MUST, HOWEVER, VALIDATE OUR SYSTEM TIMES VERSUS THE

Re: [outages] DNS SERVFAIL for nist.gov

2021-06-14 Thread Jay R. Ashworth via Outages
- Original Message - > From: "Matthew Huff via Outages" > Of course. > > Like I stated in the original email, we don’t use NIST for time sync. We > actually have a GPS and a PTP feed. > > WE MUST, HOWEVER, VALIDATE OUR SYSTEM TIMES VERSUS THE INTERNET NIST SERVERS > VIA > FINRA

Re: [outages] DNS SERVFAIL for nist.gov

2021-06-14 Thread Matthew Huff via Outages
Of course. Like I stated in the original email, we don’t use NIST for time sync. We actually have a GPS and a PTP feed. WE MUST, HOWEVER, VALIDATE OUR SYSTEM TIMES VERSUS THE INTERNET NIST SERVERS VIA FINRA REGULATIONS Yes, it is stupid No, it isn’t a good idea FINRA specifically state that

Re: [outages] DNS SERVFAIL for nist.gov

2021-06-14 Thread Stephane Bortzmeyer via Outages
On Mon, Jun 14, 2021 at 10:52:43AM +, Geoff Snowdon via Outages wrote a message of 200 lines which said: > There's been some chatter on NANOG - they're under DDOS attack apparently. Indeed, most of the authoritative name servers timeout. % check-soa -i nist.gov bea.nist.gov.

Re: [outages] DNS SERVFAIL for nist.gov

2021-06-14 Thread Geoff Snowdon via Outages
There's been some chatter on NANOG - they're under DDOS attack apparently. From: Outages on behalf of Matthew Huff via Outages Sent: 14 June 2021 11:35 To: outages@outages.org Subject: [outages] DNS SERVFAIL for nist.gov We have to query and compare against

[outages] DNS SERVFAIL for nist.gov

2021-06-14 Thread Matthew Huff via Outages
We have to query and compare against NIST time servers for FINRA compliance. This morning I noticed our systems are unable to DNS query the NIST time servers. Neither our local resolvers or google (8.8.8.8) work. [root@bacall log]# dig @8.8.8.8 time-a-g.nist.gov ; <<>> DiG