On 2015/02/02 16:46, Stuart Henderson wrote:
> On 2015/02/02 16:27, Richard Carde wrote:
> > Can anyone from Exponential-e confirm if they had DNS issues today?
> > 
> > Google DNS and OpenDNS are caching dodgy records for the newham.gov.uk
> > domain.
> > 
> > Verisign Labs DNS Debugger indicates Exponential-e servers have
> > poisoned A records somewhere / somehow.
> > 
> > http://dnssec-debugger.verisignlabs.com/newham.gov.uk
> > 
> > newham.gov.uk
> > 
> > No DS records found for newham.gov.uk in the gov.uk zone
> > No DNSKEY records found
> > Query to auth0.expontential-e.net/50.57.203.17 for newham.gov.uk/A
>                       ^
> 
> Looks like this was typo'd.

Either on the auth server or the gov.uk servers, I mean.

Aha - it's still there:

$ drill newham.gov.uk. ns @ns2.ja.net.
;; ->>HEADER<<- opcode: QUERY, rcode: NOERROR, id: 44654
;; flags: qr rd ; QUERY: 1, ANSWER: 0, AUTHORITY: 4, ADDITIONAL: 2 
;; QUESTION SECTION:
;; newham.gov.uk.       IN      NS

;; ANSWER SECTION:

;; AUTHORITY SECTION:
newham.gov.uk.  86400   IN      NS      auth1.expontential-e.net.
newham.gov.uk.  86400   IN      NS      auth0.expontential-e.net.
newham.gov.uk.  86400   IN      NS      ns3.newham.gov.uk.
newham.gov.uk.  86400   IN      NS      ns4.newham.gov.uk.

;; ADDITIONAL SECTION:
ns3.newham.gov.uk.      86400   IN      A       151.133.2.109
ns4.newham.gov.uk.      86400   IN      A       151.133.2.110

;; Query time: 17 msec
;; SERVER: 193.63.105.17
;; WHEN: Mon Feb  2 17:07:58 2015
;; MSG SIZE  rcvd: 157

> OpenDNS and Google DNS both allow you to forcibly flush an entry.
> 
> http://cachecheck.opendns.com/
> https://developers.google.com/speed/public-dns/cache

...but this won't help if the glue is still broken.


Reply via email to