On Oct 12, 2009, at 4:44 PM, Stephane Bortzmeyer wrote:
Indeed, it fails for me through Unbound.
Me too. unbound-host reports the following: % unbound-host -f /usr/local/etc/unbound/anchors.mf -vd -t soa se ...[1255381375] libunbound[24020:0] info: Successfully primed trust anchor <SE. DNSKEY IN> [1255381375] libunbound[24020:0] info: Validate: message contains bad rrsets se has SOA record catcher-in-the-rye.nic.se. registry-default.nic.se. 2009101211 1800 1800 2419200 7200 (BOGUS (security failure))
oops. However: % unbound-host -f /usr/local/etc/unbound/anchors.mf -v -t ns se se has NS record b.ns.se. (secure) se has NS record f.ns.se. (secure) se has NS record g.ns.se. (secure) se has NS record d.ns.se. (secure) se has NS record c.ns.se. (secure) se has NS record e.ns.se. (secure) se has NS record i.ns.se. (secure) se has NS record j.ns.se. (secure) se has NS record h.ns.se. (secure) se has NS record a.ns.se. (secure)
% dig SOA se. ; <<>> DiG 9.5.1-P3 <<>> SOA se. ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 51031 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ;; QUESTION SECTION: ;se. IN SOA ;; Query time: 0 msec ;; SERVER: ::1#53(::1) ;; WHEN: Mon Oct 12 22:43:04 2009 ;; MSG SIZE rcvd: 31 % dig +cd SOA se. ; <<>> DiG 9.5.1-P3 <<>> +cd SOA se. ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 47877;; flags: qr rd ra cd; QUERY: 1, ANSWER: 1, AUTHORITY: 10, ADDITIONAL: 14;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ;; QUESTION SECTION: ;se. IN SOA ;; ANSWER SECTION:se. 7032 IN SOA catcher-in-the-rye.nic.se. registry- default.nic.se. 2009101210 1800 1800 2419200 7200;; AUTHORITY SECTION: se. 172632 IN NS a.ns.se.se. se. 172632 IN NS b.ns.se.se. se. 172632 IN NS c.ns.se.se. se. 172632 IN NS d.ns.se.se. se. 172632 IN NS e.ns.se.se. se. 172632 IN NS f.ns.se.se. se. 172632 IN NS g.ns.se.se. se. 172632 IN NS h.ns.se.se. se. 172632 IN NS i.ns.se.se. se. 172632 IN NS j.ns.se.se. ;; ADDITIONAL SECTION: a.ns.se. 172644 IN A 192.36.144.107 a.ns.se. 172644 IN AAAA 2a01:3f0:0:301::53 b.ns.se. 172644 IN A 192.36.133.107 c.ns.se. 172644 IN A 192.36.135.107 d.ns.se. 172644 IN A 81.228.8.16 e.ns.se. 172644 IN A 81.228.10.57 f.ns.se. 172644 IN A 192.71.53.53 g.ns.se. 172644 IN A 130.239.5.114 g.ns.se. 172644 IN AAAA 2001:6b0:e:3::1 h.ns.se. 172644 IN A 199.7.49.30 i.ns.se. 172644 IN A 194.146.106.22 j.ns.se. 172644 IN A 199.254.63.1 j.ns.se. 145584 IN AAAA 2001:500:2c::1 ;; Query time: 0 msec ;; SERVER: ::1#53(::1) ;; WHEN: Mon Oct 12 22:43:15 2009 ;; MSG SIZE rcvd: 540 % dig +dnssec +cd SOA se. ; <<>> DiG 9.5.1-P3 <<>> +dnssec +cd SOA se. ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 65186;; flags: qr rd ra cd; QUERY: 1, ANSWER: 2, AUTHORITY: 11, ADDITIONAL: 27;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags: do; udp: 4096 ;; QUESTION SECTION: ;se. IN SOA ;; ANSWER SECTION:se. 7011 IN SOA catcher-in-the-rye.nic.se. registry- default.nic.se. 2009101210 1800 1800 2419200 7200 se. 7011 IN RRSIG SOA 5 1 172800 20091019180557 20091012182816 12075 se. ngngXNhJDJjmnMmSMf5DBlUPIVpmZgn9ERtfXE0OzVFb0hJcJHtsQVVY EsmB6etVJOMa0L2fKLHikU4+gNQkAD8773xWw95apzyg8S+Z0nEOarHT jOm +mnsG1hA3sueQML+K/VfBmVxGwOsLACydn62xzIqtQAFrOCcphtND DS0=;; AUTHORITY SECTION: se. 172611 IN NS a.ns.se.se. se. 172611 IN NS b.ns.se.se. se. 172611 IN NS c.ns.se.se. se. 172611 IN NS d.ns.se.se. se. 172611 IN NS e.ns.se.se. se. 172611 IN NS f.ns.se.se. se. 172611 IN NS g.ns.se.se. se. 172611 IN NS h.ns.se.se. se. 172611 IN NS i.ns.se.se. se. 172611 IN NS j.ns.se.se.se. 172611 IN RRSIG NS 5 1 172800 20091019172718 20091012182816 12075 se. KcuxKPaC9fnNBRR8GfOmCjH54QRDKGtRJxhumbjVt6cAoHRVAODi6CBv W9W3FzwqhNpXOlRZS49dX/4jtD7zyKaI+GudaU/vllc21o3DnxAvJ3lP 7sDXsN6M +qS1H2YZsuX5zPM4UnAdbncvKo/yiqcuqoejhYxWLki6pOp6 dQY=;; ADDITIONAL SECTION: a.ns.se. 172623 IN A 192.36.144.107 a.ns.se. 172623 IN AAAA 2a01:3f0:0:301::53 b.ns.se. 172623 IN A 192.36.133.107 c.ns.se. 172623 IN A 192.36.135.107 d.ns.se. 172623 IN A 81.228.8.16 e.ns.se. 172623 IN A 81.228.10.57 f.ns.se. 172623 IN A 192.71.53.53 g.ns.se. 172623 IN A 130.239.5.114 g.ns.se. 172623 IN AAAA 2001:6b0:e:3::1 h.ns.se. 172623 IN A 199.7.49.30 i.ns.se. 172623 IN A 194.146.106.22 j.ns.se. 172623 IN A 199.254.63.1 j.ns.se. 145563 IN AAAA 2001:500:2c::1a.ns.se. 172623 IN RRSIG A 5 3 172800 20091017170853 20091012162314 12075 se. LMJIZXZxWy8vkDCGyiaNBWEdNjP1eummEEA4qFOs0+Yc+tmQUYVKVJ9R Y5F8OqsleFBWvev4lvMQeJipxfkHREqBAmjxPP9ZBg1atZxoHtzBbWxE cJJBOC6Ho6HV/ZfW7BpVO9kv+P33in4QLrCvc1rRl7inonOUc4l+HpyB Kug= a.ns.se. 172623 IN RRSIG AAAA 5 3 172800 20091019140056 20091012162314 12075 se. bl+vbQx39C4ULGWvZsh0FT76FRa74tJ +Wt1d2Ph8Ukw8cxvlYjPaGrJL LfkJ2pAdHtFEIWteLg47dmy0TK0BkBOpfjj6ZfyVyoHfbs5wtA+7QtYU ZwHDvoBaaEGnCnT4tMF0JKwDVU+B9KxLO7O/RYwlnjPj7lNN5CgTzkym 3CI= b.ns.se. 172623 IN RRSIG A 5 3 172800 20091018094111 20091012162314 12075 se. fSdvb3mb8QI8zYU/66Rqq58FtxxJDC+Mrpn9WR7fH0e4KuZL0U4ilyBz OPudlvt6t4t2ELBDFfHbm4xtWlg9mfINdhpbYTEwe4PG0rdj3OZ7WhFD TA8J6fgRFZyVX6LjQWfLj2xH4/qedkpEJXIG9Q+7ULJzKF5GwwzsYgXp dSQ= c.ns.se. 172623 IN RRSIG A 5 3 172800 20091018162409 20091012162314 12075 se. p8kK9eZYQ/VkOGZETwin2tA2+UY0gbuX/Kyw0Y1j50zc2hoQ2pfamIBA EVKrTNO1/Ll4jUejBY3BlR1BUXx/6bjKBpDV+rFC+zEh+kiFomaB9CLf z4eElYc4V61U6j2RwW4q2UtWtgK5AWCozgnmO3IFHkqwXzRbfCqfsU/h 4EA= d.ns.se. 172623 IN RRSIG A 5 3 172800 20091017213756 20091012162314 12075 se. fFS8wzeDMm7EVW9FmXYRMV8B22sdgn+DXqW1a5UwApJbzvzmDFd2OcsD 23h2ZPeihq8K1SP72uXtTwcnr1a3ZfHT33/D0PNYezPTEa4mtWO6BNLW Iwzs92oUJAeJ0FMTXpTuJSMivvUeccFIDZyZJVH/qUK5auOgc8JfPmiA JCI= e.ns.se. 172623 IN RRSIG A 5 3 172800 20091019092758 20091012162314 12075 se. Xx8WEerM+tJTtWghOhWudTXEmwzeQuEQxTfhY7ReNu5aTDolYRe5EF3N ZICLIwXFrega49oG99/KQSOZnd/2Gn0ysTztF5WvAzy6Z2WLDHZsdWQ2 mEP0eZ27KOOWno4zBTZjCbpTbqYzgxbUH3h754NoxW9kXlVR+lrZqgiN jDI= f.ns.se. 172623 IN RRSIG A 5 3 172800 20091019074039 20091012162314 12075 se. BeG9xSNoCHHriSnQfTKvN0Bj/et745K5Um1WP6SIuy1X5xrfKhepZ1+I fwcCkaOd3Amfqtmil2cO8lKKdOw+GemsYm3tDU0nPNq9CJQFOgjZKDt0 Oy0C6ktHRJu9oy/08470FGHM1PR9pTbywN/TNg+R4x/OkGmMdY1BX6wq DWI= g.ns.se. 172623 IN RRSIG A 5 3 172800 20091018014151 20091012162314 12075 se. Bt03od6ljWiOK2ClpwsjFjdMYDzkE5DedRbiHyACUYnFw4WFlZqycHqX D30bVgfaDxvY6M17chxWXVyjwBuNbteEjHYhDg6WhU1cFQVOniZnjPb9 cvx +T5LP4t9c7zjtQG5bSqwKEV7tV+ga39vhJcyCW0GzvvQWhAxTqZwY /dU= g.ns.se. 172623 IN RRSIG AAAA 5 3 172800 20091018053857 20091012162314 12075 se. XASkw1tSToov2+nWbiJZrjBZZsHXXdnQl +Qix0DkNedjAGcgwPccD0hn nvvW8ybotIxdJo5DIt5FyI3mXwhU4i +23ugtlUG4EN7aecvXGUCREnUb FEW75Ry5OHC4rTlUYqgHcJwACyptQq9oDeul5tCm6iG/FHi0epCdMAjv Nw0= h.ns.se. 172623 IN RRSIG A 5 3 172800 20091018025720 20091012162314 12075 se. wBzN2lFK5tz7y9T7upkPnfCV2weOYObh+CaffK1MNwCIxNJOWLo6brqh YZYuSQiplV3LPE4GkQJnfe1qJR46iuef67arRt81VaBdYdsM3imenN7g PVGoVSwSzRScvZ/2oYdQKYftiblkgBhepCvBo+qsfVkZUCOXZaHu0DJi N5I= i.ns.se. 172623 IN RRSIG A 5 3 172800 20091017175927 20091012162314 12075 se. moFz1ISKQoiC5nvux5isekosNoBsZ2/ny37gZs1HZofhXFTFnRhXgz9g kK3rAEXQqgedorWqsK74IH7bgrv9TJe2FekzEW1/8GtY9Ral1p3yXuFq 9jOg +9MnVJ2SC6sHgkVHPv519FC8MBmc4hEilSdx0ONmF1T3jT2YOcQ/ NQM= j.ns.se. 172623 IN RRSIG A 5 3 172800 20091018170546 20091012162314 12075 se. paqzL0imJ12R4R6m/61YQ4mkYnZl6hgBgWzCG+wXQ1HqpcSBdFXrGHP/ 2penRzUTBZkb4LMddlaE11mN27/8RhHI3dz0cfzNtCJAJf3pAeHomObF VBwXPeK +rin0T7EFWsKN0TK8tGZkoq6rGm0v+Jt2xHPlhnv3SxfQQ3UZ V8k= j.ns.se. 145563 IN RRSIG AAAA 5 3 172800 20091018091717 20091012102315 12075 se. A11MNqyuF8dCQApswVd9Ib8M8fORxmYLxDp86nDoMW7NIGsidfB7y5S+ 2QNE8X9r +h44ckS6dCfhf9hx3AuGFqgfFWKPLkdBxsgdzaVBfBxJpgHZ sLoQ/0ffOhedJ/ tqf7wQXsljX2X0jQoDNpVE48Be/jTuzghdkEKjXYh0 /R8=;; Query time: 0 msec ;; SERVER: ::1#53(::1) ;; WHEN: Mon Oct 12 22:43:36 2009 ;; MSG SIZE rcvd: 2970 Unbound 1.3.2. It works through a BIND resolver but it may be simply a matter of luck (caching, etc). From: Ben White <[email protected]> Date: October 12, 2009 4:38:10 PM EDT To: [email protected] Subject: .se disappeared? Does anyone else also see trouble reaching .se domains at the moment? -- Ben _______________________________________________ Unbound-users mailing list [email protected] http://unbound.nlnetlabs.nl/mailman/listinfo/unbound-users
-- David Blacka <[email protected]> Sr. Engineer VeriSign Platform Product Development
smime.p7s
Description: S/MIME cryptographic signature
_______________________________________________ Unbound-users mailing list [email protected] http://unbound.nlnetlabs.nl/mailman/listinfo/unbound-users
