[dns-operations] Comcast DNSSEC resolver testbed: many failures

[Florian Weimer]

Simple queries such as the following one appear to fail:

; <<>> DiG 9.6.1-P2 <<>> @68.87.64.154 www.isc.org +dnssec
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 39131
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 4000
;; QUESTION SECTION:
;www.isc.org.                   IN      A

;; Query time: 1268 msec
;; SERVER: 68.87.64.154#53(68.87.64.154)
;; WHEN: Sun Dec 20 22:10:21 2009
;; MSG SIZE  rcvd: 40

IP address is taken from <http://www.dnssec.comcast.net/>; it's the
Nominum Vantion instance.  The Unbound instance appears to be
similarly affected.  The BIND instance seems to work.

Could someone please take a look?  Thanks.