[dns-operations] Various Verisign IPv6 servers unreachable

[Bernhard Schmidt]

On 21.12.2009 13:53, Michael Graff wrote:

Hi Michael,

>> could someone at Verisign please have a closer look at their IPv6
>> servers? nstld at verisign-grs.com is unresponsive and those issues have
>> been there for weeks.
>
> I also cannot reach a and b from my IP address space, which is through
> ISC's space.  I get an ICMP "communication administratively prohibited"
> type response:
>
> a:
>   6  sl-bb1v6-rly-t-1002.sprintv6.net  145.52 ms  147.498 ms  147.759 ms
>   7  2001:440:eeee:ff7e::2  152.767 ms !X  153.169 ms !X  155.146 ms !X
>
> b:
>   7  p16-0-0-0.r06.asbnva01.us.bb.gin.ntt.net  72.495 ms  74.29 ms  77.454 ms
>   8  d1-0.verisign.asbnva01.us.bb.gin.ntt.net  82.762 ms !X  81.807 ms !X
>   79.485 ms !X

This is expected, Verisign seems to block traces (well, UDP packets with 
dport != 53) on their network edge. a.gtld-servers.net should work fine 
when doing a DNS query (dig). b.gtld just times out though.

Bernhard