[dns-operations] Can't resolve NIH.GOV records

[Michael Sinatra]

On 05/07/09 00:27, Michael Graff wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> Craig Leres wrote:
>> I received a complaint that none our DLV servers can find the MX for
>> extra.niddk.nih.gov. Indeed, flushing the cache or even restarting named
>> does not correct this; may I assume there's a problem with the signing
>> of nih.gov?
> 
> What version are they running?
> 
> It does not appear that nih.gov is actually a signed zone from what I
> see.  It appears to be properly NEC3'ified in .gov, and there is no
> dnskey in nih.gov.

I am also not seeing any signed data in nih.gov, and the UC Berkeley 
validating nameservers appear to be resolving the record correctly.  Are 
you getting NXDOMAIN or SERVFAIL or something else?