[dns-operations] Can't resolve NIH.GOV records
michael at rancid.berkeley.edu
Thu May 7 07:33:21 UTC 2009
On 05/07/09 00:27, Michael Graff wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> Craig Leres wrote:
>> I received a complaint that none our DLV servers can find the MX for
>> extra.niddk.nih.gov. Indeed, flushing the cache or even restarting named
>> does not correct this; may I assume there's a problem with the signing
>> of nih.gov?
> What version are they running?
> It does not appear that nih.gov is actually a signed zone from what I
> see. It appears to be properly NEC3'ified in .gov, and there is no
> dnskey in nih.gov.
I am also not seeing any signed data in nih.gov, and the UC Berkeley
validating nameservers appear to be resolving the record correctly. Are
you getting NXDOMAIN or SERVFAIL or something else?
More information about the dns-operations