[dns-operations] BE NS performing referral on DS record query

[Griffiths, Chris]

Hello,

I am wondering if anyone can point me to who manages the .BE ccTLD.  We are seeing one of their NS performing referrals on DS query when performing DNSSEC validation and it is causing some issues.

Here are their NS:

BE.                     86400   IN      NS      a.ns.dns.BE.
BE.                     86400   IN      NS      b.ns.dns.BE.
BE.                     86400   IN      NS      c.ns.dns.BE.
BE.                     86400   IN      NS      x.dns.BE.
BE.                     86400   IN      NS      london.ns.dns.BE.
BE.                     86400   IN      NS      prague.ns.dns.BE.
BE.                     86400   IN      NS      brussels.ns.dns.BE.
BE.                     86400   IN      NS      amsterdam.ns.dns.BE.

The one we are seeing issues for is:  x.dns.BE.

dig @x.dns.be yahoo.be DS

; <<>> DiG 9.6.0-APPLE-P2 <<>> @x.dns.be yahoo.be DS
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 31853
;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 5, ADDITIONAL: 0
;; WARNING: recursion requested but not available

;; QUESTION SECTION:
;yahoo.be.                      IN      DS

;; AUTHORITY SECTION:
yahoo.be.               86400   IN      NS      ns1.yahoo.com.
yahoo.be.               86400   IN      NS      ns2.yahoo.com.
yahoo.be.               86400   IN      NS      ns3.yahoo.com.
yahoo.be.               86400   IN      NS      ns5.yahoo.com.
yahoo.be.               86400   IN      NS      ns7.yahoo.com.

;; Query time: 27 msec
;; SERVER: 194.0.1.10#53(194.0.1.10)
;; WHEN: Fri Dec  3 20:39:29 2010
;; MSG SIZE  rcvd: 125

The others are acting as expected:

 dig @a.ns.dns.be yahoo.be DS

; <<>> DiG 9.6.0-APPLE-P2 <<>> @a.ns.dns.be yahoo.be DS
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 47442
;; flags: qr aa rd; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; WARNING: recursion requested but not available

;; QUESTION SECTION:
;yahoo.be.                      IN      DS

;; AUTHORITY SECTION:
be.                     600     IN      SOA     a.ns.dns.be. tech.dns.be. 1008294380 3600 1800 2419200 600

;; Query time: 102 msec
;; SERVER: 193.109.126.140#53(193.109.126.140)
;; WHEN: Fri Dec  3 20:40:14 2010
;; MSG SIZE  rcvd: 76

Any help would be most appreciated.

Thanks

--
Chris Griffiths
Comcast Cable Communications, Inc.
National Engineering and Technical Operations

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20101204/3544568f/attachment.html>