[dns-operations] socialsecurity.gov

[Bill Owens]

On Wed, Sep 12, 2012 at 07:02:48PM +0900, Randy Bush wrote:
> what am i not understanding here?
> 
> from seattle westin
> 
>     psg.com:/usr/home/randy> doc -p -w socialsecurity.gov.Doc-2.2.3: doc -p -w socialsecurity.gov.
>     Doc-2.2.3: Starting test of socialsecurity.gov.   parent is gov.
>     Doc-2.2.3: Test date - Wed Sep 12 09:57:32 GMT 2012
>     Summary:
>        No errors or warnings issued for socialsecurity.gov.
>     Done testing socialsecurity.gov.  Wed Sep 12 09:57:39 GMT 2012
> 
> from iij in tokyo
> 
>     rair.psg.com:/Users/randy> doc -p -w socialsecurity.gov.
>     Doc-2.2.3: doc -p -w socialsecurity.gov.
>     Doc-2.2.3: Starting test of socialsecurity.gov.   parent is gov.
>     Doc-2.2.3: Test date - Wed Sep 12 19:00:44 JST 2012
>     DIGERR (NOT_AUTHORIZED): dig @dns5.ssa.gov. for SOA of socialsecurity.gov. failed
>     DIGERR (NOT_AUTHORIZED): dig @dns6.ssa.gov. for SOA of socialsecurity.gov. failed
>     Summary:
>        No errors or warnings issued for socialsecurity.gov.
>        Incomplete test for socialsecurity.gov. (2)
>     Done testing socialsecurity.gov.  Wed Sep 12 19:01:30 JST 2012

I can't reach the v6 addresses of dns5 or dns6; I can reach dns1 and dns2. I don't see anything in the log that indicates which transport was being used, but that would be consistent with the problem if the IIJ host is v6-enabled.

Bill.