[dns-operations] socialsecurity.gov

[Rose, Scott W.]

That could be what is going on - several USG agencies set up their servers to refuse queries from outside of the US. The dotgov.gov registrar interface used to (still does?) do this, much to the dismay of embassies around the world.  

I would guess that the two servers on 199.173 are on admin group and the 137.200 net servers are another.  One configure to refuse international queries, one not.

Can anyone else in Japan reach the two servers?  Or anyone outside of North America?  

Scott

________________________________________
From: dns-operations-bounces at lists.dns-oarc.net [dns-operations-bounces at lists.dns-oarc.net] On Behalf Of Randy Bush [randy at psg.com]
Sent: Wednesday, September 12, 2012 9:46 AM
To: Andrew Sullivan
Cc: dns-operations at lists.dns-oarc.net
Subject: Re: [dns-operations] socialsecurity.gov

let me uncloak a bit further

> If I had to guess, there's a problem in which your different clients
> are reaching (either by server selection or anycast) different servers
> with different copies of the zone, and at least one such server has a
> problem.

this is one possibility

another is that some usg, especially mil, sites are blocked to some
japanese networks

there are probably others

but how do i diagnose/debug?

randy
_______________________________________________
dns-operations mailing list
dns-operations at lists.dns-oarc.net
https://lists.dns-oarc.net/mailman/listinfo/dns-operations
dns-jobs mailing list
https://lists.dns-oarc.net/mailman/listinfo/dns-jobs