[dns-operations] It's begun...
Peter Andreev
andreev.peter at gmail.com
Tue Nov 5 17:55:59 UTC 2013
2013/11/5 Matthäus Wander <matthaeus.wander at uni-due.de>
> * Peter Andreev [2013-11-05 16:26]:
> >
> > 2013/10/31 Chris Thompson <cet1 at cam.ac.uk <mailto:cet1 at cam.ac.uk>>
> >
> > On Oct 24 2013, I wrote:
> >
> > [...]
> >
> > But... the two Cyrillic gTLDs (xn--80asehdb & xn--80aswg) are a
> bit
> >
> > broken, in that NXDOMAIN responses don't validate properly.
> >
> >
> > and there were some followups.
> >
> > Just to note that this has been fixed by now - the right NSEC3
> records
> > and their signatures are being returned.
> >
> >
> > We met very similar symptoms when we were signing our zones. BIND
> > simply didn't generate NSEC3 unless restarted.
>
> The operator of xn--80asehdb. and xn--80aswg. is using a custom-made
> name server according to their version.bind.
>
Their version.bind looks REFUSED for me. AFAIK this is the default
behaviour of all major nameserver implementations. So I'm not sure if they
use modified BIND or completely selfmade server.
>
> Regards,
> Matt
>
> --
> Universität Duisburg-Essen
> Verteilte Systeme
> Bismarckstr. 90 / BC 316
> 47057 Duisburg
>
>
> _______________________________________________
> dns-operations mailing list
> dns-operations at lists.dns-oarc.net
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations
> dns-jobs mailing list
> https://lists.dns-oarc.net/mailman/listinfo/dns-jobs
>
--
Is there any problem Exterminatus cannot solve? I have not found one yet.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20131105/8160f27c/attachment.html>
More information about the dns-operations
mailing list