[dns-operations] Resolution of sandia.gov from Verizon

[Mark Andrews]

In message <CAEKtLiSkJoymf7iin7Leks6UjRmEZawTzbEydyy200-2BwdZTA at mail.gmail.com>, Casey Deccio writes:
> 
> I seem to be having trouble resolving names in sandia.gov from Verizon
> Wireless resolvers (well, one at least), which are giving me REFUSED
> responses.  Other names, in .gov and otherwise, resolve just fine.  Anyone
> know anything?
> 
> Thanks,
> Casey

I would be getting on the phone as REFUSED is not a response that
is cached then returned in the down stream responses.  Normally
upstream REFUSED become down stream SERVFAIL.  The usual way to get
this is to configure a zone then set the acl to prevent respones.

Mark

> $ dig +tcp @198.224.191.135 sandia.gov
> 
> ; <<>> DiG 9.8.5-P1 <<>> +tcp @198.224.191.135 sandia.gov
> ; (1 server found)
> ;; global options: +cmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: REFUSED, id: 882
> ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
> 
> ;; QUESTION SECTION:
> ;sandia.gov.            IN    A
> 
> ;; Query time: 47 msec
> ;; SERVER: 198.224.191.135#53(198.224.191.135)
> ;; WHEN: Tue Oct 29 12:37:00 PDT 2013
> ;; MSG SIZE  rcvd: 28
> 
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: marka at isc.org