[dns-operations] Validating or not validating (ICANN controlled interruption)

[Stephane Bortzmeyer]

On Wed, Sep 03, 2014 at 10:19:29AM +0200,
 Ralf Weber <dns at fl1ger.de> wrote 
 a message of 23 lines which said:

> > In some cases (difficult to pinpoint, depending on the resolver's
> > state), both BIND and Unbound return SERVFAIL.
> Could you be more specific. 


% dig @relay1 A nimportequoi.otsuka

; <<>> DiG 9.9.5-4-Debian <<>> @relay1 A nimportequoi.otsuka
; (2 servers found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 61320
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 4096
;; QUESTION SECTION:
;nimportequoi.otsuka.	IN A

;; Query time: 761 msec
;; SERVER: 2001:67c:2218:9::4:162#53(2001:67c:2218:9::4:162)
;; WHEN: Wed Sep 03 10:33:49 CEST 2014
;; MSG SIZE  rcvd: 48



% dig +cd @relay1 A nimportequoi.otsuka

; <<>> DiG 9.9.5-4-Debian <<>> +cd @relay1 A nimportequoi.otsuka
; (2 servers found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 65188
;; flags: qr rd ra cd; QUERY: 1, ANSWER: 2, AUTHORITY: 6, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 4096
;; QUESTION SECTION:
;nimportequoi.otsuka.	IN A

;; ANSWER SECTION:
nimportequoi.otsuka.	3600 IN	A 127.0.53.53
nimportequoi.otsuka.	3600 IN	RRSIG A 8 1 3600 (
				20140908095717 20140901154103 39096 otsuka.
				Zqh3JJPn0wx3OzT10QSRma/AnKejvpxWCo9qeDaGWWra
				NDuf2YFVdPIriEqpxFvwX7hYde4BdPMMjKP+sK8MoyMb
				ZBoq/WAKXOgNyskmBa2bRVkIb5BECmIJRl6Zxf9gpFZF
				JnnwJcfe0vjjw8VKi9Hix2woBd7srhj0LfWYTZo= )

;; AUTHORITY SECTION:
otsuka.			80580 IN NS a.gmoregistry.net.
otsuka.			80580 IN NS c.gmoregistry.net.
otsuka.			80580 IN NS d.gmoregistry.net.
otsuka.			80580 IN NS e.gmoregistry.net.
otsuka.			80580 IN NS b.gmoregistry.net.
otsuka.			83270 IN RRSIG NS 8 1 86400 (
				20140906051642 20140829223703 39096 otsuka.
				VKKPM0O34d2BpFY8EVnRVKv9uhyR2B4c0bUkx8OkrRZG
				FSy7fEJCPZ5CU2JD/zHJlGUV5Px9C4UtphlsdVUDObRl
				gF0/fCOk/who5+JNSuyNnP+LBBn8NRa3fGKNzP0MxS09
				SWfpu5z4dCRBMkDRHbUcEWaFkVoGTPI2OxqN4GM= )

;; Query time: 6 msec
;; SERVER: 2001:67c:2218:9::4:162#53(2001:67c:2218:9::4:162)
;; WHEN: Wed Sep 03 10:33:56 CEST 2014
;; MSG SIZE  rcvd: 491


% dig +cd @relay1 CH TXT version.bind

; <<>> DiG 9.9.5-4-Debian <<>> +cd @relay1 CH TXT version.bind
; (2 servers found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 33068
;; flags: qr aa rd cd; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 1
;; WARNING: recursion requested but not available

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 4096
;; QUESTION SECTION:
;version.bind.		CH TXT

;; ANSWER SECTION:
version.bind.		0 CH TXT "9.8.0-P4.jp"

;; AUTHORITY SECTION:
version.bind.		0 CH NS	version.bind.

;; Query time: 1 msec
;; SERVER: 2001:67c:2218:9::4:162#53(2001:67c:2218:9::4:162)
;; WHEN: Wed Sep 03 10:34:08 CEST 2014
;; MSG SIZE  rcvd: 79