[dns-operations] Broken NS records for TLD zones in root zone.

[Mark Andrews]

In message <638a52d9-1202-0a51-873c-46753311e670 at ripe.net>, Anand Buddhdev writ
es:
> Hi Mark,
> 
> Some of the ccTLDs in your report have RIPE NCC name servers, but we are
> unable to XFR the zones from the operators. We have tried to contact the
> operators by email and phone, using all the email addresses and numbers
> we could find, but we've not had any success. In some cases the
> situation has been this way for months or years.
> 
> Regards,
> Anand Buddhdev
> RIPE NCC

Which was why I was saying does anyone have a TLD contact that
works.  ISC's been in the same position with TLDs from time to time
for the secondary service we do.

Mark

> On 16/08/2017 03:46, Mark Andrews wrote:
> 
> > Anyone have contacts that work for these TLDs?  Most of these have
> > been like this for months.
> > 
> > bf. ns1.ird.fr: no address records found (NXDOMAIN)
> > ci. ns1.ird.fr: no address records found (NXDOMAIN)
> > gw. ns4.dns.pt: no address records found (NXDOMAIN)
> > nr. ns1.net.reach.com: address lookups failed
> > td. ns1.nic.td: no address records found (NXDOMAIN)
> > xn--fzc2c9e2c. ns3.ac.lk: no address records found (NXDOMAIN)
> > xn--mgbc0a9azcg. hariss.anrt.ma: no address records found (NXDOMAIN)
> > xn--p1acf. tld1.coccaregistry.org: no address records found
> > xn--xkc2al3hye2a. ns3.ac.lk: no address records found (NXDOMAIN)
> > xn--ygbi2ammx. idn.pnina.ps: no address records found (NXDOMAIN)
> > 
> > The servers for net.reach.com only return REFUSED.
> > 
> > This lot are servers that are listed don't server the zone (refused)
> > or can't transfer the zone (servfail).
> > 
> > cm. @193.0.9.68 (cm.cctld.authdns.ripe.net.): dns=refused edns=refused edns
> 1=ok edns at 512=refused ednsopt=refused edns1opt=ok do=refused ednsflags=refuse
> d optlist=refused,nsid signed=refused ednstcp=refused
> > cm. @2001:67c:e0::68 (cm.cctld.authdns.ripe.net.): dns=refused edns=refused
>  edns1=ok edns at 512=refused ednsopt=refused edns1opt=ok do=refused ednsflags=r
> efused optlist=refused,nsid signed=refused ednstcp=refused
> > dj. @194.51.3.49 (bow.rain.fr.): dns=servfail edns=servfail edns1=ok edns at 5
> 12=servfail ednsopt=servfail edns1opt=ok do=servfail ednsflags=servfail optli
> st=servfail signed=servfail ednstcp=servfail
> > et. @193.0.9.73 (et.cctld.authdns.ripe.net.): dns=refused edns=refused edns
> 1=ok edns at 512=refused ednsopt=refused edns1opt=ok do=refused ednsflags=refuse
> d optlist=refused,nsid signed=refused ednstcp=refused
> > et. @2001:67c:e0::73 (et.cctld.authdns.ripe.net.): dns=refused edns=refused
>  edns1=ok edns at 512=refused ednsopt=refused edns1opt=ok do=refused ednsflags=r
> efused optlist=refused,nsid signed=refused ednstcp=refused
> > fj. @128.32.136.3 (adns1.berkeley.edu.): dns=refused edns=refused edns1=ok 
> edns at 512=refused ednsopt=refused edns1opt=ok do=refused ednsflags=refused opt
> list=refused signed=refused ednstcp=refused
> > fj. @2607:f140:ffff:fffe::3 (adns1.berkeley.edu.): dns=refused edns=refused
>  edns1=ok edns at 512=refused ednsopt=refused edns1opt=ok do=refused ednsflags=r
> efused optlist=refused signed=refused ednstcp=refused
> > fj. @128.32.136.14 (adns2.berkeley.edu.): dns=refused edns=refused edns1=ok
>  edns at 512=refused ednsopt=refused edns1opt=ok do=refused ednsflags=refused op
> tlist=refused signed=refused ednstcp=refused
> > fj. @2607:f140:ffff:fffe::e (adns2.berkeley.edu.): dns=refused edns=refused
>  edns1=ok edns at 512=refused ednsopt=refused edns1opt=ok do=refused ednsflags=r
> efused optlist=refused signed=refused ednstcp=refused
> > jo. @193.188.69.19 (jordan1st.nic.gov.jo.): dns=noaa edns=noaa edns1=ok edn
> s at 512=noaa ednsopt=noaa edns1opt=ok do=noaa ednsflags=noaa optlist=noaa signe
> d=noaa ednstcp=noaa
> > ms. @128.223.32.35 (phloem.uoregon.edu.): dns=servfail edns=servfail edns1=
> ok edns at 512=servfail ednsopt=servfail edns1opt=ok do=servfail ednsflags=servf
> ail optlist=servfail signed=servfail ednstcp=servfail
> > ms. @2001:468:d01:20::80df:2023 (phloem.uoregon.edu.): dns=servfail edns=se
> rvfail edns1=ok edns at 512=servfail ednsopt=servfail edns1opt=ok do=servfail ed
> nsflags=servfail optlist=servfail signed=servfail ednstcp=servfail
> > td. @196.216.168.31 (ns-td.afrinic.net.): dns=servfail edns=servfail edns1=
> ok edns at 512=servfail ednsopt=servfail edns1opt=ok do=servfail ednsflags=servf
> ail optlist=servfail,nsid signed=servfail ednstcp=servfail
> > td. @2001:43f8:120::31 (ns-td.afrinic.net.): dns=servfail edns=servfail edn
> s1=ok edns at 512=servfail ednsopt=servfail edns1opt=ok do=servfail ednsflags=se
> rvfail optlist=servfail,nsid signed=servfail ednstcp=servfail
> > xn--j1amh. @212.1.66.247 (nsi.uanic.net.): dns=servfail edns=servfail edns1
> =ok edns at 512=servfail ednsopt=servfail edns1opt=ok do=servfail ednsflags=serv
> fail optlist=servfail signed=servfail ednstcp=servfail
> > xn--mgbayh7gpa. @193.188.69.19 (jordan1st.nic.gov.jo.): dns=nosoa,noaa edns
> =nosoa,noaa edns1=ok edns at 512=noaa ednsopt=nosoa,noaa edns1opt=ok do=nosoa,no
> aa ednsflags=nosoa,noaa optlist=nosoa,noaa signed=nosoa,noaa ednstcp=noaa
> > xn--mgbc0a9azcg. @81.192.21.41 (dns2.menara.ma.): dns=refused edns=refused 
> edns1=ok edns at 512=refused ednsopt=refused edns1opt=ok do=refused ednsflags=re
> fused optlist=refused signed=refused ednstcp=refused
> > xn--mgbc0a9azcg. @81.192.21.73 (dns3.menara.ma.): dns=refused edns=refused 
> edns1=ok edns at 512=refused ednsopt=refused edns1opt=ok do=refused ednsflags=re
> fused optlist=refused signed=refused ednstcp=refused
> > ye. @195.94.0.35 (sah2.ye.): dns=refused edns=refused edns1=ok edns at 512=ref
> used ednsopt=refused edns1opt=ok do=refused ednsflags=refused optlist=refused
>  signed=refused ednstcp=refused
> > 
> > Mark
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: marka at isc.org