[dns-operations] Added a DO+CD test to genreport and a number of the root servers fail.

Mark Andrews marka at isc.org
Wed Jun 13 13:21:36 UTC 2018


According to RFC 4035 CD is supposed to be copied to the reply.

Below is the results of testing the root servers to see if CD is
correctly copied to the response.

dig . @<server> +dnssec +cd +norec +nocookie soa

echo . | ./genreport -i docd -o
. @198.41.0.4 (a.root-servers.net.): docd=nocd
. @2001:503:ba3e::2:30 (a.root-servers.net.): docd=nocd
. @199.9.14.201 (b.root-servers.net.): docd=ok
. @2001:500:200::b (b.root-servers.net.): docd=timeout
. @192.33.4.12 (c.root-servers.net.): docd=ok
. @2001:500:2::c (c.root-servers.net.): docd=timeout
. @199.7.91.13 (d.root-servers.net.): docd=nocd
. @2001:500:2d::d (d.root-servers.net.): docd=nocd
. @192.203.230.10 (e.root-servers.net.): docd=nocd
. @2001:500:a8::e (e.root-servers.net.): docd=nocd
. @192.5.5.241 (f.root-servers.net.): docd=ok
. @2001:500:2f::f (f.root-servers.net.): docd=ok
. @192.112.36.4 (g.root-servers.net.): docd=ok
. @2001:500:12::d0d (g.root-servers.net.): docd=timeout
. @198.97.190.53 (h.root-servers.net.): docd=nocd
. @2001:500:1::53 (h.root-servers.net.): docd=nocd
. @192.36.148.17 (i.root-servers.net.): docd=ok
. @2001:7fe::53 (i.root-servers.net.): docd=ok
. @192.58.128.30 (j.root-servers.net.): docd=nocd
. @2001:503:c27::2:30 (j.root-servers.net.): docd=nocd
. @193.0.14.129 (k.root-servers.net.): docd=nocd
. @2001:7fd::1 (k.root-servers.net.): docd=nocd
. @199.7.83.42 (l.root-servers.net.): docd=nocd
. @2001:500:9f::42 (l.root-servers.net.): docd=nocd
. @202.12.27.33 (m.root-servers.net.): docd=ok
. @2001:dc3::35 (m.root-servers.net.): docd=ok

-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742              INTERNET: marka at isc.org




More information about the dns-operations mailing list