[dns-operations] s3.amazonaws.com problem?

[Stephane Bortzmeyer]

On Wed, Oct 23, 2019 at 11:34:57AM +0100,
 Greg Choules via dns-operations <dns-operations at dns-oarc.net> wrote 
 a message of 136 lines which said:

> It appears that Amazon are blocking queries of type CNAME.

Not for me.

% dig @ns-27.awsdns-03.com. CNAME mycloudydatadffgdfssdf.s3.amazonaws.com.

; <<>> DiG 9.11.5-P4-5.1-Debian <<>> @ns-27.awsdns-03.com. CNAME mycloudydatadffgdfssdf.s3.amazonaws.com.
; (2 servers found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 41613
;; flags: qr aa rd; QUERY: 1, ANSWER: 2, AUTHORITY: 4, ADDITIONAL: 9
;; WARNING: recursion requested but not available

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;mycloudydatadffgdfssdf.s3.amazonaws.com. IN CNAME

;; ANSWER SECTION:
mycloudydatadffgdfssdf.s3.amazonaws.com. 7519 IN CNAME s3-directional-w.amazonaws.com.
s3-directional-w.amazonaws.com.	600 IN CNAME s3-1-w.amazonaws.com.

;; AUTHORITY SECTION:
amazonaws.com.		3600 IN	NS r1.amazonaws.com.
amazonaws.com.		3600 IN	NS r2.amazonaws.com.
amazonaws.com.		3600 IN	NS u1.amazonaws.com.
amazonaws.com.		3600 IN	NS u2.amazonaws.com.

;; ADDITIONAL SECTION:
r1.amazonaws.com.	7211 IN	A 205.251.192.27
r1.amazonaws.com.	3583 IN	AAAA 2600:9000:5300:1b00::1
r2.amazonaws.com.	7213 IN	A 205.251.195.199
r2.amazonaws.com.	3613 IN	AAAA 2600:9000:5303:c700::1
u1.amazonaws.com.	1800 IN	A 156.154.64.10
u1.amazonaws.com.	3593 IN	AAAA 2001:502:f3ff::10
u2.amazonaws.com.	1800 IN	A 156.154.65.10
u2.amazonaws.com.	3607 IN	AAAA 2610:a1:1014::10

;; Query time: 207 msec
;; SERVER: 2600:9000:5300:1b00::1#53(2600:9000:5300:1b00::1)
;; WHEN: Wed Oct 23 13:40:23 CEST 2019
;; MSG SIZE  rcvd: 364

But some RIPE Atlas probes experience problems:

% blaeu-resolve -r 100 --type CNAME mycloudydatadffgdfss666df.s3.amazonaws.com.
[s3-directional-w.amazonaws.com.] : 78 occurrences 
[ERROR: SERVFAIL] : 9 occurrences 
[ERROR: FORMERR] : 1 occurrences 
[ERROR: NXDOMAIN] : 1 occurrences 
Test #23109470 done at 2019-10-23T11:41:28Z