[dns-operations] validation problem on 1.1.1.1

[Vicky Shrestha]

Hi,

We have identified the bug in a new version that was released to a subset
of colos. We have rolled out a fix.

how does it look now from your vantage point?

thanks again for bringing this to our attention

On Mon, Feb 3, 2020 at 02:19 T.Suzuki <tss at reflection.co.jp> wrote:

> Something strange...
>
> % dig soa nasa.gov @1.1.1.1 +dnssec
>
> ; <<>> DiG 9.9.5 <<>> soa nasa.gov @1.1.1.1 +dnssec +ad
> ;; global options: +cmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 20334
> ;; flags: qr rd ra ad; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1
>
> ~% dig soa nasa.gov @1.1.1.1 +dnssec +noad
>
> ; <<>> DiG 9.9.5 <<>> soa nasa.gov @1.1.1.1 +dnssec +noad
> ;; global options: +cmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 5374
> ;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1
>
> ~% drill -D soa nasa.gov @1.1.1.1
> ;; ->>HEADER<<- opcode: QUERY, rcode: NOERROR, id: 27047
> ;; flags: qr rd ra ; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0
> ;; QUESTION SECTION:
> ;; nasa.gov.    IN      SOA
>
> ~% drill -D -o AD soa nasa.gov @1.1.1.1
> ;; ->>HEADER<<- opcode: QUERY, rcode: NOERROR, id: 13840
> ;; flags: qr rd ra ad ; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0
> ;; QUESTION SECTION:
> ;; nasa.gov.    IN      SOA
>
> --
>
> ------------------------------------------------------------------------------
> T.Suzuki
>
-- 
With Regards,

Vicky Shrestha
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20200204/3de90f34/attachment.html>