[dns-operations] Dealing with the bizarre - grantee.fema.gov

Stephane Bortzmeyer bortzmeyer at nic.fr
Wed Jul 8 19:15:02 UTC 2020


On Wed, Jul 08, 2020 at 11:20:27AM -0700,
 Brian Somers <bsomers at opendns.com> wrote 
 a message of 38 lines which said:

> I can only suspect that all 3 of these resolvers have an NTA for
> this domain!

No. My BIND and Unbound personal resolvers (which do not have a NTA)
get a reply and set AD. <xfiles>The truth is elsewhere.</xfiles>

% dig A grantee.fema.gov.

; <<>> DiG 9.11.5-P4-5.1+deb10u1-Debian <<>> A grantee.fema.gov.
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 62146
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL:
;; 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 4096
;; QUESTION SECTION:
;grantee.fema.gov.	IN A

;; ANSWER SECTION:
grantee.fema.gov.	30 IN A	173.255.49.196
grantee.fema.gov.	30 IN RRSIG A 10 3 30 (
			      	    20200715002926 20200708002926
				    38990 grantee.fema.gov.
								RolWLU7SxjgBJGOIXELMDVXK641r1oI3p7icXEJLjWM+
												4GLdidyuwIqnSr5GyzG5zBSW4g+J9ZZWvz18asrCJcqp
																+t+DtARbXoumyyTWMTKRh1TtqkQre3ncfM3vQAEOtRbp
																				Tjq3jmBdrwv+VQElWRYQ0H2Oy3NhiRQ6EJXNvOs=
																				)
																				grantee.fema.gov.
																				30
																				IN
																				RRSIG
																				A
																				10
																				3
																				30
																				(
																								20200712161915
																								20200705161915
																								25856
																								grantee.fema.gov.
																												NIKjzoiiFtvZ6KhH+eOF+ikxSU9iomF7aizRmN15Z23x
																																fVQkxB8sKRYtFdfWzlY5oBl0V/LVAXJI+TeuN4ovv+cT
																																				7EZGYAC5q6y6I2CmcTtoDgmFHbSS90bLUC5ndYornCLD
																																								YIb0Y2iMJ1P6kERDH9B4nTZoAJibUroB3t4y0z0=
																																								)

;; Query time: 385 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Wed Jul 08 21:14:03 CEST 2020
;; MSG SIZE  rcvd: 413


More information about the dns-operations mailing list