[dns-operations] Seeking Advice: RIPEstat no longer recognizes my sub-zone under .university
Stephane Bortzmeyer
bortzmeyer at nic.fr
Mon Sep 7 09:01:57 UTC 2020
On Mon, Sep 07, 2020 at 10:43:57AM +0200,
Stephane Bortzmeyer <bortzmeyer at nic.fr> wrote
a message of 22 lines which said:
> Since the main weakness of this domain is the lack of diversity in
> authoritative name servers' IP addresses, I guess that your problem
> comes from a routing issue between RIPE NCC and 158.108.0.0/16 (and
> 2406:3100::/32).
Speaking of routing, and while it is probably not the root cause of
your problem, you may want to review the security of
158.108.0.0/16. There is one ROA for the origin 9411 (OK) but also
route objects for other origins such as 4618. One of them is in the
NTT IRR (others in RADB, which is probably less reliable).
Anyway, some RIPE Atlas probes seem to have trouble reaching your name servers:
% blaeu-resolve -r 100 --nameserver 158.108.216.53 --type A kasetsart.university
Nameserver 158.108.216.53
[158.108.216.5] : 20 occurrences
[TIMEOUT] : 2 occurrences
Test #27041050 done at 2020-09-07T08:50:23Z
More information about the dns-operations
mailing list