[dns-operations] Looking for someone in charge for gtm-ext.dla.mil, DNSSEC validates as Bogus

Casey Deccio casey at deccio.net
Fri Mar 12 00:10:49 UTC 2021


> On Mar 11, 2021, at 4:54 PM, Simon Arlott via dns-operations <dns-operations at dns-oarc.net> wrote:
> 
> On 11/03/2021 23:36, Casey Deccio wrote:
>> Oh, I see now.  The actual delegation is missing completely, as far as I can tell.
>> 
>> $ dig +short @ns1.dla.mil gtm-ext.dla.mil a
>> $ dig +short @ns1.dla.mil gtm-ext.dla.mil aaaa
>> $ dig +short @ns1.dla.mil gtm-ext.dla.mil ns
> 
> The TTLs go down when querying ns1 and ns4, so it's proxying for
> something else.
> 
> There are NS records, but you can only get them if you query for ANY,
> and only some of the time depending on which load balancer you hit:

And depending on the phase of the moon and the alignment of the stars, apparently. :)

Casey
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20210311/b24f2802/attachment.html>


More information about the dns-operations mailing list