<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
Hello all,<br>
<br>
A firewall misconfiguration was blocking IPv4 queries to our IPv6
authoritative servers. This has been corrected:<br>
<br>
<font size="-1"><tt>; <<>> DiG 9.10.4-P4
<<>> @8.8.8.8 -x 2001:500:a8::e<br>
; (1 server found)<br>
;; global options: +cmd<br>
;; Got answer:<br>
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id:
39298<br>
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0,
ADDITIONAL: 1<br>
<br>
;; OPT PSEUDOSECTION:<br>
; EDNS: version: 0, flags:; udp: 512<br>
;; QUESTION SECTION:<br>
;e.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.8.a.0.0.0.0.5.0.1.0.0.2.ip6.arpa.
IN PTR<br>
<br>
;; ANSWER SECTION:<br>
e.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.8.a.0.0.0.0.5.0.1.0.0.2.ip6.arpa.
86399 IN PTR e.root-servers.net.<br>
<br>
;; Query time: 164 msec<br>
;; SERVER: 8.8.8.8#53(8.8.8.8)<br>
;; WHEN: Thu Nov 17 15:57:31 PST 2016<br>
;; MSG SIZE rcvd: 133<br>
</tt><tt><br>
</tt></font>Please let me know if any questions.<br>
<br>
Thanks,<br>
Ray Gilstrap<br>
E-root/NASA Ames Research Center<br>
<br>
<blockquote
cite="mid:7A67106A-8227-4A9A-A5B9-DB7040995289@verisign.com"
type="cite">
<pre wrap="">
On 11/17/16, 3:41 PM, "dns-operations on behalf of Robert Edmonds" <a class="moz-txt-link-rfc2396E" href="mailto:dns-operations-bounces@dns-oarc.netonbehalfofedmonds@mycre.ws"><dns-operations-bounces@dns-oarc.net on behalf of edmonds@mycre.ws></a> wrote:
Shane Kerr wrote:
> $ for n in a b c d e f g h i j k l m; do host -t aaaa $n.root-servers.net; done
> a.root-servers.net has IPv6 address 2001:503:ba3e::2:30
> b.root-servers.net has IPv6 address 2001:500:84::b
> c.root-servers.net has IPv6 address 2001:500:2::c
> d.root-servers.net has IPv6 address 2001:500:2d::d
> e.root-servers.net has IPv6 address 2001:500:a8::e
> f.root-servers.net has IPv6 address 2001:500:2f::f
> g.root-servers.net has IPv6 address 2001:500:12::d0d
> h.root-servers.net has IPv6 address 2001:500:1::53
> i.root-servers.net has IPv6 address 2001:7fe::53
> j.root-servers.net has IPv6 address 2001:503:c27::2:30
> k.root-servers.net has IPv6 address 2001:7fd::1
> l.root-servers.net has IPv6 address 2001:500:9f::42
> m.root-servers.net has IPv6 address 2001:dc3::35
Just for fun I checked the corresponding PTRs. 12/13 came back with the
same owner name as the AAAA record, except for E-Root:
; <<>> DiG 9.10.3 <<>> @8.8.8.8 -x 2001:500:a8::e
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 12592
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; QUESTION SECTION:
;e.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.8.a.0.0.0.0.5.0.1.0.0.2.ip6.arpa. IN PTR
;; Query time: 10 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Thu Nov 17 15:32:03 EST 2016
;; MSG SIZE rcvd: 101
(Google)
; <<>> DiG 9.10.3 <<>> @184.105.193.73 -x 2001:500:a8::e
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 60123
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;e.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.8.a.0.0.0.0.5.0.1.0.0.2.ip6.arpa. IN PTR
;; Query time: 1107 msec
;; SERVER: 184.105.193.73#53(184.105.193.73)
;; WHEN: Thu Nov 17 15:32:32 EST 2016
;; MSG SIZE rcvd: 101
(OARC ODVR)
It looks like these nameservers don't respond to any queries:
8.a.0.0.0.0.5.0.1.0.0.2.ip6.arpa. 86400 IN NS tyson.eroot.nasa.gov.
8.a.0.0.0.0.5.0.1.0.0.2.ip6.arpa. 86400 IN NS sagan.eroot.nasa.gov.
;; Received 155 bytes from 199.71.0.63#53(x.arin.net) in 78 ms
--
Robert Edmonds
_______________________________________________
dns-operations mailing list
<a class="moz-txt-link-abbreviated" href="mailto:dns-operations@lists.dns-oarc.net">dns-operations@lists.dns-oarc.net</a>
<a class="moz-txt-link-freetext" href="https://lists.dns-oarc.net/mailman/listinfo/dns-operations">https://lists.dns-oarc.net/mailman/listinfo/dns-operations</a>
dns-operations mailing list
<a class="moz-txt-link-freetext" href="https://lists.dns-oarc.net/mailman/listinfo/dns-operations">https://lists.dns-oarc.net/mailman/listinfo/dns-operations</a>
</pre>
</blockquote>
<br>
</body>
</html>