<html><head></head><body><div><div><div class=""><div class=""><div class=""><div class=""><br></div></div><br><div class="sh-signature"><div class="gmail_signature"><br></div></div></div><br><div class="sh-quoted-content"><div class=""><div class="gmail_quote">On Fri, Aug 22, 2025 at 3:04 AM, Ralf Weber <span dir="ltr" class=""><<a href="mailto:dns@fl1ger.de" target="_blank" class="">dns@fl1ger.de</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="gmail_extra"><div class="gmail_quote"><p class="">Moin!
<br></p><p class="">
On 21 Aug 2025, at 21:46, Chad Dailey wrote:
<br></p><blockquote class=""><p class="">
Maybe it's some FNG stuff... but we're having some issues resolving
<a target="_blank" rel="noopener noreferrer" href="http://samsung.com/" class="">samsung.<wbr>com</a> records, the .ic zones look like they don't belong:
<br></p></blockquote><p class="">
Well .ic does not exist in the global DNS, so all of these servers
can’t be reached from the public Internet. Maybe they are resolvable
internal at Samsung, but as I have no connection there I don’t know.
<br></p></div></div></blockquote></div></div></div></div><div><div><br></div><div><br></div><div>Yeah, it's been like this for a long time — e.g: <a href="https://dnsviz.net/d/samsung.com/Zs3oyg/responses/">https://dnsviz.net/d/samsung.com/Zs3oyg/responses/</a> (around a year ago).<br></div><div><br></div><div>I tried reaching out to the maintainer (dns01.cst.ic.), before realizing that that ain't gonna work either :-)<br></div><div><br></div><div>I also tried emailing the WHOIS contact (Registrant Email: <a href="mailto:ssdomain@samsung.com">ssdomain@samsung.com</a>), before deciding that I didn't really care…<br></div><div><br></div><div>W</div><div><br></div><div><br></div><div><br></div></div><div class=""><div class="sh-quoted-content"><div class=""><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="gmail_extra"><div class="gmail_quote"><p class="">They are also not in the delegation set from .com:
<br></p><p class="">
zsh ❯ dig ns <a target="_blank" rel="noopener noreferrer" href="http://samsung.com/" class="">samsung.<wbr>com</a> @<a href="http://f.gtld-servers.net">f.gtld-servers.net</a>
<br></p><p class="">
; <<>> DiG 9.20.8 <<>> ns <a target="_blank" rel="noopener noreferrer" href="http://samsung.com/" class="">samsung.<wbr>com</a> @<a href="http://f.gtld-servers.net">f.gtld-servers.net</a>
<br>
;; global options: +cmd
<br>
;; Got answer:
<br>
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 46015
<br>
;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 6, ADDITIONAL: 7
<br>
;; WARNING: recursion requested but not available
</p><p class="">
;; OPT PSEUDOSECTION:
<br>
; EDNS: version: 0, flags:; udp: 4096
<br>
;; QUESTION SECTION:
<br>
;<a target="_blank" rel="noopener noreferrer" href="http://samsung.com/" class="">samsung.<wbr>com</a>. IN NS
</p><p class="">
;; AUTHORITY SECTION:
<br>
<a target="_blank" rel="noopener noreferrer" href="http://samsung.com/" class="">samsung.<wbr>com</a>. 172800 IN NS <a target="_blank" rel="noopener noreferrer" href="http://dnssm.samsung.com/" class="">dnssm.<wbr>samsung.<wbr>com</a>.
<br>
<a target="_blank" rel="noopener noreferrer" href="http://samsung.com/" class="">samsung.<wbr>com</a>. 172800 IN NS <a target="_blank" rel="noopener noreferrer" href="http://dnsst.samsung.com/" class="">dnsst.<wbr>samsung.<wbr>com</a>.
<br>
<a target="_blank" rel="noopener noreferrer" href="http://samsung.com/" class="">samsung.<wbr>com</a>. 172800 IN NS <a target="_blank" rel="noopener noreferrer" href="http://dnsst2.samsung.com/" class="">dnsst2.<wbr>samsung.<wbr>com</a>.
<br>
<a target="_blank" rel="noopener noreferrer" href="http://samsung.com/" class="">samsung.<wbr>com</a>. 172800 IN NS <a target="_blank" rel="noopener noreferrer" href="http://dnssm2.samsung.com/" class="">dnssm2.<wbr>samsung.<wbr>com</a>.
<br>
<a target="_blank" rel="noopener noreferrer" href="http://samsung.com/" class="">samsung.<wbr>com</a>. 172800 IN NS <a target="_blank" rel="noopener noreferrer" href="http://dns-gi1.samsung.com/" class="">dns-gi1.<wbr>samsung.<wbr>com</a>.
<br>
<a target="_blank" rel="noopener noreferrer" href="http://samsung.com/" class="">samsung.<wbr>com</a>. 172800 IN NS <a target="_blank" rel="noopener noreferrer" href="http://dns-awskr1.samsung.com/" class="">dns-awskr1.<wbr>samsung.<wbr>com</a>.
</p><p class="">
;; ADDITIONAL SECTION:
<br>
<a target="_blank" rel="noopener noreferrer" href="http://dnssm.samsung.com/" class="">dnssm.<wbr>samsung.<wbr>com</a>. 172800 IN A 203.241.132.51
<br>
<a target="_blank" rel="noopener noreferrer" href="http://dnsst.samsung.com/" class="">dnsst.<wbr>samsung.<wbr>com</a>. 172800 IN A 203.241.135.51
<br>
<a target="_blank" rel="noopener noreferrer" href="http://dnsst2.samsung.com/" class="">dnsst2.<wbr>samsung.<wbr>com</a>. 172800 IN A 112.106.53.58
<br>
<a target="_blank" rel="noopener noreferrer" href="http://dnssm2.samsung.com/" class="">dnssm2.<wbr>samsung.<wbr>com</a>. 172800 IN A 112.107.53.58
<br>
<a target="_blank" rel="noopener noreferrer" href="http://dns-gi1.samsung.com/" class="">dns-gi1.<wbr>samsung.<wbr>com</a>. 172800 IN A 203.241.132.185
<br>
<a target="_blank" rel="noopener noreferrer" href="http://dns-awskr1.samsung.com/" class="">dns-awskr1.<wbr>samsung.<wbr>com</a>. 172800 IN A 52.79.211.80
</p><p class="">
;; Query time: 8 msec
<br>
;; SERVER: 2001:503:d414::30#53(<a target="_blank" rel="noopener noreferrer" href="http://f.gtld-servers.net/" class="">f.<wbr>gtld-servers.<wbr>net</a>) (UDP)
<br>
;; WHEN: <span class="sh-date">Fri Aug 22</span> 08:57:49 CEST 2025
<br>
;; MSG SIZE rcvd: 265
</p><p class="">
However Samsung is handing them out on the delegated server:
<br></p><p class="">
zsh ❯ dig +nocookie NS <a target="_blank" rel="noopener noreferrer" href="http://samsung.com/" class="">samsung.<wbr>com</a> @<a href="http://203.241.132.51">203.241.132.51</a>
<br></p><p class="">
; <<>> DiG 9.20.8 <<>> +nocookie NS <a target="_blank" rel="noopener noreferrer" href="http://samsung.com/" class="">samsung.<wbr>com</a> @<a href="http://203.241.132.51">203.241.132.51</a>
<br>
;; global options: +cmd
<br>
;; Got answer:
<br>
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 43916
<br>
;; flags: qr aa rd; QUERY: 1, ANSWER: 15, AUTHORITY: 0, ADDITIONAL: 14
<br>
;; WARNING: recursion requested but not available
</p><p class="">
;; OPT PSEUDOSECTION:
<br>
; EDNS: version: 0, flags:; udp: 1220
<br>
;; QUESTION SECTION:
<br>
;<a target="_blank" rel="noopener noreferrer" href="http://samsung.com/" class="">samsung.<wbr>com</a>. IN NS
</p><p class="">
;; ANSWER SECTION:
<br>
<a target="_blank" rel="noopener noreferrer" href="http://samsung.com/" class="">samsung.<wbr>com</a>. 300 IN NS auth03.sam.ic.
<br>
<a target="_blank" rel="noopener noreferrer" href="http://samsung.com/" class="">samsung.<wbr>com</a>. 300 IN NS <a target="_blank" rel="noopener noreferrer" href="http://dnssm2.samsung.com/" class="">dnssm2.<wbr>samsung.<wbr>com</a>.
<br>
<a target="_blank" rel="noopener noreferrer" href="http://samsung.com/" class="">samsung.<wbr>com</a>. 300 IN NS auth02.nhn.ic.
<br>
<a target="_blank" rel="noopener noreferrer" href="http://samsung.com/" class="">samsung.<wbr>com</a>. 300 IN NS <a target="_blank" rel="noopener noreferrer" href="http://dns-awskr1.samsung.com/" class="">dns-awskr1.<wbr>samsung.<wbr>com</a>.
<br>
<a target="_blank" rel="noopener noreferrer" href="http://samsung.com/" class="">samsung.<wbr>com</a>. 300 IN NS auth01.sam.ic.
<br>
<a target="_blank" rel="noopener noreferrer" href="http://samsung.com/" class="">samsung.<wbr>com</a>. 300 IN NS <a target="_blank" rel="noopener noreferrer" href="http://dnsst2.samsung.com/" class="">dnsst2.<wbr>samsung.<wbr>com</a>.
<br>
<a target="_blank" rel="noopener noreferrer" href="http://samsung.com/" class="">samsung.<wbr>com</a>. 300 IN NS <a target="_blank" rel="noopener noreferrer" href="http://dnssm.samsung.com/" class="">dnssm.<wbr>samsung.<wbr>com</a>.
<br>
<a target="_blank" rel="noopener noreferrer" href="http://samsung.com/" class="">samsung.<wbr>com</a>. 300 IN NS <a target="_blank" rel="noopener noreferrer" href="http://dns-gi1.samsung.com/" class="">dns-gi1.<wbr>samsung.<wbr>com</a>.
<br>
<a target="_blank" rel="noopener noreferrer" href="http://samsung.com/" class="">samsung.<wbr>com</a>. 300 IN NS auth04.sam.ic.
<br>
<a target="_blank" rel="noopener noreferrer" href="http://samsung.com/" class="">samsung.<wbr>com</a>. 300 IN NS auth04.nhn.ic.
<br>
<a target="_blank" rel="noopener noreferrer" href="http://samsung.com/" class="">samsung.<wbr>com</a>. 300 IN NS auth03.nhn.ic.
<br>
<a target="_blank" rel="noopener noreferrer" href="http://samsung.com/" class="">samsung.<wbr>com</a>. 300 IN NS <a target="_blank" rel="noopener noreferrer" href="http://dns-gi2.samsung.com/" class="">dns-gi2.<wbr>samsung.<wbr>com</a>.
<br>
<a target="_blank" rel="noopener noreferrer" href="http://samsung.com/" class="">samsung.<wbr>com</a>. 300 IN NS auth01.nhn.ic.
<br>
<a target="_blank" rel="noopener noreferrer" href="http://samsung.com/" class="">samsung.<wbr>com</a>. 300 IN NS <a target="_blank" rel="noopener noreferrer" href="http://dnsst.samsung.com/" class="">dnsst.<wbr>samsung.<wbr>com</a>.
<br>
<a target="_blank" rel="noopener noreferrer" href="http://samsung.com/" class="">samsung.<wbr>com</a>. 300 IN NS auth02.sam.ic.
</p><p class="">
;; ADDITIONAL SECTION:
<br>
<a target="_blank" rel="noopener noreferrer" href="http://dns-awskr1.samsung.com/" class="">dns-awskr1.<wbr>samsung.<wbr>com</a>. 300 IN A 52.79.211.80
<br>
<a target="_blank" rel="noopener noreferrer" href="http://dns-gi2.samsung.com/" class="">dns-gi2.<wbr>samsung.<wbr>com</a>. 300 IN A 203.241.132.185
<br>
<a target="_blank" rel="noopener noreferrer" href="http://dns-gi2.samsung.com/" class="">dns-gi2.<wbr>samsung.<wbr>com</a>. 300 IN A 203.241.135.185
<br>
<a target="_blank" rel="noopener noreferrer" href="http://dns-gi2.samsung.com/" class="">dns-gi2.<wbr>samsung.<wbr>com</a>. 300 IN A 203.241.135.186
<br>
<a target="_blank" rel="noopener noreferrer" href="http://dnssm2.samsung.com/" class="">dnssm2.<wbr>samsung.<wbr>com</a>. 300 IN A 112.107.53.58
<br>
<a target="_blank" rel="noopener noreferrer" href="http://dnsst2.samsung.com/" class="">dnsst2.<wbr>samsung.<wbr>com</a>. 300 IN A 112.106.53.58
<br>
<a target="_blank" rel="noopener noreferrer" href="http://dnsst.samsung.com/" class="">dnsst.<wbr>samsung.<wbr>com</a>. 300 IN A 203.241.135.51
<br>
<a target="_blank" rel="noopener noreferrer" href="http://dnssm.samsung.com/" class="">dnssm.<wbr>samsung.<wbr>com</a>. 300 IN A 203.241.132.51
<br>
<a target="_blank" rel="noopener noreferrer" href="http://dns-gi1.samsung.com/" class="">dns-gi1.<wbr>samsung.<wbr>com</a>. 300 IN A 203.241.132.185
<br>
<a target="_blank" rel="noopener noreferrer" href="http://dnssm2.samsung.com/" class="">dnssm2.<wbr>samsung.<wbr>com</a>. 300 IN AAAA 2001:330:a:300b:112:107:53:58
<a target="_blank" rel="noopener noreferrer" href="http://dnsst2.samsung.com/" class="">dnsst2.<wbr>samsung.<wbr>com</a>. 300 IN AAAA 2001:330:a:b:112:106:53:58
<a target="_blank" rel="noopener noreferrer" href="http://dnsst.samsung.com/" class="">dnsst.<wbr>samsung.<wbr>com</a>. 300 IN AAAA 2001:330:a:a:203:241:135:51
<a target="_blank" rel="noopener noreferrer" href="http://dnssm.samsung.com/" class="">dnssm.<wbr>samsung.<wbr>com</a>. 300 IN AAAA 2001:330:a:300a:203:241:132:51
</p><p class="">
;; Query time: 271 msec
<br>
;; SERVER: 203.241.132.51#53(203.241.132.51) (UDP)
<br>
;; WHEN: <span class="sh-date">Fri Aug 22</span> 08:59:52 CEST 2025
<br>
;; MSG SIZE rcvd: 627
</p><p class="">
Your resolver however should ignore these incorrect servers and
if you have a “parent centric” resolver it will never try to
resolve them as they are not in the delegated name server set.
<br></p><p class="">
So long
<br>
-Ralf
<br>
---
<br>
Ralf Weber
<br>
_______________________________________________
<br>
dns-operations mailing list
<br>
<a target="_blank" rel="noopener noreferrer" href="mailto:dns-operations@lists.dns-oarc.net" class="">dns-operations@<wbr>lists.<wbr>dns-oarc.<wbr>net</a>
<br>
<a target="_blank" rel="noopener noreferrer" href="https://lists.dns-oarc.net/mailman/listinfo/dns-operations" class="">https:/<wbr>/<wbr>lists.<wbr>dns-oarc.<wbr>net/<wbr>mailman/<wbr>listinfo/<wbr>dns-operations</a></p></div></div></blockquote></div></div></div></div><div><br></div></div><div></div></div></body></html>