in-addr.arpa server problems for europe?

Florian Weimer fw at deneb.enyo.de
Mon Feb 15 12:55:05 CST 2010


* Stephane Bortzmeyer:

> It is highly improbable that all these name servers are unreachable
> from you. Therefore, I suspect that *content* is the issue. RIPE-NCC
> zones are signed with DNSSEC. Are you sure you do not have a broken
> middlebox which deletes DNSSEC-signed answers?

Ahem. dig's +trace doesn't use EDNS by default, so no signatures and
(usually) no large responses.

For extra realism, you need to add +dnssec +norecurse, and +all for
usefulness.




More information about the NANOG mailing list