[outages] ntp.org DNS lookups failing
Alarig Le Lay
alarig at swordarmor.fr
Wed Jan 18 20:35:34 UTC 2017
Hi,
On Wed Jan 18 21:25:23 2017, Gert Doering via Outages wrote:
> Trying to query directly, ns1/ns2.ntp.org return SERVFAIL as well,
> and ns1/ns2.everett.org do not reply at all... so pure guesswork on
> my side says "the original set is broken / under attack / ..., so
> new servers have been added, but as long as the old NS records are
> still being cached, things keep failing".
I see the same behaviour:
alarig at pikachu ~ % dig -t NS ntp.org
; <<>> DiG 9.11.0-P2 <<>> -t NS ntp.org
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 44422
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;ntp.org. IN NS
;; Query time: 52 msec
;; SERVER: 2a00:5884:8218::1#53(2a00:5884:8218::1)
;; WHEN: Wed Jan 18 21:28:08 CET 2017
;; MSG SIZE rcvd: 36
alarig at pikachu ~ % ssh alarig at log.bzh
alarig at log:~$ sudo unbound-control flush_zone ntp.org
[sudo] password for alarig:
ok removed 8 rrsets, 0 messages and 0 key entries
^D
alarig at log:~$ déconnexion
Connection to log.bzh closed.
alarig at pikachu ~ % dig -t NS ntp.org
; <<>> DiG 9.11.0-P2 <<>> -t NS ntp.org
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 53621
;; flags: qr rd ra; QUERY: 1, ANSWER: 9, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;ntp.org. IN NS
;; ANSWER SECTION:
ntp.org. 3600 IN NS ns1.everett.org.
ntp.org. 3600 IN NS ns2.everett.org.
ntp.org. 3600 IN NS ns4.p20.dynect.net.
ntp.org. 3600 IN NS dns2.udel.edu.
ntp.org. 3600 IN NS anyns.pch.net.
ntp.org. 3600 IN NS dns1.udel.edu.
ntp.org. 3600 IN NS ns1.p20.dynect.net.
ntp.org. 3600 IN NS ns2.p20.dynect.net.
ntp.org. 3600 IN NS ns3.p20.dynect.net.
;; Query time: 178 msec
;; SERVER: 2a00:5884:8218::1#53(2a00:5884:8218::1)
;; WHEN: Wed Jan 18 21:31:51 CET 2017
;; MSG SIZE rcvd: 236
--
alarig
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 473 bytes
Desc: not available
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20170118/e25cf6e6/attachment.sig>
More information about the NANOG
mailing list