[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[public-dns-discuss] Re: Incorrect DNS Resolution for krk.kargo.com with 8.8.8.8



Your DNS provider (Dyn) is definitely at least a little bit broken since they should be returning a NODATA response (rather than SERVFAIL) for the attempt to lookup the DNSKEY.

$ dig +norec +dnssec DNSKEY kargo.com @ns1.p24.dynect.net

; <<>> DiG 9.11.2-P1-1-Debian <<>> +norec +dnssec DNSKEY kargo.com @ns1.p24.dynect.net
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 23011
;; flags: qr aa; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 4096
;; QUESTION SECTION:
;kargo.com. IN DNSKEY

;; Query time: 11 msec
;; SERVER: 2001:500:90:1::24#53(2001:500:90:1::24)
;; WHEN: Tue Jan 15 17:57:48 EST 2019
;; MSG SIZE  rcvd: 38

The domain in the authority section you sometimes see is rather odd, since krk.kargo.com isn't a delegated zone (it should be kargo.com). Do you have both a CNAME and some other record here? Or is this perhaps some special kind of ALIAS record rather than a plain CNAME?

--
You received this message because you are subscribed to the Google Groups "public-dns-discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an email to public-dns-discuss+unsubscribe AT googlegroups.com.
To post to this group, send email to public-dns-discuss AT googlegroups.com.
Visit this group at https://groups.google.com/group/public-dns-discuss.
To view this discussion on the web visit https://groups.google.com/d/msgid/public-dns-discuss/2172e549-8ee1-4d07-ba65-a5e1698c0574%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.