[DNSOP] m.root-servers.net DNSSEC TCP failures

"George Barwood" <george.barwood@blueyonder.co.uk> Wed, 17 March 2010 11:28 UTC

Return-Path: <george.barwood@blueyonder.co.uk>
X-Original-To: dnsop@core3.amsl.com
Delivered-To: dnsop@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 4309B3A6850 for <dnsop@core3.amsl.com>; Wed, 17 Mar 2010 04:28:27 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 3.681
X-Spam-Level: ***
X-Spam-Status: No, score=3.681 tagged_above=-999 required=5 tests=[AWL=-0.644, BAYES_50=0.001, DNS_FROM_OPENWHOIS=1.13, HELO_EQ_BLUEYON=1.4, MIME_BASE64_BLANKS=0.041, MIME_BASE64_TEXT=1.753]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Nwcd3Pi-Y4sn for <dnsop@core3.amsl.com>; Wed, 17 Mar 2010 04:28:26 -0700 (PDT)
Received: from smtp-out2.blueyonder.co.uk (smtp-out2.blueyonder.co.uk [195.188.213.5]) by core3.amsl.com (Postfix) with ESMTP id A07683A659A for <dnsop@ietf.org>; Wed, 17 Mar 2010 04:28:20 -0700 (PDT)
Received: from [172.23.170.145] (helo=anti-virus03-08) by smtp-out2.blueyonder.co.uk with smtp (Exim 4.52) id 1NrrQJ-0007zn-KL for dnsop@ietf.org; Wed, 17 Mar 2010 11:28:27 +0000
Received: from [92.238.99.235] (helo=GeorgeLaptop) by asmtp-out4.blueyonder.co.uk with esmtpa (Exim 4.52) id 1NrrQI-00077T-VK for dnsop@ietf.org; Wed, 17 Mar 2010 11:28:27 +0000
Message-ID: <3DBA4D6ECA684CE0AB62B1760AB64B65@localhost>
From: "George Barwood" <george.barwood@blueyonder.co.uk>
To: <dnsop@ietf.org>
Date: Wed, 17 Mar 2010 11:28:23 -0000
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: base64
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.5843
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5579
Subject: [DNSOP] m.root-servers.net DNSSEC TCP failures
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dnsop>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 17 Mar 2010 11:28:27 -0000

It seems that 

m.root-servers.net 

is now serving DNSSEC, but does not have TCP, so the following queries all fail

dig any . @m.root-servers.net
dig rrsig . @m.root-serves.net
dig any . @m.root-servers.net +dnssec +bufsize=1400

None of these are normal queries, but seems a bit doubtful even so.

George