<div dir="ltr">This is the problem:<div><br></div><div><a href="https://lists.isc.org/mailman/htdig/bind-users/2024-April/108469.html">https://lists.isc.org/mailman/htdig/bind-users/2024-April/108469.html</a><br></div><div><br></div><div>Not a new problem.</div><div><br></div><div><a href="https://lists.isc.org/mailman/htdig/bind-users/2018-May/100229.html">https://lists.isc.org/mailman/htdig/bind-users/2018-May/100229.html</a><br></div><div><br></div></div><br><div class="gmail_quote gmail_quote_container"><div dir="ltr" class="gmail_attr">On Tue, Dec 17, 2024 at 12:19 PM Ondřej Surý <<a href="mailto:ondrej@isc.org">ondrej@isc.org</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div><div>Crosscheck this with DNSSEC Debugger from Verisign:</div><div><br></div><div><div style="display:block"><div style="display:inline-block" role="link"><a style="border-radius:10px;font-family:-apple-system,Helvetica,Arial,sans-serif;display:block;width:300px;overflow:hidden;text-decoration:none" rel="nofollow" href="https://dnssec-analyzer.verisignlabs.com/extranet.aro.army.mil" dir="ltr" role="button" width="300" target="_blank"><table style="table-layout:fixed;border-collapse:collapse;width:300px;background-color:rgb(229,230,233);font-family:-apple-system,Helvetica,Arial,sans-serif" cellpadding="0" cellspacing="0" border="0" width="300"><tbody><tr><td><table bgcolor="#E5E6E9" cellpadding="0" cellspacing="0" width="300" style="table-layout:fixed;font-family:-apple-system,Helvetica,Arial,sans-serif;background-color:rgb(229,230,233)"><tbody><tr><td style="padding:8px 0px"><div style="max-width:100%;margin:0px 16px;overflow:hidden"><div style="font-weight:400;font-size:11px;overflow:hidden;text-overflow:ellipsis;text-align:left"><a rel="nofollow" href="https://dnssec-analyzer.verisignlabs.com/extranet.aro.army.mil" style="text-decoration:none" target="_blank"><font color="#808080" style="color:rgba(0,0,0,0.498)">dnssec-analyzer.verisignlabs.com</font></a></div></div></td><td style="padding:0px 12px 0px 0px" width="32"><a rel="nofollow" href="https://dnssec-analyzer.verisignlabs.com/extranet.aro.army.mil" target="_blank"><img style="display: inline-block; width: 32px; height: 32px;" width="32" height="32"></a></td></tr></tbody></table></td></tr></tbody></table></a></div></div><br></div><div><br></div><div><table style="font-variant-caps:normal;border-style:none;color:rgb(103,103,103);font-family:Verdana,sans-serif;font-size:11px"><tbody><tr id="m_3932006373910463482no-ds-in-parent-akamai.csd.disa.mil" style="background-color:rgb(255,255,255)"><td style="border:1px black;padding:0px 0.2em"><img src="cid:ii_193d7b260584077a34c1" style="width: 1em;" alt="red.png"></td><td style="border:1px black;padding:0px 0.2em">No DS records found for <a href="http://akamai.csd.disa.mil" target="_blank">akamai.csd.disa.mil</a> in the <a href="http://csd.disa.mil" target="_blank">csd.disa.mil</a> zone</td></tr><tr id="m_3932006373910463482query-timeout-akamai.csd.disa.mil" style="background-color:rgb(255,255,255)"><td style="border:1px black;padding:0px 0.2em"><img src="cid:ii_193d7b26059dde3a5af2" style="width: 1em;" alt="yellow.png"></td><td style="border:1px black;padding:0px 0.2em">All Queries to <a href="http://dns3.akamai.csd.disa.mil" target="_blank">dns3.akamai.csd.disa.mil</a> for <a href="http://akamai.csd.disa.mil/DNSKEY" target="_blank">akamai.csd.disa.mil/DNSKEY</a> timed out or failed</td></tr><tr id="m_3932006373910463482query-timeout-akamai.csd.disa.mil" style="background-color:rgb(255,255,255)"><td style="border:1px black;padding:0px 0.2em"><img src="cid:D9E63CE8-2934-4D64-982E-43ECE8D7D89A" style="width: 1em;" alt="yellow.png"></td><td style="border:1px black;padding:0px 0.2em">All Queries to <a href="http://dns1.akamai.csd.disa.mil" target="_blank">dns1.akamai.csd.disa.mil</a> for <a href="http://akamai.csd.disa.mil/DNSKEY" target="_blank">akamai.csd.disa.mil/DNSKEY</a> timed out or failed</td></tr><tr id="m_3932006373910463482query-timeout-akamai.csd.disa.mil" style="background-color:rgb(255,255,255)"><td style="border:1px black;padding:0px 0.2em"><img src="cid:87A0D0A0-9C38-4FC9-9BD6-E3C6FE982B68" style="width: 1em;" alt="yellow.png"></td><td style="border:1px black;padding:0px 0.2em">All Queries to <a href="http://dns2.akamai.csd.disa.mil" target="_blank">dns2.akamai.csd.disa.mil</a> for <a href="http://akamai.csd.disa.mil/DNSKEY" target="_blank">akamai.csd.disa.mil/DNSKEY</a> timed out or failed</td></tr><tr id="m_3932006373910463482query-timeout-akamai.csd.disa.mil" style="background-color:rgb(255,255,255)"><td style="border:1px black;padding:0px 0.2em"><img src="cid:38CB16A3-1805-4C03-8A59-93C25D7DD476" style="width: 1em;" alt="yellow.png"></td><td style="border:1px black;padding:0px 0.2em">All Queries to <a href="http://dns4.akamai.csd.disa.mil" target="_blank">dns4.akamai.csd.disa.mil</a> for <a href="http://akamai.csd.disa.mil/DNSKEY" target="_blank">akamai.csd.disa.mil/DNSKEY</a> timed out or failed</td></tr><tr id="m_3932006373910463482dnskey-query-failed-akamai.csd.disa.mil" style="background-color:rgb(255,255,255)"><td style="border:1px black;padding:0px 0.2em"><img src="cid:1CB82997-6378-41AA-A0A7-734BF6B041C6" style="width: 1em;" alt="red.png"></td><td style="border:1px black;padding:0px 0.2em">Failed to get DNSKEY RR set for zone <a href="http://akamai.csd.disa.mil" target="_blank">akamai.csd.disa.mil</a></td></tr><tr id="m_3932006373910463482query-timeout-akamai.csd.disa.mil" style="background-color:rgb(255,255,255)"><td style="border:1px black;padding:0px 0.2em"><img src="cid:75D52B0D-21D6-42D3-9901-7D4179F8067B" style="width: 1em;" alt="yellow.png"></td><td style="border:1px black;padding:0px 0.2em">All Queries to <a href="http://dns2.akamai.csd.disa.mil" target="_blank">dns2.akamai.csd.disa.mil</a> for <a href="http://aro.army.mil.edgekey.dmz.akamai.csd.disa.mil/A" target="_blank">aro.army.mil.edgekey.dmz.akamai.csd.disa.mil/A</a> timed out or failed</td></tr><tr id="m_3932006373910463482query-timeout-akamai.csd.disa.mil" style="background-color:rgb(255,255,255)"><td style="border:1px black;padding:0px 0.2em"><img src="cid:AA70DAE7-041D-4B74-B4C9-8FC8E835A780" style="width: 1em;" alt="yellow.png"></td><td style="border:1px black;padding:0px 0.2em">All Queries to <a href="http://dns4.akamai.csd.disa.mil" target="_blank">dns4.akamai.csd.disa.mil</a> for <a href="http://aro.army.mil.edgekey.dmz.akamai.csd.disa.mil/A" target="_blank">aro.army.mil.edgekey.dmz.akamai.csd.disa.mil/A</a> timed out or failed</td></tr><tr id="m_3932006373910463482query-timeout-akamai.csd.disa.mil" style="background-color:rgb(255,255,255)"><td style="border:1px black;padding:0px 0.2em"><img src="cid:AB53B5F8-D5F6-4544-85F1-1BDD434E53F9" style="width: 1em;" alt="yellow.png"></td><td style="border:1px black;padding:0px 0.2em">All Queries to <a href="http://dns3.akamai.csd.disa.mil" target="_blank">dns3.akamai.csd.disa.mil</a> for <a href="http://aro.army.mil.edgekey.dmz.akamai.csd.disa.mil/A" target="_blank">aro.army.mil.edgekey.dmz.akamai.csd.disa.mil/A</a> timed out or failed</td></tr><tr id="m_3932006373910463482query-timeout-akamai.csd.disa.mil" style="background-color:rgb(255,255,255)"><td style="border:1px black;padding:0px 0.2em"><img src="cid:4E413756-0A62-4A10-BAA9-DD4298DC6EB1" style="width: 1em;" alt="yellow.png"></td><td style="border:1px black;padding:0px 0.2em">All Queries to <a href="http://dns1.akamai.csd.disa.mil" target="_blank">dns1.akamai.csd.disa.mil</a> for <a href="http://aro.army.mil.edgekey.dmz.akamai.csd.disa.mil/A" target="_blank">aro.army.mil.edgekey.dmz.akamai.csd.disa.mil/A</a> timed out or failed</td></tr><tr id="m_3932006373910463482no-nameserver-response-akamai.csd.disa.mil" style="background-color:rgb(255,255,255)"><td style="border:1px black;padding:0px 0.2em"><img src="cid:43E28A34-26AF-48B6-A72A-7E910E6317CA" style="width: 1em;" alt="red.png"></td><td style="border:1px black;padding:0px 0.2em">No response from <a href="http://akamai.csd.disa.mil" target="_blank">akamai.csd.disa.mil</a> nameservers</td></tr></tbody></table></div><br id="m_3932006373910463482lineBreakAtBeginningOfMessage"><div>
<div dir="auto" style="color:rgb(0,0,0);letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration:none"><div style="color:rgb(0,0,0);letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px"><div style="overflow-wrap: break-word;"><div style="color:rgb(0,0,0);font-family:Helvetica;font-size:12px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px">--</div><div style="color:rgb(0,0,0);font-family:Helvetica;font-size:12px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px">Ondřej Surý (He/Him)</div><div style="color:rgb(0,0,0);font-family:Helvetica;font-size:12px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px"><a href="mailto:ondrej@isc.org" target="_blank">ondrej@isc.org</a></div><div style="color:rgb(0,0,0);font-family:Helvetica;font-size:12px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px"><br></div><div style="color:rgb(0,0,0);font-family:Helvetica;font-size:12px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px">My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours.</div></div></div></div>
</div>
<div><br><blockquote type="cite"><div>On 17. 12. 2024, at 21:16, Ondřej Surý <<a href="mailto:ondrej@isc.org" target="_blank">ondrej@isc.org</a>> wrote:</div><br><div><div><a href="http://disa.mil" target="_blank">disa.mil</a> servers are timing out on me over IPv6:<div><br></div><div><div>$ dig IN NS <a href="http://gcds.disa.mil" target="_blank">gcds.disa.mil</a>. @<a href="http://DNS1.DISA.MIL" target="_blank">DNS1.DISA.MIL</a>.</div><div>;; communications error to 2608:125:0:1811:1001:9012:f00:20#53: timed out</div><div>;; communications error to 2608:125:0:1811:1001:9012:f00:20#53: timed out</div><div>;; communications error to 2608:125:0:1811:1001:9012:f00:20#53: timed out</div><div><br></div><div>; <<>> DiG 9.21.3-1+0~20241211.133+debian12~1.gbp5b5fe5-Debian <<>> IN NS <a href="http://gcds.disa.mil" target="_blank">gcds.disa.mil</a>. @<a href="http://DNS1.DISA.MIL" target="_blank">DNS1.DISA.MIL</a>.</div><div>;; global options: +cmd</div><div>;; Got answer:</div><div>;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 55426</div><div>;; flags: qr aa rd; QUERY: 1, ANSWER: 5, AUTHORITY: 0, ADDITIONAL: 7</div><div>;; WARNING: recursion requested but not available</div><div><br></div><div>;; OPT PSEUDOSECTION:</div><div>; EDNS: version: 0, flags:; udp: 4096</div><div>;; QUESTION SECTION:</div><div>;<a href="http://gcds.disa.mil" target="_blank">gcds.disa.mil</a>. IN NS</div><div><br></div><div>;; ANSWER SECTION:</div><div><a href="http://gcds.disa.mil" target="_blank">gcds.disa.mil</a>. 12699 IN NS <a href="http://dns1.disa.mil" target="_blank">dns1.disa.mil</a>.</div><div><a href="http://gcds.disa.mil" target="_blank">gcds.disa.mil</a>. 12699 IN NS <a href="http://dns3.disa.mil" target="_blank">dns3.disa.mil</a>.</div><div><a href="http://gcds.disa.mil" target="_blank">gcds.disa.mil</a>. 12699 IN NS <a href="http://dns5.disa.mil" target="_blank">dns5.disa.mil</a>.</div><div><a href="http://gcds.disa.mil" target="_blank">gcds.disa.mil</a>. 12699 IN NS <a href="http://dns2.disa.mil" target="_blank">dns2.disa.mil</a>.</div><div><a href="http://gcds.disa.mil" target="_blank">gcds.disa.mil</a>. 12699 IN NS <a href="http://dns4.disa.mil" target="_blank">dns4.disa.mil</a>.</div><div><br></div><div>;; ADDITIONAL SECTION:</div><div><a href="http://dns1.disa.mil" target="_blank">dns1.disa.mil</a>. 7151 IN AAAA 2608:125:0:1811:1001:9012:f00:20</div><div><a href="http://dns2.disa.mil" target="_blank">dns2.disa.mil</a>. 7151 IN AAAA 2608:102:0:182d:1001:9012:c00:20</div><div><a href="http://dns3.disa.mil" target="_blank">dns3.disa.mil</a>. 7151 IN AAAA 2608:145:0:180b:1001:9012:d00:20</div><div><a href="http://dns4.disa.mil" target="_blank">dns4.disa.mil</a>. 6608 IN AAAA 2608:c182:0:1012:1001:9012:1400:20</div><div><a href="http://dns4.disa.mil" target="_blank">dns4.disa.mil</a>. 6608 IN AAAA 2608:c182::1001:9012:1600:20</div><div><a href="http://dns5.disa.mil" target="_blank">dns5.disa.mil</a>. 7151 IN AAAA 2608:4122:0:1012:1001:9012:1400:20</div><div><br></div><div>;; Query time: 252 msec</div><div>;; SERVER: 152.229.110.232#53(<a href="http://DNS1.DISA.MIL" target="_blank">DNS1.DISA.MIL</a>.) (UDP)</div><div>;; WHEN: Tue Dec 17 21:09:53 CET 2024</div><div>;; MSG SIZE rcvd: 305</div><div><br></div><div><div>And given there's so many delegations and so many redirections, the result is inevitable...</div><div><br></div><div>There's at least 4 queries that need to be done against <a href="http://disa.mil" target="_blank">disa.mil</a> servers and if they all end up with timeout over IPv6, the whole query times out because it will run out of the time.</div><div><br></div><div><a href="http://gdcs.disa.mil" target="_blank">gdcs.disa.mil</a> IN NS</div><div><a href="http://apps.gdcs.disa.mil" target="_blank">apps.gdcs.disa.mil</a> IN NS</div><div><a href="http://cds.disa.mil" target="_blank">cds.disa.mil</a> IN NS</div><div><a href="http://e1008.d.akamaiedge.akamai.csd.disa.mil" target="_blank">e1008.d.akamaiedge.akamai.csd.disa.mil</a>. IN A</div><div><br></div><div>Ondřej<br id="m_3932006373910463482lineBreakAtBeginningOfMessage"><div>
<div dir="auto" style="letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration:none"><div style="letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px"><div style="overflow-wrap: break-word;"><div style="font-family:Helvetica;font-size:12px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px">--</div><div style="font-family:Helvetica;font-size:12px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px">Ondřej Surý (He/Him)</div><div style="font-family:Helvetica;font-size:12px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px"><a href="mailto:ondrej@isc.org" target="_blank">ondrej@isc.org</a></div><div style="font-family:Helvetica;font-size:12px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px"><br></div><div style="font-family:Helvetica;font-size:12px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px">My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours.</div></div></div></div>
</div>
<div><br><blockquote type="cite"><div>On 17. 12. 2024, at 20:56, Clark, Roger <<a href="mailto:roclar@wm.edu" target="_blank">roclar@wm.edu</a>> wrote:</div><br><div><div>I have a user who is unsuccessfully trying to resolve ‘<a href="http://extranet.aro.army.mil" target="_blank">extranet.aro.army.mil</a>’ using our BIND resolvers. The query is failing with a 'shut down hung fetch while resolving’ error message with some DNSSEC warning as well. The name resolves without issue querying other external resolvers and also is successful using dig +trace. I did notice there was an issue with an error produced by one of the names in the CNAMe chain ( <a href="https://gitlab.isc.org/isc-projects/bind9/-/issues/4797" target="_blank">https://gitlab.isc.org/isc-projects/bind9/-/issues/4797</a> ).<br><br>Do I have something misconfigured or is there something wrong on the authoritative side?<br><br>Thank you!<br><br>Roger<br><br>Query:<br># dig <a href="http://extranet.aro.army.mil" target="_blank">extranet.aro.army.mil</a> @localhost<br>;; communications error to 127.0.0.1#53: timed out<br>;; communications error to 127.0.0.1#53: timed out<br>;; communications error to 127.0.0.1#53: timed out<br>;; communications error to 127.0.0.1#53: timed out<br>;; communications error to 127.0.0.1#53: timed out<br><br>; <<>> DiG 9.18.32 <<>> <a href="http://extranet.aro.army.mil" target="_blank">extranet.aro.army.mil</a> @localhost<br>;; global options: +cmd<br>;; no servers could be reached<br><br>Logs:<br>17-Dec-2024 16:05:59.558 client @0x7fae4b99e230 127.0.0.1#55089 (<a href="http://extranet.aro.army.mil" target="_blank">extranet.aro.army.mil</a>): query: <a href="http://extranet.aro.army.mil" target="_blank">extranet.aro.army.mil</a> IN A +E(0)K (127.0.0.1)<br>17-Dec-2024 16:06:00.518 validating <a href="http://gcds.disa.mil/SOA" target="_blank">gcds.disa.mil/SOA</a>: got insecure response; parent indicates it should be secure<br>17-Dec-2024 16:06:00.518 validating <a href="http://gcds.disa.mil/SOA" target="_blank">gcds.disa.mil/SOA</a>: got insecure response; parent indicates it should be secure<br>17-Dec-2024 16:06:00.518 validating <a href="http://apps.gcds.disa.mil/NS" target="_blank">apps.gcds.disa.mil/NS</a>: no valid signature found<br>17-Dec-2024 16:06:00.594 validating <a href="http://apps.gcds.disa.mil/SOA" target="_blank">apps.gcds.disa.mil/SOA</a>: no valid signature found<br>17-Dec-2024 16:06:00.594 validating <a href="http://Q3C76IBKTMFUF8PMSHSSCOPM8LOKJKK2.apps.gcds.disa.mil/NSEC3" target="_blank">Q3C76IBKTMFUF8PMSHSSCOPM8LOKJKK2.apps.gcds.disa.mil/NSEC3</a>: no valid signature found<br>17-Dec-2024 16:06:00.642 validating <a href="http://apps.gcds.disa.mil/SOA" target="_blank">apps.gcds.disa.mil/SOA</a>: no valid signature found<br>17-Dec-2024 16:06:00.642 validating <a href="http://LP2F0U0VHJI70GSV9KTM3KC7HQDJKD9R.apps.gcds.disa.mil/NSEC3" target="_blank">LP2F0U0VHJI70GSV9KTM3KC7HQDJKD9R.apps.gcds.disa.mil/NSEC3</a>: no valid signature found<br>17-Dec-2024 16:06:00.678 validating <a href="http://aro.army.mil.apps.gcds.disa.mil/CNAME" target="_blank">aro.army.mil.apps.gcds.disa.mil/CNAME</a>: no valid signature found<br>17-Dec-2024 16:06:01.558 client @0x7fae4b97e220 127.0.0.1#39052 (<a href="http://extranet.aro.army.mil" target="_blank">extranet.aro.army.mil</a>): query: <a href="http://extranet.aro.army.mil" target="_blank">extranet.aro.army.mil</a> IN A +E(0)K (127.0.0.1)<br>17-Dec-2024 16:06:03.562 client @0x7fae4a551240 127.0.0.1#35234 (<a href="http://extranet.aro.army.mil" target="_blank">extranet.aro.army.mil</a>): query: <a href="http://extranet.aro.army.mil" target="_blank">extranet.aro.army.mil</a> IN A +E(0)K (127.0.0.1)<br>17-Dec-2024 16:06:05.566 client @0x7fae4a54f260 127.0.0.1#58021 (<a href="http://extranet.aro.army.mil" target="_blank">extranet.aro.army.mil</a>): query: <a href="http://extranet.aro.army.mil" target="_blank">extranet.aro.army.mil</a> IN A +E(0)K (127.0.0.1)<br>17-Dec-2024 16:06:07.566 client @0x7fae4a547290 127.0.0.1#52253 (<a href="http://extranet.aro.army.mil" target="_blank">extranet.aro.army.mil</a>): query: <a href="http://extranet.aro.army.mil" target="_blank">extranet.aro.army.mil</a> IN A +E(0)K (127.0.0.1)<br>17-Dec-2024 16:06:12.678 shut down hung fetch while resolving '<a href="http://aro.army.mil.edgekey.dmz.akamai.csd.disa.mil/A" target="_blank">aro.army.mil.edgekey.dmz.akamai.csd.disa.mil/A</a>'<br>17-Dec-2024 16:06:12.678 client @0x7fae4b99e230 127.0.0.1#55089 (<a href="http://extranet.aro.army.mil" target="_blank">extranet.aro.army.mil</a>): query failed (operation canceled) for <a href="http://extranet.aro.army.mil/IN/A" target="_blank">extranet.aro.army.mil/IN/A</a> at query.c:7877<br>17-Dec-2024 16:06:12.678 client @0x7fae4b97e220 127.0.0.1#39052 (<a href="http://extranet.aro.army.mil" target="_blank">extranet.aro.army.mil</a>): query failed (operation canceled) for <a href="http://extranet.aro.army.mil/IN/A" target="_blank">extranet.aro.army.mil/IN/A</a> at query.c:7877<br>17-Dec-2024 16:06:12.678 client @0x7fae4a551240 127.0.0.1#35234 (<a href="http://extranet.aro.army.mil" target="_blank">extranet.aro.army.mil</a>): query failed (operation canceled) for <a href="http://extranet.aro.army.mil/IN/A" target="_blank">extranet.aro.army.mil/IN/A</a> at query.c:7877<br>17-Dec-2024 16:06:12.678 client @0x7fae4a54f260 127.0.0.1#58021 (<a href="http://extranet.aro.army.mil" target="_blank">extranet.aro.army.mil</a>): query failed (operation canceled) for <a href="http://extranet.aro.army.mil/IN/A" target="_blank">extranet.aro.army.mil/IN/A</a> at query.c:7877<br>17-Dec-2024 16:06:12.678 client @0x7fae4a547290 127.0.0.1#52253 (<a href="http://extranet.aro.army.mil" target="_blank">extranet.aro.army.mil</a>): query failed (operation canceled) for <a href="http://extranet.aro.army.mil/IN/A" target="_blank">extranet.aro.army.mil/IN/A</a> at query.c:7877<br><br>Trace:<br><br># dig +trace <a href="http://extranet.aro.army.mil" target="_blank">extranet.aro.army.mil</a> @localhost<br><br>; <<>> DiG 9.18.32 <<>> +trace <a href="http://extranet.aro.army.mil" target="_blank">extranet.aro.army.mil</a> @localhost<br>;; global options: +cmd<br>.<span style="white-space:pre-wrap"> </span><span style="white-space:pre-wrap"> </span><span style="white-space:pre-wrap"> </span>518092<span style="white-space:pre-wrap"> </span>IN<span style="white-space:pre-wrap"> </span>NS<span style="white-space:pre-wrap"> </span><a href="http://b.root-servers.net" target="_blank">b.root-servers.net</a>.<br>.<span style="white-space:pre-wrap"> </span><span style="white-space:pre-wrap"> </span><span style="white-space:pre-wrap"> </span>518092<span style="white-space:pre-wrap"> </span>IN<span style="white-space:pre-wrap"> </span>NS<span style="white-space:pre-wrap"> </span><a href="http://g.root-servers.net" target="_blank">g.root-servers.net</a>.<br>.<span style="white-space:pre-wrap"> </span><span style="white-space:pre-wrap"> </span><span style="white-space:pre-wrap"> </span>518092<span style="white-space:pre-wrap"> </span>IN<span style="white-space:pre-wrap"> </span>NS<span style="white-space:pre-wrap"> </span><a href="http://f.root-servers.net" target="_blank">f.root-servers.net</a>.<br>.<span style="white-space:pre-wrap"> </span><span style="white-space:pre-wrap"> </span><span style="white-space:pre-wrap"> </span>518092<span style="white-space:pre-wrap"> </span>IN<span style="white-space:pre-wrap"> </span>NS<span style="white-space:pre-wrap"> </span><a href="http://k.root-servers.net" target="_blank">k.root-servers.net</a>.<br>.<span style="white-space:pre-wrap"> </span><span style="white-space:pre-wrap"> </span><span style="white-space:pre-wrap"> </span>518092<span style="white-space:pre-wrap"> </span>IN<span style="white-space:pre-wrap"> </span>NS<span style="white-space:pre-wrap"> </span><a href="http://a.root-servers.net" target="_blank">a.root-servers.net</a>.<br>.<span style="white-space:pre-wrap"> </span><span style="white-space:pre-wrap"> </span><span style="white-space:pre-wrap"> </span>518092<span style="white-space:pre-wrap"> </span>IN<span style="white-space:pre-wrap"> </span>NS<span style="white-space:pre-wrap"> </span><a href="http://d.root-servers.net" target="_blank">d.root-servers.net</a>.<br>.<span style="white-space:pre-wrap"> </span><span style="white-space:pre-wrap"> </span><span style="white-space:pre-wrap"> </span>518092<span style="white-space:pre-wrap"> </span>IN<span style="white-space:pre-wrap"> </span>NS<span style="white-space:pre-wrap"> </span><a href="http://c.root-servers.net" target="_blank">c.root-servers.net</a>.<br>.<span style="white-space:pre-wrap"> </span><span style="white-space:pre-wrap"> </span><span style="white-space:pre-wrap"> </span>518092<span style="white-space:pre-wrap"> </span>IN<span style="white-space:pre-wrap"> </span>NS<span style="white-space:pre-wrap"> </span><a href="http://m.root-servers.net" target="_blank">m.root-servers.net</a>.<br>.<span style="white-space:pre-wrap"> </span><span style="white-space:pre-wrap"> </span><span style="white-space:pre-wrap"> </span>518092<span style="white-space:pre-wrap"> </span>IN<span style="white-space:pre-wrap"> </span>NS<span style="white-space:pre-wrap"> </span><a href="http://e.root-servers.net" target="_blank">e.root-servers.net</a>.<br>.<span style="white-space:pre-wrap"> </span><span style="white-space:pre-wrap"> </span><span style="white-space:pre-wrap"> </span>518092<span style="white-space:pre-wrap"> </span>IN<span style="white-space:pre-wrap"> </span>NS<span style="white-space:pre-wrap"> </span><a href="http://i.root-servers.net" target="_blank">i.root-servers.net</a>.<br>.<span style="white-space:pre-wrap"> </span><span style="white-space:pre-wrap"> </span><span style="white-space:pre-wrap"> </span>518092<span style="white-space:pre-wrap"> </span>IN<span style="white-space:pre-wrap"> </span>NS<span style="white-space:pre-wrap"> </span><a href="http://h.root-servers.net" target="_blank">h.root-servers.net</a>.<br>.<span style="white-space:pre-wrap"> </span><span style="white-space:pre-wrap"> </span><span style="white-space:pre-wrap"> </span>518092<span style="white-space:pre-wrap"> </span>IN<span style="white-space:pre-wrap"> </span>NS<span style="white-space:pre-wrap"> </span><a href="http://j.root-servers.net" target="_blank">j.root-servers.net</a>.<br>.<span style="white-space:pre-wrap"> </span><span style="white-space:pre-wrap"> </span><span style="white-space:pre-wrap"> </span>518092<span style="white-space:pre-wrap"> </span>IN<span style="white-space:pre-wrap"> </span>NS<span style="white-space:pre-wrap"> </span><a href="http://l.root-servers.net" target="_blank">l.root-servers.net</a>.<br>.<span style="white-space:pre-wrap"> </span><span style="white-space:pre-wrap"> </span><span style="white-space:pre-wrap"> </span>518092<span style="white-space:pre-wrap"> </span>IN<span style="white-space:pre-wrap"> </span>RRSIG<span style="white-space:pre-wrap"> </span>NS 8 0 518400 20241230050000 20241217040000 61050 . rswM6OY8ylCNnmkfbUrdnNcTyPMuraztXrBbrrfTOO1M3vp9gCea+qj+ FKEPxb/M7EwJYthquLPfOX+5nkV2ROBFwXrTBYS4Zg6zLC40lNwPFqdY 9X2cYpfYW1ljr1LuW9bEyBYwCfZB8g7eg+v0nMyrX+uDLH2mneiwJhiZ orJTZqVegiHMlX5jNe+btW7uJdAD+05MkI8CP8uD4ZElZ4ghjAG77aZB DLD9Ra+SE4j/1ECrkWEwP543tlYq0mmLIDP3TDObTGFMy3qjjItQtM83 NmCWD8OAFNbl28AaYMDREpMryZDaxPXNEYiAF3JDfTyM1otJqd7C9kjm 9gM/qg==<br>;; Received 1137 bytes from 127.0.0.1#53(localhost) in 0 ms<br><br>mil.<span style="white-space:pre-wrap"> </span><span style="white-space:pre-wrap"> </span><span style="white-space:pre-wrap"> </span>172800<span style="white-space:pre-wrap"> </span>IN<span style="white-space:pre-wrap"> </span>NS<span style="white-space:pre-wrap"> </span><a href="http://con1.nipr.mil" target="_blank">con1.nipr.mil</a>.<br>mil.<span style="white-space:pre-wrap"> </span><span style="white-space:pre-wrap"> </span><span style="white-space:pre-wrap"> </span>172800<span style="white-space:pre-wrap"> </span>IN<span style="white-space:pre-wrap"> </span>NS<span style="white-space:pre-wrap"> </span><a href="http://pac2.nipr.mil" target="_blank">pac2.nipr.mil</a>.<br>mil.<span style="white-space:pre-wrap"> </span><span style="white-space:pre-wrap"> </span><span style="white-space:pre-wrap"> </span>172800<span style="white-space:pre-wrap"> </span>IN<span style="white-space:pre-wrap"> </span>NS<span style="white-space:pre-wrap"> </span><a href="http://pac1.nipr.mil" target="_blank">pac1.nipr.mil</a>.<br>mil.<span style="white-space:pre-wrap"> </span><span style="white-space:pre-wrap"> </span><span style="white-space:pre-wrap"> </span>172800<span style="white-space:pre-wrap"> </span>IN<span style="white-space:pre-wrap"> </span>NS<span style="white-space:pre-wrap"> </span><a href="http://eur2.nipr.mil" target="_blank">eur2.nipr.mil</a>.<br>mil.<span style="white-space:pre-wrap"> </span><span style="white-space:pre-wrap"> </span><span style="white-space:pre-wrap"> </span>172800<span style="white-space:pre-wrap"> </span>IN<span style="white-space:pre-wrap"> </span>NS<span style="white-space:pre-wrap"> </span><a href="http://eur1.nipr.mil" target="_blank">eur1.nipr.mil</a>.<br>mil.<span style="white-space:pre-wrap"> </span><span style="white-space:pre-wrap"> </span><span style="white-space:pre-wrap"> </span>172800<span style="white-space:pre-wrap"> </span>IN<span style="white-space:pre-wrap"> </span>NS<span style="white-space:pre-wrap"> </span><a href="http://con2.nipr.mil" target="_blank">con2.nipr.mil</a>.<br>mil.<span style="white-space:pre-wrap"> </span><span style="white-space:pre-wrap"> </span><span style="white-space:pre-wrap"> </span>86400<span style="white-space:pre-wrap"> </span>IN<span style="white-space:pre-wrap"> </span>DS<span style="white-space:pre-wrap"> </span>63500 8 2 3BAA83867103D6604A124282063F295E1B15C87CC13CB875A42F5754 A912EBE0<br>mil.<span style="white-space:pre-wrap"> </span><span style="white-space:pre-wrap"> </span><span style="white-space:pre-wrap"> </span>86400<span style="white-space:pre-wrap"> </span>IN<span style="white-space:pre-wrap"> </span>RRSIG<span style="white-space:pre-wrap"> </span>DS 8 1 86400 20241230050000 20241217040000 61050 . X2VVY9CekNpZhFq3x4ZIz8gI9nsCicqgJHzi1kEaRAW4hXzZGR+hAMNq 58680WjNluI/zaWt6eOpfkt+8XNEMJfc5cK5dmnOCs6jv9Blkv4moe6O 3Mr5F5Dm37m13Jw8pBIMJb2ylk1pzOsDQbWKjS+Ak3xXJH357YopmxVO fXQ6Zmu6VCmbiA9rhtI5fX2wuwzhcI5gAn4ARCTFVDo5XM8JKwc3vHs9 9dtGZhJ2UZ9ryZk+ulxGabZ3czSWjof93zn9GHfKezUFeGOqEkdO3op/ 9Oift8tpAM+IDdZFaFgI3VU+SJpwX+5BgavHILio8YtB5wXZ1z1Wfp3r iZw/kw==<br>;; Received 802 bytes from 192.36.148.17#53(<a href="http://i.root-servers.net" target="_blank">i.root-servers.net</a>) in 44 ms<br><br><a href="http://ARMY.MIL" target="_blank">ARMY.MIL</a>.<span style="white-space:pre-wrap"> </span><span style="white-space:pre-wrap"> </span>21600<span style="white-space:pre-wrap"> </span>IN<span style="white-space:pre-wrap"> </span>NS<span style="white-space:pre-wrap"> </span><a href="http://NS02.ARMY.MIL" target="_blank">NS02.ARMY.MIL</a>.<br><a href="http://ARMY.MIL" target="_blank">ARMY.MIL</a>.<span style="white-space:pre-wrap"> </span><span style="white-space:pre-wrap"> </span>21600<span style="white-space:pre-wrap"> </span>IN<span style="white-space:pre-wrap"> </span>NS<span style="white-space:pre-wrap"> </span><a href="http://NS01.ARMY.MIL" target="_blank">NS01.ARMY.MIL</a>.<br><a href="http://ARMY.MIL" target="_blank">ARMY.MIL</a>.<span style="white-space:pre-wrap"> </span><span style="white-space:pre-wrap"> </span>21600<span style="white-space:pre-wrap"> </span>IN<span style="white-space:pre-wrap"> </span>NS<span style="white-space:pre-wrap"> </span><a href="http://NS03.ARMY.MIL" target="_blank">NS03.ARMY.MIL</a>.<br><a href="http://ARMY.MIL" target="_blank">ARMY.MIL</a>.<span style="white-space:pre-wrap"> </span><span style="white-space:pre-wrap"> </span>10800<span style="white-space:pre-wrap"> </span>IN<span style="white-space:pre-wrap"> </span>DS<span style="white-space:pre-wrap"> </span>34552 8 1 2DFA605AE37365DC018249BC6E7FEB3EF55BAF85<br><a href="http://ARMY.MIL" target="_blank">ARMY.MIL</a>.<span style="white-space:pre-wrap"> </span><span style="white-space:pre-wrap"> </span>10800<span style="white-space:pre-wrap"> </span>IN<span style="white-space:pre-wrap"> </span>DS<span style="white-space:pre-wrap"> </span>34552 8 2 77BF656C5361FF501D81AC4F7DAB185B5F8587AF0421283F7373956F 2DFA4543<br><a href="http://ARMY.MIL" target="_blank">ARMY.MIL</a>.<span style="white-space:pre-wrap"> </span><span style="white-space:pre-wrap"> </span>10800<span style="white-space:pre-wrap"> </span>IN<span style="white-space:pre-wrap"> </span>RRSIG<span style="white-space:pre-wrap"> </span>DS 8 2 10800 20241224000431 20241217000431 40843 mil. oGdnWjQd0HT+UP0o7ct3fbY/Ur/bcxWX6sYflvIZnGy5VlpEB8TF1xQG gtwtHUhfcPTHxUHIqnN+CDarvQTGSbfjCDOrHtYKt1kSSQD91Gz3efgP 4G68ACiGH7SbMUOpDGIBQ/MWzibBPnE1biJchhPuMALfz9GO2qM2Sb5c IIw=<br>;; Received 410 bytes from 199.252.154.234#53(<a href="http://eur1.nipr.mil" target="_blank">eur1.nipr.mil</a>) in 32 ms<br><br><a href="http://extranet.aro.army.mil" target="_blank">extranet.aro.army.mil</a>.<span style="white-space:pre-wrap"> </span>3600<span style="white-space:pre-wrap"> </span>IN<span style="white-space:pre-wrap"> </span>CNAME<span style="white-space:pre-wrap"> </span><a href="http://aro.army.mil.apps.gcds.disa.mil" target="_blank">aro.army.mil.apps.gcds.disa.mil</a>.<br><a href="http://extranet.aro.army.mil" target="_blank">extranet.aro.army.mil</a>.<span style="white-space:pre-wrap"> </span>3600<span style="white-space:pre-wrap"> </span>IN<span style="white-space:pre-wrap"> </span>RRSIG<span style="white-space:pre-wrap"> </span>CNAME 8 4 3600 20241220162507 20241216162111 44331 <a href="http://aro.army.mil" target="_blank">aro.army.mil</a>. GQ8IGU9aMU6ZiVZrIAJJDv+kPU7YGYs66bpQiMtNw2VtoScz9uhhOs7M Nns1t8uClwMhVVr/NE0cPh5yK7Y0p4AQQWJT3IY07b+5Jy5HFf0bwEWs lBTjqvVOzaVdKXAW0SSTt8dd8phvIskmKDJDPeJx05HKd6cIExzvG1dG M+krqrGsltBQANXByi5koLfUWaxLGzoC676kBM4MhxRHYOXaCzdhIf1K VWaxLMptuhVke1pi8oMY/4FQREs8PEwRwPVRRD4lgMw6XshRpVuI9V65 r+JxiGI/kiwm9Z9ckr6nBEkkry/0/5G4NtcgzfncADRxUrUvJ5NNvd/E rHnhWw==<br><a href="http://aro.army.mil.apps.gcds.disa.mil" target="_blank">aro.army.mil.apps.gcds.disa.mil</a>. 3599 IN CNAME<span style="white-space:pre-wrap"> </span><a href="http://aro.army.mil.edgekey.dmz.akamai.csd.disa.mil" target="_blank">aro.army.mil.edgekey.dmz.akamai.csd.disa.mil</a>.<br><a href="http://aro.army.mil.apps.gcds.disa.mil" target="_blank">aro.army.mil.apps.gcds.disa.mil</a>. 3599 IN RRSIG<span style="white-space:pre-wrap"> </span>CNAME 8 7 3600 20250108200421 20241209200421 57303 <a href="http://apps.gcds.disa.mil" target="_blank">apps.gcds.disa.mil</a>. Pw8WDBdIcSyZsOtYpuOw9/i2Bc4IfcPvel+/MU6GC7ekpS4ba7JZRv13 7se5C1VEOxQlKc+Z/yLY5EhfJfrlJg9QmIKXhRj9h2rzjsjoFljzp0PQ joSo7J4eiWGCPi9TNLWMiC5A8Qj8JYYdOHC0RRFWUOjGQHeGPvStcUfj ROQ=<br><a href="http://aro.army.mil.edgekey.dmz.akamai.csd.disa.mil" target="_blank">aro.army.mil.edgekey.dmz.akamai.csd.disa.mil</a>. 179 IN CNAME <a href="http://e1008.d.akamaiedge.akamai.csd.disa.mil" target="_blank">e1008.d.akamaiedge.akamai.csd.disa.mil</a>.<br><a href="http://e1008.d.akamaiedge.akamai.csd.disa.mil" target="_blank">e1008.d.akamaiedge.akamai.csd.disa.mil</a>.<span style="white-space:pre-wrap"> </span>14 IN A<span style="white-space:pre-wrap"> </span>214.48.248.31<br>;; Received 669 bytes from 140.153.43.44#53(<a href="http://NS01.ARMY.MIL" target="_blank">NS01.ARMY.MIL</a>) in 80 ms<br><br><br>-- <br>Visit <a href="https://lists.isc.org/mailman/listinfo/bind-users" target="_blank">https://lists.isc.org/mailman/listinfo/bind-users</a> to unsubscribe from this list<br><br>ISC funds the development of this software with paid support subscriptions. Contact us at <a href="https://www.isc.org/contact/" target="_blank">https://www.isc.org/contact/</a> for more information.<br><br><br>bind-users mailing list<br><a href="mailto:bind-users@lists.isc.org" target="_blank">bind-users@lists.isc.org</a><br><a href="https://lists.isc.org/mailman/listinfo/bind-users" target="_blank">https://lists.isc.org/mailman/listinfo/bind-users</a><br></div></div></blockquote></div><br></div></div></div></div></div></blockquote></div><br></div>-- <br>
Visit <a href="https://lists.isc.org/mailman/listinfo/bind-users" rel="noreferrer" target="_blank">https://lists.isc.org/mailman/listinfo/bind-users</a> to unsubscribe from this list<br>
<br>
ISC funds the development of this software with paid support subscriptions. Contact us at <a href="https://www.isc.org/contact/" rel="noreferrer" target="_blank">https://www.isc.org/contact/</a> for more information.<br>
<br>
<br>
bind-users mailing list<br>
<a href="mailto:bind-users@lists.isc.org" target="_blank">bind-users@lists.isc.org</a><br>
<a href="https://lists.isc.org/mailman/listinfo/bind-users" rel="noreferrer" target="_blank">https://lists.isc.org/mailman/listinfo/bind-users</a><br>
</blockquote></div>