<div dir="ltr"><div dir="ltr"><div dir="ltr">
<p><span>Hi Greg, Ondřej, and everyone,</span></p><p><span>Thank you for your earlier recommendations. We upgraded to </span><b><span>BIND 9.20.30</span></b><span>, but the issue subsequently recurred. We have collected more specific observations involving outgoing DNS COOKIEs.</span></p><p><span>The affected resolver, ns03, is currently resolving Yahoo again, so the failure is no longer available for further testing. I am sharing the available evidence for your assessment rather than claiming a confirmed BIND defect. The attached PCAP is provided for reference; the summary below also includes separately collected </span><code dir="ltr">dig</code><span> output and </span><code dir="ltr">tcpdump</code><span> excerpts.</span></p><h3><span>1. Earlier reproduction on ns04 — November 3</span></h3><p><span>On ns04 (</span><code dir="ltr">192.168.41.253</code><span>), an outgoing query to </span><code dir="ltr">68.142.255.16</code><span> contained this complete COOKIE:</span></p><div><pre dir="ltr"><code>c1d6e41d3546e943010000006ae6d7e5edb59244a545f624</code></pre></div><p><span>Interpreted using the version-1 server-cookie format, its embedded timestamp was </span><b><span>November 1, 06:10:45 UTC</span></b><span>, approximately 55 hours before the capture.</span></p><p><span>Direct queries from the same resolver host to that same authoritative address produced:</span></p><ul><li><b><span>Exact captured full cookie:</span></b><span> timeout.</span></li><li><b><span>Same client-cookie portion, without the server-cookie portion:</span></b><span> </span><code dir="ltr">NOERROR</code><span>, approximately 80 ms.</span></li><li><b><span>No cookie:</span></b><span> </span><code dir="ltr">NOERROR</code><span>, approximately 81 ms.</span></li></ul><p><span>Setting </span><code dir="ltr">send-cookie no;</code><span> and running </span><code dir="ltr">rndc reload</code><span> restored resolution. However, because the configuration change and reload happened together, we did not independently isolate their effects.</span></p><h3><span>2. Reproduction on ns03 — November 8</span></h3><p><span>On ns03 (</span><code dir="ltr">192.168.41.153</code><span>), recursive queries for </span><code dir="ltr"><a href="http://yahoo.com" target="_blank">yahoo.com</a> A</code><span> returned </span><b><span>SERVFAIL / EDE 22 (No Reachable Authority)</span></b><span> after approximately 10 seconds.</span></p><p><span>At approximately </span><b><span>07:01 UTC</span></b><span>, the outgoing queries contained server cookies with these embedded timestamps:</span></p><div><pre dir="ltr"><code>Destination       Embedded timestamp (UTC)   Approximate age
27.123.42.42       Nov 6, 18:00:43            37 hours
202.165.97.53      Nov 5, 20:51:27            58 hours
68.180.131.16      Nov 5, 02:54:32            76 hours
98.138.11.157      Nov 4, 14:40:41            88 hours</code></pre></div><p><span>The displayed capture excerpt contains outgoing queries to these four addresses, without corresponding incoming responses.</span></p><p><span>Immediately beforehand, direct tests to </span><b><span>68.142.255.16</span></b><span> succeeded with no cookie, a client-only cookie, and a recently issued full cookie. Five additional replays of that full cookie also succeeded in </span><b><span>69–81 ms</span></b><span>. Changing one digit in its server-cookie hash caused a timeout.</span></p><p><span>Those direct tests targeted </span><b><span>ns2</span></b><span>, whereas the failing recursive trace showed the other four addresses. We did not complete matching replay tests against those four destinations before ns03 recovered.</span></p><h3><span>Questions</span></h3><p><span>Does BIND 9.20.30’s expected server-cookie expiry and refresh behavior explain why these days-old timestamps were present in outgoing queries? In particular, what recovery should occur when requests carrying a remembered server cookie repeatedly time out without a </span><code dir="ltr">BADCOOKIE</code><span> response?</span></p><p><span>Which targeted ADB or resolver diagnostics would be most useful during the next recurrence to determine when these cookie values were learned and why they continue to be selected?</span></p><p><span>We recognize that the timestamps do not establish how long BIND continuously retained the cookies, and the missing responses do not establish whether the authoritative servers or something in the network path discarded the requests.</span></p><p><span>Thank you for your time and guidance.</span></p><p><span>Best regards,</span><br><span>Amir</span> <span></span></p>

<br></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Wed, Oct 28, 2026 at 11:38 AM Greg <<a href="mailto:greg@isc.org" target="_blank">greg@isc.org</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div>Hello.<div>Curiosity is good. But I stand by needing to upgrade, now! Do that first and see if your issue still exists. But also see below.</div><div>A few comments on your reply:</div><div><ul><li>You have redacted a lot, which is generally not helpful to diagnosis.</li><li>Your tcpdump would have been better saved to disc, then the low level bits could be analysed offline in Wireshark. However...</li><li>You do say, twice, that no matching responses were observed from the Yahoo NS. I sent digs to both (see below) and received responses promptly, which I think supports my theory that you have network issues somewhere. Try manual testing from the command line of your recursive server out to various NS, not just Yahoo's (using their addresses, not names), log the results and talk to your network and firewall people.</li><li>Also check your server's hardware, interfaces, routeing table, what other process are running etc. Basic due diligence on the box itself.</li><li>Unless you have custom root hints in the file "named.root" you don't need a hint zone at all, as the Internet root hints have been built into BIND for a very long time.</li><li>Please consider disabling the stale cache, unless you really understand why you think you need it and how to use it. Here are some references:</li><ul><li><div style="display:block"><div style="display:inline-block" role="link"><a style="border-radius:10px;font-family:-apple-system,Helvetica,Arial,sans-serif;display:block;width:300px;overflow:hidden;text-decoration:none" rel="nofollow" href="https://bind9.readthedocs.io/en/stable/reference.html#namedconf-statement-stale-answer-enable" dir="ltr" role="button" width="300" target="_blank"><table style="table-layout:fixed;border-collapse:collapse;width:300px;background-color:rgb(120,138,150);font-family:-apple-system,Helvetica,Arial,sans-serif" cellpadding="0" cellspacing="0" border="0" width="300"><tbody><tr><td><table bgcolor="#788A96" cellpadding="0" cellspacing="0" width="300" style="table-layout:fixed;font-family:-apple-system,Helvetica,Arial,sans-serif;background-color:rgb(120,138,150)"><tbody><tr><td style="padding:8px 0px"><div style="max-width:100%;margin:0px 16px;overflow:hidden"><div style="font-weight:500;font-size:12px;overflow:hidden;text-overflow:ellipsis;text-align:left"><a rel="nofollow" href="https://bind9.readthedocs.io/en/stable/reference.html#namedconf-statement-stale-answer-enable" style="text-decoration:none" target="_blank"><font color="#FFFFFF" style="color:rgba(255,255,255,0.847)">8. Configuration Reference — BIND 9 9.20.30 documentation</font></a></div><div style="font-weight:400;font-size:11px;overflow:hidden;text-overflow:ellipsis;text-align:left"><a rel="nofollow" href="https://bind9.readthedocs.io/en/stable/reference.html#namedconf-statement-stale-answer-enable" style="text-decoration:none" target="_blank"><font color="#FFFFFF" style="color:rgba(255,255,255,0.55)">bind9.readthedocs.io</font></a></div></div></td><td style="padding:6px 12px 6px 0px" width="30"><a rel="nofollow" href="https://bind9.readthedocs.io/en/stable/reference.html#namedconf-statement-stale-answer-enable" target="_blank"><img style="display:inline-block;width:30px;height:30px;border-radius:3px" width="30" height="30" alt="favicon.ico" src="cid:ii_1a1ba166758e7117bb1"></a></td></tr></tbody></table></td></tr></tbody></table></a></div></div></li><li><div style="display:block"><div style="display:inline-block" role="link"><a style="border-radius:10px;font-family:-apple-system,Helvetica,Arial,sans-serif;display:block;width:300px;overflow:hidden;text-decoration:none" rel="nofollow" href="https://kb.isc.org/docs/changes-to-serve-stale-option-stale-answer-client-timeout-in-bind-918-and-newer" dir="ltr" role="button" width="300" target="_blank"><table style="table-layout:fixed;border-collapse:collapse;width:300px;background-color:rgb(6,112,170);font-family:-apple-system,Helvetica,Arial,sans-serif" cellpadding="0" cellspacing="0" border="0" width="300"><tbody><tr><td align="center"><img style="width:300px;height:168px" width="300" height="168" alt="ISC-logo-rgb-2048x1149.png" src="cid:ii_1a1ba166759e011f2282"></td></tr><tr><td><table bgcolor="#0670AA" cellpadding="0" cellspacing="0" width="300" style="table-layout:fixed;font-family:-apple-system,Helvetica,Arial,sans-serif;background-color:rgb(6,112,170)"><tbody><tr><td style="padding:8px 0px"><div style="max-width:100%;margin:0px 16px;overflow:hidden"><div style="font-weight:500;font-size:12px;overflow:hidden;text-overflow:ellipsis;text-align:left"><a rel="nofollow" href="https://kb.isc.org/docs/changes-to-serve-stale-option-stale-answer-client-timeout-in-bind-918-and-newer" style="text-decoration:none" target="_blank"><font color="#FFFFFF" style="color:rgba(255,255,255,0.847)">Changes to BIND's serve-stale option stale-answer-client-timeout in BIND 9.18 and newer</font></a></div><div style="font-weight:400;font-size:11px;overflow:hidden;text-overflow:ellipsis;text-align:left"><a rel="nofollow" href="https://kb.isc.org/docs/changes-to-serve-stale-option-stale-answer-client-timeout-in-bind-918-and-newer" style="text-decoration:none" target="_blank"><font color="#FFFFFF" style="color:rgba(255,255,255,0.55)">kb.isc.org</font></a></div></div></td></tr></tbody></table></td></tr></tbody></table></a></div></div></li><li><a href="https://kb.isc.org/docs/serve-stale-implementation-details" target="_blank">https://kb.isc.org/docs/serve-stale-implementation-details</a></li></ul></ul></div><div><br></div><div>My digs:</div><div><p style="margin:0px;font-style:normal;font-variant-caps:normal;font-size:11px;line-height:normal;font-family:Menlo;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span style="font-variant-ligatures:no-common-ligatures">% dig @<a href="http://27.123.42.42" target="_blank">27.123.42.42</a> <a href="http://yahoo.com" target="_blank">yahoo.com</a> </span></p>
<p style="margin:0px;font-style:normal;font-variant-caps:normal;font-size:11px;line-height:normal;font-family:Menlo;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal;min-height:13px"><span style="font-variant-ligatures:no-common-ligatures"></span><br></p>
<p style="margin:0px;font-style:normal;font-variant-caps:normal;font-size:11px;line-height:normal;font-family:Menlo;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span style="font-variant-ligatures:no-common-ligatures">; <<>> DiG 9.20.24 <<>> @<a href="http://27.123.42.42" target="_blank">27.123.42.42</a> <a href="http://yahoo.com" target="_blank">yahoo.com</a></span></p>
<p style="margin:0px;font-style:normal;font-variant-caps:normal;font-size:11px;line-height:normal;font-family:Menlo;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span style="font-variant-ligatures:no-common-ligatures">; (1 server found)</span></p>
<p style="margin:0px;font-style:normal;font-variant-caps:normal;font-size:11px;line-height:normal;font-family:Menlo;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span style="font-variant-ligatures:no-common-ligatures">;; global options: +cmd</span></p>
<p style="margin:0px;font-style:normal;font-variant-caps:normal;font-size:11px;line-height:normal;font-family:Menlo;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span style="font-variant-ligatures:no-common-ligatures">;; Got answer:</span></p>
<p style="margin:0px;font-style:normal;font-variant-caps:normal;font-size:11px;line-height:normal;font-family:Menlo;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span style="font-variant-ligatures:no-common-ligatures">;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 3646</span></p>
<p style="margin:0px;font-style:normal;font-variant-caps:normal;font-size:11px;line-height:normal;font-family:Menlo;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span style="font-variant-ligatures:no-common-ligatures">;; flags: qr aa rd; QUERY: 1, ANSWER: 6, AUTHORITY: 0, ADDITIONAL: 1</span></p>
<p style="margin:0px;font-style:normal;font-variant-caps:normal;font-size:11px;line-height:normal;font-family:Menlo;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span style="font-variant-ligatures:no-common-ligatures">;; WARNING: recursion requested but not available</span></p>
<p style="margin:0px;font-style:normal;font-variant-caps:normal;font-size:11px;line-height:normal;font-family:Menlo;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal;min-height:13px"><span style="font-variant-ligatures:no-common-ligatures"></span><br></p>
<p style="margin:0px;font-style:normal;font-variant-caps:normal;font-size:11px;line-height:normal;font-family:Menlo;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span style="font-variant-ligatures:no-common-ligatures">;; OPT PSEUDOSECTION:</span></p>
<p style="margin:0px;font-style:normal;font-variant-caps:normal;font-size:11px;line-height:normal;font-family:Menlo;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span style="font-variant-ligatures:no-common-ligatures">; EDNS: version: 0, flags:; udp: 1272</span></p>
<p style="margin:0px;font-style:normal;font-variant-caps:normal;font-size:11px;line-height:normal;font-family:Menlo;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span style="font-variant-ligatures:no-common-ligatures">; COOKIE: 5ff156dc3958b217010000006ae1aeaf6b65bb33e3c390f2 (good)</span></p>
<p style="margin:0px;font-style:normal;font-variant-caps:normal;font-size:11px;line-height:normal;font-family:Menlo;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span style="font-variant-ligatures:no-common-ligatures">;; QUESTION SECTION:</span></p>
<p style="margin:0px;font-style:normal;font-variant-caps:normal;font-size:11px;line-height:normal;font-family:Menlo;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span style="font-variant-ligatures:no-common-ligatures">;<a href="http://yahoo.com" target="_blank">yahoo.com</a>.<span style="white-space:pre-wrap">                        </span>IN<span style="white-space:pre-wrap">      </span>A</span></p>
<p style="margin:0px;font-style:normal;font-variant-caps:normal;font-size:11px;line-height:normal;font-family:Menlo;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal;min-height:13px"><span style="font-variant-ligatures:no-common-ligatures"></span><br></p>
<p style="margin:0px;font-style:normal;font-variant-caps:normal;font-size:11px;line-height:normal;font-family:Menlo;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span style="font-variant-ligatures:no-common-ligatures">;; ANSWER SECTION:</span></p>
<p style="margin:0px;font-style:normal;font-variant-caps:normal;font-size:11px;line-height:normal;font-family:Menlo;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span style="font-variant-ligatures:no-common-ligatures"><a href="http://yahoo.com" target="_blank">yahoo.com</a>.<span style="white-space:pre-wrap">         </span>1800<span style="white-space:pre-wrap">    </span>IN<span style="white-space:pre-wrap">      </span>A<span style="white-space:pre-wrap">       </span>74.6.143.25</span></p>
<p style="margin:0px;font-style:normal;font-variant-caps:normal;font-size:11px;line-height:normal;font-family:Menlo;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span style="font-variant-ligatures:no-common-ligatures"><a href="http://yahoo.com" target="_blank">yahoo.com</a>.<span style="white-space:pre-wrap">         </span>1800<span style="white-space:pre-wrap">    </span>IN<span style="white-space:pre-wrap">      </span>A<span style="white-space:pre-wrap">       </span>74.6.231.21</span></p>
<p style="margin:0px;font-style:normal;font-variant-caps:normal;font-size:11px;line-height:normal;font-family:Menlo;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span style="font-variant-ligatures:no-common-ligatures"><a href="http://yahoo.com" target="_blank">yahoo.com</a>.<span style="white-space:pre-wrap">         </span>1800<span style="white-space:pre-wrap">    </span>IN<span style="white-space:pre-wrap">      </span>A<span style="white-space:pre-wrap">       </span>98.137.11.163</span></p>
<p style="margin:0px;font-style:normal;font-variant-caps:normal;font-size:11px;line-height:normal;font-family:Menlo;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span style="font-variant-ligatures:no-common-ligatures"><a href="http://yahoo.com" target="_blank">yahoo.com</a>.<span style="white-space:pre-wrap">         </span>1800<span style="white-space:pre-wrap">    </span>IN<span style="white-space:pre-wrap">      </span>A<span style="white-space:pre-wrap">       </span>74.6.143.26</span></p>
<p style="margin:0px;font-style:normal;font-variant-caps:normal;font-size:11px;line-height:normal;font-family:Menlo;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span style="font-variant-ligatures:no-common-ligatures"><a href="http://yahoo.com" target="_blank">yahoo.com</a>.<span style="white-space:pre-wrap">         </span>1800<span style="white-space:pre-wrap">    </span>IN<span style="white-space:pre-wrap">      </span>A<span style="white-space:pre-wrap">       </span>74.6.231.20</span></p>
<p style="margin:0px;font-style:normal;font-variant-caps:normal;font-size:11px;line-height:normal;font-family:Menlo;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span style="font-variant-ligatures:no-common-ligatures"><a href="http://yahoo.com" target="_blank">yahoo.com</a>.<span style="white-space:pre-wrap">         </span>1800<span style="white-space:pre-wrap">    </span>IN<span style="white-space:pre-wrap">      </span>A<span style="white-space:pre-wrap">       </span>98.137.11.164</span></p>
<p style="margin:0px;font-style:normal;font-variant-caps:normal;font-size:11px;line-height:normal;font-family:Menlo;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal;min-height:13px"><span style="font-variant-ligatures:no-common-ligatures"></span><br></p>
<p style="margin:0px;font-style:normal;font-variant-caps:normal;font-size:11px;line-height:normal;font-family:Menlo;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span style="font-variant-ligatures:no-common-ligatures">;; Query time: 206 msec</span></p>
<p style="margin:0px;font-style:normal;font-variant-caps:normal;font-size:11px;line-height:normal;font-family:Menlo;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span style="font-variant-ligatures:no-common-ligatures">;; SERVER: 27.123.42.42#53(27.123.42.42) (UDP)</span></p>
<p style="margin:0px;font-style:normal;font-variant-caps:normal;font-size:11px;line-height:normal;font-family:Menlo;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span style="font-variant-ligatures:no-common-ligatures">;; WHEN: Wed Oct 28 08:13:35 GMT 2026</span></p>
<p style="margin:0px;font-style:normal;font-variant-caps:normal;font-size:11px;line-height:normal;font-family:Menlo;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span style="font-variant-ligatures:no-common-ligatures">;; MSG SIZE  rcvd: 162</span></p>
<p style="margin:0px;font-style:normal;font-variant-caps:normal;font-size:11px;line-height:normal;font-family:Menlo;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal;min-height:13px"><span style="font-variant-ligatures:no-common-ligatures"></span><br></p>
<p style="margin:0px;font-style:normal;font-variant-caps:normal;font-size:11px;line-height:normal;font-family:Menlo;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span style="font-variant-ligatures:no-common-ligatures"><br></span></p><p style="margin:0px;font-style:normal;font-variant-caps:normal;font-size:11px;line-height:normal;font-family:Menlo;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span style="font-variant-ligatures:no-common-ligatures">% dig @<a href="http://68.142.255.16" target="_blank">68.142.255.16</a> <a href="http://yahoo.com" target="_blank">yahoo.com</a></span></p>
<p style="margin:0px;font-style:normal;font-variant-caps:normal;font-size:11px;line-height:normal;font-family:Menlo;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal;min-height:13px"><span style="font-variant-ligatures:no-common-ligatures"></span><br></p>
<p style="margin:0px;font-style:normal;font-variant-caps:normal;font-size:11px;line-height:normal;font-family:Menlo;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span style="font-variant-ligatures:no-common-ligatures">; <<>> DiG 9.20.24 <<>> @<a href="http://68.142.255.16" target="_blank">68.142.255.16</a> <a href="http://yahoo.com" target="_blank">yahoo.com</a></span></p>
<p style="margin:0px;font-style:normal;font-variant-caps:normal;font-size:11px;line-height:normal;font-family:Menlo;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span style="font-variant-ligatures:no-common-ligatures">; (1 server found)</span></p>
<p style="margin:0px;font-style:normal;font-variant-caps:normal;font-size:11px;line-height:normal;font-family:Menlo;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span style="font-variant-ligatures:no-common-ligatures">;; global options: +cmd</span></p>
<p style="margin:0px;font-style:normal;font-variant-caps:normal;font-size:11px;line-height:normal;font-family:Menlo;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span style="font-variant-ligatures:no-common-ligatures">;; Got answer:</span></p>
<p style="margin:0px;font-style:normal;font-variant-caps:normal;font-size:11px;line-height:normal;font-family:Menlo;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span style="font-variant-ligatures:no-common-ligatures">;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 60657</span></p>
<p style="margin:0px;font-style:normal;font-variant-caps:normal;font-size:11px;line-height:normal;font-family:Menlo;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span style="font-variant-ligatures:no-common-ligatures">;; flags: qr aa rd; QUERY: 1, ANSWER: 6, AUTHORITY: 0, ADDITIONAL: 1</span></p>
<p style="margin:0px;font-style:normal;font-variant-caps:normal;font-size:11px;line-height:normal;font-family:Menlo;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span style="font-variant-ligatures:no-common-ligatures">;; WARNING: recursion requested but not available</span></p>
<p style="margin:0px;font-style:normal;font-variant-caps:normal;font-size:11px;line-height:normal;font-family:Menlo;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal;min-height:13px"><span style="font-variant-ligatures:no-common-ligatures"></span><br></p>
<p style="margin:0px;font-style:normal;font-variant-caps:normal;font-size:11px;line-height:normal;font-family:Menlo;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span style="font-variant-ligatures:no-common-ligatures">;; OPT PSEUDOSECTION:</span></p>
<p style="margin:0px;font-style:normal;font-variant-caps:normal;font-size:11px;line-height:normal;font-family:Menlo;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span style="font-variant-ligatures:no-common-ligatures">; EDNS: version: 0, flags:; udp: 1272</span></p>
<p style="margin:0px;font-style:normal;font-variant-caps:normal;font-size:11px;line-height:normal;font-family:Menlo;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span style="font-variant-ligatures:no-common-ligatures">; COOKIE: e0e11b4aac46fc8c010000006ae1aeb3064444069e6e622f (good)</span></p>
<p style="margin:0px;font-style:normal;font-variant-caps:normal;font-size:11px;line-height:normal;font-family:Menlo;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span style="font-variant-ligatures:no-common-ligatures">;; QUESTION SECTION:</span></p>
<p style="margin:0px;font-style:normal;font-variant-caps:normal;font-size:11px;line-height:normal;font-family:Menlo;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span style="font-variant-ligatures:no-common-ligatures">;<a href="http://yahoo.com" target="_blank">yahoo.com</a>.<span style="white-space:pre-wrap">                        </span>IN<span style="white-space:pre-wrap">      </span>A</span></p>
<p style="margin:0px;font-style:normal;font-variant-caps:normal;font-size:11px;line-height:normal;font-family:Menlo;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal;min-height:13px"><span style="font-variant-ligatures:no-common-ligatures"></span><br></p>
<p style="margin:0px;font-style:normal;font-variant-caps:normal;font-size:11px;line-height:normal;font-family:Menlo;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span style="font-variant-ligatures:no-common-ligatures">;; ANSWER SECTION:</span></p>
<p style="margin:0px;font-style:normal;font-variant-caps:normal;font-size:11px;line-height:normal;font-family:Menlo;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span style="font-variant-ligatures:no-common-ligatures"><a href="http://yahoo.com" target="_blank">yahoo.com</a>.<span style="white-space:pre-wrap">         </span>1800<span style="white-space:pre-wrap">    </span>IN<span style="white-space:pre-wrap">      </span>A<span style="white-space:pre-wrap">       </span>98.137.11.163</span></p>
<p style="margin:0px;font-style:normal;font-variant-caps:normal;font-size:11px;line-height:normal;font-family:Menlo;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span style="font-variant-ligatures:no-common-ligatures"><a href="http://yahoo.com" target="_blank">yahoo.com</a>.<span style="white-space:pre-wrap">         </span>1800<span style="white-space:pre-wrap">    </span>IN<span style="white-space:pre-wrap">      </span>A<span style="white-space:pre-wrap">       </span>74.6.143.26</span></p>
<p style="margin:0px;font-style:normal;font-variant-caps:normal;font-size:11px;line-height:normal;font-family:Menlo;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span style="font-variant-ligatures:no-common-ligatures"><a href="http://yahoo.com" target="_blank">yahoo.com</a>.<span style="white-space:pre-wrap">         </span>1800<span style="white-space:pre-wrap">    </span>IN<span style="white-space:pre-wrap">      </span>A<span style="white-space:pre-wrap">       </span>74.6.231.20</span></p>
<p style="margin:0px;font-style:normal;font-variant-caps:normal;font-size:11px;line-height:normal;font-family:Menlo;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span style="font-variant-ligatures:no-common-ligatures"><a href="http://yahoo.com" target="_blank">yahoo.com</a>.<span style="white-space:pre-wrap">         </span>1800<span style="white-space:pre-wrap">    </span>IN<span style="white-space:pre-wrap">      </span>A<span style="white-space:pre-wrap">       </span>74.6.143.25</span></p>
<p style="margin:0px;font-style:normal;font-variant-caps:normal;font-size:11px;line-height:normal;font-family:Menlo;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span style="font-variant-ligatures:no-common-ligatures"><a href="http://yahoo.com" target="_blank">yahoo.com</a>.<span style="white-space:pre-wrap">         </span>1800<span style="white-space:pre-wrap">    </span>IN<span style="white-space:pre-wrap">      </span>A<span style="white-space:pre-wrap">       </span>74.6.231.21</span></p>
<p style="margin:0px;font-style:normal;font-variant-caps:normal;font-size:11px;line-height:normal;font-family:Menlo;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span style="font-variant-ligatures:no-common-ligatures"><a href="http://yahoo.com" target="_blank">yahoo.com</a>.<span style="white-space:pre-wrap">         </span>1800<span style="white-space:pre-wrap">    </span>IN<span style="white-space:pre-wrap">      </span>A<span style="white-space:pre-wrap">       </span>98.137.11.164</span></p>
<p style="margin:0px;font-style:normal;font-variant-caps:normal;font-size:11px;line-height:normal;font-family:Menlo;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal;min-height:13px"><span style="font-variant-ligatures:no-common-ligatures"></span><br></p>
<p style="margin:0px;font-style:normal;font-variant-caps:normal;font-size:11px;line-height:normal;font-family:Menlo;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span style="font-variant-ligatures:no-common-ligatures">;; Query time: 16 msec</span></p>
<p style="margin:0px;font-style:normal;font-variant-caps:normal;font-size:11px;line-height:normal;font-family:Menlo;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span style="font-variant-ligatures:no-common-ligatures">;; SERVER: 68.142.255.16#53(68.142.255.16) (UDP)</span></p>
<p style="margin:0px;font-style:normal;font-variant-caps:normal;font-size:11px;line-height:normal;font-family:Menlo;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span style="font-variant-ligatures:no-common-ligatures">;; WHEN: Wed Oct 28 08:13:39 GMT 2026</span></p>
<p style="margin:0px;font-style:normal;font-variant-caps:normal;font-size:11px;line-height:normal;font-family:Menlo;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span style="font-variant-ligatures:no-common-ligatures">;; MSG SIZE  rcvd: 162</span></p></div><div><span style="font-variant-ligatures:no-common-ligatures"><br></span></div><div><span style="font-variant-ligatures:no-common-ligatures">Cheers, Greg</span></div></div></blockquote></div><div><br clear="all"></div><br><span class="gmail_signature_prefix">-- </span><div dir="ltr" class="gmail_signature"><div dir="ltr"><table cellpadding="0" cellspacing="0" style="color:rgb(0,0,0);font-family:Verdana;width:420px"><tbody><tr><td><table cellpadding="0" cellspacing="0" style="width:420px"><tbody><tr><td><br></td><td style="text-align:right"><br></td></tr></tbody></table></td></tr><tr><td><table cellpadding="0" cellspacing="0"><tbody><tr height="25" style="vertical-align:middle"><td width="30" style="vertical-align:middle"><table cellpadding="0" cellspacing="0"><tbody><tr><td style="vertical-align:bottom"><br></td></tr></tbody></table></td><td style="padding:0px;color:rgb(47,47,48)"></td></tr><tr height="25" style="vertical-align:middle"><td width="30" style="vertical-align:middle"><table cellpadding="0" cellspacing="0"><tbody><tr><td style="vertical-align:bottom"><br></td></tr></tbody></table></td><td style="padding:0px"><br></td></tr><tr height="25" style="vertical-align:middle"><td width="30" style="vertical-align:middle"><table cellpadding="0" cellspacing="0"><tbody><tr><td style="vertical-align:bottom"></td></tr></tbody></table></td><td style="padding:0px"><br></td></tr></tbody></table></td></tr></tbody></table></div></div>
</div>
</div>