cannot resolve ca.gov from Linode default resolvers in Fremont
Hello, There seems to be an outage of ca.gov domain names from within Linode resolvers in Fremont. I'm not sure what the issue is, because I cannot see there being anything wrong with ca.gov nameservers; nonetheless, the names cannot be resolved through Linode's default resolver. It has been more than an hour already as ca.gov cannot be accessed with Linode's default resolvers. Cheers, Constantine. li16x-xxx:~# date Mon Jul 1 18:26:13 PDT 2013 li16x-xxx:~# li16x-xxx:~# li16x-xxx:~# dig @ordns.he.net www.dmv.ca.gov ; <<>> DiG 9.7.3 <<>> @ordns.he.net www.dmv.ca.gov ; (2 servers found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 49798 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0 ;; QUESTION SECTION: ;www.dmv.ca.gov. IN A ;; ANSWER SECTION: www.dmv.ca.gov. 56969 IN A 134.186.15.29 ;; Query time: 1 msec ;; SERVER: 2001:470:20::2#53(2001:470:20::2) ;; WHEN: Mon Jul 1 18:26:23 2013 ;; MSG SIZE rcvd: 48 li16x-xxx:~# li16x-xxx:~# li16x-xxx:~# dig @resolver1.fremont.linode.com. www.dmv.ca.gov ; <<>> DiG 9.7.3 <<>> @resolver1.fremont.linode.com. www.dmv.ca.gov ; (2 servers found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 8570 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0 ;; QUESTION SECTION: ;www.dmv.ca.gov. IN A ;; Query time: 8 msec ;; SERVER: 2600:3c01::2#53(2600:3c01::2) ;; WHEN: Mon Jul 1 18:26:33 2013 ;; MSG SIZE rcvd: 32 li16x-xxx:~# li16x-xxx:~# li16x-xxx:~# dig @resolver2.fremont.linode.com. www.dmv.ca.gov ; <<>> DiG 9.7.3 <<>> @resolver2.fremont.linode.com. www.dmv.ca.gov ; (2 servers found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 57994 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0 ;; QUESTION SECTION: ;www.dmv.ca.gov. IN A ;; Query time: 14 msec ;; SERVER: 2600:3c01::3#53(2600:3c01::3) ;; WHEN: Mon Jul 1 18:26:48 2013 ;; MSG SIZE rcvd: 32 li16x-xxx:~# li16x-xxx:~# li16x-xxx:~# dig -4 @resolver1.fremont.linode.com. www.dmv.ca.gov ; <<>> DiG 9.7.3 <<>> -4 @resolver1.fremont.linode.com. www.dmv.ca.gov ; (1 server found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 45873 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0 ;; QUESTION SECTION: ;www.dmv.ca.gov. IN A ;; Query time: 1 msec ;; SERVER: 74.207.241.5#53(74.207.241.5) ;; WHEN: Mon Jul 1 18:27:00 2013 ;; MSG SIZE rcvd: 32 li16x-xxx:~# li16x-xxx:~# li16x-xxx:~# dig +trace www.dmv.ca.gov ; <<>> DiG 9.7.3 <<>> +trace www.dmv.ca.gov ;; global options: +cmd . 518311 IN NS j.root-servers.net. . 518311 IN NS h.root-servers.net. . 518311 IN NS e.root-servers.net. . 518311 IN NS l.root-servers.net. . 518311 IN NS g.root-servers.net. . 518311 IN NS c.root-servers.net. . 518311 IN NS m.root-servers.net. . 518311 IN NS i.root-servers.net. . 518311 IN NS a.root-servers.net. . 518311 IN NS k.root-servers.net. . 518311 IN NS d.root-servers.net. . 518311 IN NS f.root-servers.net. . 518311 IN NS b.root-servers.net. ;; Received 228 bytes from 74.207.241.5#53(74.207.241.5) in 0 ms gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. ;; Received 139 bytes from 2001:503:c27::2:30#53(j.root-servers.net) in 1 ms ca.gov. 86400 IN NS ns5.net.ca.gov. ca.gov. 86400 IN NS ns6.net.ca.gov. ca.gov. 86400 IN NS ns7.net.ca.gov. ;; Received 138 bytes from 2001:500:4431::2:30#53(a.gov-servers.net) in 1 ms ;; connection timed out; no servers could be reached li16x-xxx:~# li16x-xxx:~# li16x-xxx:~# dig +trace ns5.net.ca.gov. ; <<>> DiG 9.7.3 <<>> +trace ns5.net.ca.gov. ;; global options: +cmd . 518298 IN NS j.root-servers.net. . 518298 IN NS h.root-servers.net. . 518298 IN NS e.root-servers.net. . 518298 IN NS l.root-servers.net. . 518298 IN NS g.root-servers.net. . 518298 IN NS c.root-servers.net. . 518298 IN NS m.root-servers.net. . 518298 IN NS i.root-servers.net. . 518298 IN NS a.root-servers.net. . 518298 IN NS k.root-servers.net. . 518298 IN NS d.root-servers.net. . 518298 IN NS f.root-servers.net. . 518298 IN NS b.root-servers.net. ;; Received 228 bytes from 74.207.241.5#53(74.207.241.5) in 0 ms gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. ;; Received 139 bytes from 192.112.36.4#53(g.root-servers.net) in 128 ms ca.gov. 86400 IN NS ns5.net.ca.gov. ca.gov. 86400 IN NS ns6.net.ca.gov. ca.gov. 86400 IN NS ns7.net.ca.gov. ;; Received 130 bytes from 2001:500:4431::2:30#53(a.gov-servers.net) in 1 ms ;; connection timed out; no servers could be reached li16x-xxx:~# li16x-xxx:~# li16x-xxx:~# dig @a.gov-servers.net ns5.net.ca.gov. ; <<>> DiG 9.7.3 <<>> @a.gov-servers.net ns5.net.ca.gov. ; (2 servers found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 3857 ;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 3, ADDITIONAL: 3 ;; WARNING: recursion requested but not available ;; QUESTION SECTION: ;ns5.net.ca.gov. IN A ;; AUTHORITY SECTION: ca.gov. 86400 IN NS ns5.net.ca.gov. ca.gov. 86400 IN NS ns6.net.ca.gov. ca.gov. 86400 IN NS ns7.net.ca.gov. ;; ADDITIONAL SECTION: ns5.net.ca.gov. 86400 IN A 134.186.254.247 ns6.net.ca.gov. 86400 IN A 205.225.182.2 ns7.net.ca.gov. 86400 IN A 205.225.182.66 ;; Query time: 1 msec ;; SERVER: 2001:500:4431::2:30#53(2001:500:4431::2:30) ;; WHEN: Mon Jul 1 18:27:42 2013 ;; MSG SIZE rcvd: 130 li16x-xxx:~# li16x-xxx:~# li16x-xxx:~# dig @ns5.net.ca.gov. ns5.net.ca.gov. dig: couldn't get address for 'ns5.net.ca.gov.': not found li16x-xxx:~# li16x-xxx:~# li16x-xxx:~# dig @134.186.254.247 ns5.net.ca.gov. ; <<>> DiG 9.7.3 <<>> @134.186.254.247 ns5.net.ca.gov. ; (1 server found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 29218 ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0 ;; QUESTION SECTION: ;ns5.net.ca.gov. IN A ;; ANSWER SECTION: ns5.net.ca.gov. 86400 IN A 134.186.254.247 ;; Query time: 7 msec ;; SERVER: 134.186.254.247#53(134.186.254.247) ;; WHEN: Mon Jul 1 18:28:03 2013 ;; MSG SIZE rcvd: 48 li16x-xxx:~# li16x-xxx:~# li16x-xxx:~# date Mon Jul 1 18:28:10 PDT 2013 li16x-xxx:~# li16x-xxx:~# li16x-xxx:~# dig @134.186.254.247 www.dmv.ca.gov ; <<>> DiG 9.7.3 <<>> @134.186.254.247 www.dmv.ca.gov ; (1 server found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 40218 ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0 ;; QUESTION SECTION: ;www.dmv.ca.gov. IN A ;; ANSWER SECTION: www.dmv.ca.gov. 86400 IN A 134.186.15.29 ;; Query time: 6 msec ;; SERVER: 134.186.254.247#53(134.186.254.247) ;; WHEN: Mon Jul 1 18:28:25 2013 ;; MSG SIZE rcvd: 48 li16x-xxx:~# li16x-xxx:~# li16x-xxx:~# date Mon Jul 1 18:28:28 PDT 2013 li16x-xxx:~# li16x-xxx:~#
Either it's over, or it was just you / Linode: http://www.downforeveryoneorjustme.com/www.dmv.ca.gov And my local check: [gherbert@localhost ~]$ dig +trace www.dmv.ca.gov ; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.10.rc1.el6 <<>> +trace www.dmv.ca.gov ;; global options: +cmd . 5 IN NS e.root-servers.net. . 5 IN NS b.root-servers.net. . 5 IN NS a.root-servers.net. . 5 IN NS h.root-servers.net. . 5 IN NS k.root-servers.net. . 5 IN NS m.root-servers.net. . 5 IN NS l.root-servers.net. . 5 IN NS j.root-servers.net. . 5 IN NS i.root-servers.net. . 5 IN NS c.root-servers.net. . 5 IN NS f.root-servers.net. . 5 IN NS g.root-servers.net. . 5 IN NS d.root-servers.net. ;; Received 512 bytes from 192.168.135.2#53(192.168.135.2) in 155 ms gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. ;; Received 139 bytes from 192.203.230.10#53(192.203.230.10) in 419 ms ca.gov. 86400 IN NS ns5.net.ca.gov. ca.gov. 86400 IN NS ns6.net.ca.gov. ca.gov. 86400 IN NS ns7.net.ca.gov. ;; Received 138 bytes from 69.36.157.30#53(69.36.157.30) in 139 ms www.dmv.ca.gov. 86400 IN A 134.186.15.29 ;; Received 48 bytes from 205.225.182.66#53(205.225.182.66) in 20 ms On Mon, Jul 1, 2013 at 6:31 PM, Constantine A. Murenin <mureninc@gmail.com>wrote:
Hello,
There seems to be an outage of ca.gov domain names from within Linode resolvers in Fremont. I'm not sure what the issue is, because I cannot see there being anything wrong with ca.gov nameservers; nonetheless, the names cannot be resolved through Linode's default resolver.
It has been more than an hour already as ca.gov cannot be accessed with Linode's default resolvers.
Cheers, Constantine.
li16x-xxx:~# date Mon Jul 1 18:26:13 PDT 2013 li16x-xxx:~# li16x-xxx:~# li16x-xxx:~# dig @ordns.he.net www.dmv.ca.gov
; <<>> DiG 9.7.3 <<>> @ordns.he.net www.dmv.ca.gov ; (2 servers found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 49798 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION: ;www.dmv.ca.gov. IN A
;; ANSWER SECTION: www.dmv.ca.gov. 56969 IN A 134.186.15.29
;; Query time: 1 msec ;; SERVER: 2001:470:20::2#53(2001:470:20:**:2) ;; WHEN: Mon Jul 1 18:26:23 2013 ;; MSG SIZE rcvd: 48
li16x-xxx:~# li16x-xxx:~# li16x-xxx:~# dig @resolver1.fremont.linode.com. www.dmv.ca.gov
; <<>> DiG 9.7.3 <<>> @resolver1.fremont.linode.com. www.dmv.ca.gov ; (2 servers found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 8570 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION: ;www.dmv.ca.gov. IN A
;; Query time: 8 msec ;; SERVER: 2600:3c01::2#53(2600:3c01::2) ;; WHEN: Mon Jul 1 18:26:33 2013 ;; MSG SIZE rcvd: 32
li16x-xxx:~# li16x-xxx:~# li16x-xxx:~# dig @resolver2.fremont.linode.com. www.dmv.ca.gov
; <<>> DiG 9.7.3 <<>> @resolver2.fremont.linode.com. www.dmv.ca.gov ; (2 servers found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 57994 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION: ;www.dmv.ca.gov. IN A
;; Query time: 14 msec ;; SERVER: 2600:3c01::3#53(2600:3c01::3) ;; WHEN: Mon Jul 1 18:26:48 2013 ;; MSG SIZE rcvd: 32
li16x-xxx:~# li16x-xxx:~# li16x-xxx:~# dig -4 @resolver1.fremont.linode.com. www.dmv.ca.gov
; <<>> DiG 9.7.3 <<>> -4 @resolver1.fremont.linode.com. www.dmv.ca.gov ; (1 server found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 45873 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION: ;www.dmv.ca.gov. IN A
;; Query time: 1 msec ;; SERVER: 74.207.241.5#53(74.207.241.5) ;; WHEN: Mon Jul 1 18:27:00 2013 ;; MSG SIZE rcvd: 32
li16x-xxx:~# li16x-xxx:~# li16x-xxx:~# dig +trace www.dmv.ca.gov
; <<>> DiG 9.7.3 <<>> +trace www.dmv.ca.gov ;; global options: +cmd . 518311 IN NS j.root-servers.net. . 518311 IN NS h.root-servers.net. . 518311 IN NS e.root-servers.net. . 518311 IN NS l.root-servers.net. . 518311 IN NS g.root-servers.net. . 518311 IN NS c.root-servers.net. . 518311 IN NS m.root-servers.net. . 518311 IN NS i.root-servers.net. . 518311 IN NS a.root-servers.net. . 518311 IN NS k.root-servers.net. . 518311 IN NS d.root-servers.net. . 518311 IN NS f.root-servers.net. . 518311 IN NS b.root-servers.net. ;; Received 228 bytes from 74.207.241.5#53(74.207.241.5) in 0 ms
gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. ;; Received 139 bytes from 2001:503:c27::2:30#53(j.root-**servers.net<http://j.root-servers.net>) in 1 ms
ca.gov. 86400 IN NS ns5.net.ca.gov. ca.gov. 86400 IN NS ns6.net.ca.gov. ca.gov. 86400 IN NS ns7.net.ca.gov. ;; Received 138 bytes from 2001:500:4431::2:30#53(a.gov-**servers.net<http://a.gov-servers.net>) in 1 ms
;; connection timed out; no servers could be reached li16x-xxx:~# li16x-xxx:~# li16x-xxx:~# dig +trace ns5.net.ca.gov.
; <<>> DiG 9.7.3 <<>> +trace ns5.net.ca.gov. ;; global options: +cmd . 518298 IN NS j.root-servers.net. . 518298 IN NS h.root-servers.net. . 518298 IN NS e.root-servers.net. . 518298 IN NS l.root-servers.net. . 518298 IN NS g.root-servers.net. . 518298 IN NS c.root-servers.net. . 518298 IN NS m.root-servers.net. . 518298 IN NS i.root-servers.net. . 518298 IN NS a.root-servers.net. . 518298 IN NS k.root-servers.net. . 518298 IN NS d.root-servers.net. . 518298 IN NS f.root-servers.net. . 518298 IN NS b.root-servers.net. ;; Received 228 bytes from 74.207.241.5#53(74.207.241.5) in 0 ms
gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. ;; Received 139 bytes from 192.112.36.4#53(g.root-**servers.net<http://g.root-servers.net>) in 128 ms
ca.gov. 86400 IN NS ns5.net.ca.gov. ca.gov. 86400 IN NS ns6.net.ca.gov. ca.gov. 86400 IN NS ns7.net.ca.gov. ;; Received 130 bytes from 2001:500:4431::2:30#53(a.gov-**servers.net<http://a.gov-servers.net>) in 1 ms
;; connection timed out; no servers could be reached li16x-xxx:~# li16x-xxx:~# li16x-xxx:~# dig @a.gov-servers.net ns5.net.ca.gov.
; <<>> DiG 9.7.3 <<>> @a.gov-servers.net ns5.net.ca.gov. ; (2 servers found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 3857 ;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 3, ADDITIONAL: 3 ;; WARNING: recursion requested but not available
;; QUESTION SECTION: ;ns5.net.ca.gov. IN A
;; AUTHORITY SECTION: ca.gov. 86400 IN NS ns5.net.ca.gov. ca.gov. 86400 IN NS ns6.net.ca.gov. ca.gov. 86400 IN NS ns7.net.ca.gov.
;; ADDITIONAL SECTION: ns5.net.ca.gov. 86400 IN A 134.186.254.247 ns6.net.ca.gov. 86400 IN A 205.225.182.2 ns7.net.ca.gov. 86400 IN A 205.225.182.66
;; Query time: 1 msec ;; SERVER: 2001:500:4431::2:30#53(2001:**500:4431::2:30) ;; WHEN: Mon Jul 1 18:27:42 2013 ;; MSG SIZE rcvd: 130
li16x-xxx:~# li16x-xxx:~# li16x-xxx:~# dig @ns5.net.ca.gov. ns5.net.ca.gov. dig: couldn't get address for 'ns5.net.ca.gov.': not found li16x-xxx:~# li16x-xxx:~# li16x-xxx:~# dig @134.186.254.247 ns5.net.ca.gov.
; <<>> DiG 9.7.3 <<>> @134.186.254.247 ns5.net.ca.gov. ; (1 server found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 29218 ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION: ;ns5.net.ca.gov. IN A
;; ANSWER SECTION: ns5.net.ca.gov. 86400 IN A 134.186.254.247
;; Query time: 7 msec ;; SERVER: 134.186.254.247#53(134.186.**254.247) ;; WHEN: Mon Jul 1 18:28:03 2013 ;; MSG SIZE rcvd: 48
li16x-xxx:~# li16x-xxx:~# li16x-xxx:~# date Mon Jul 1 18:28:10 PDT 2013 li16x-xxx:~# li16x-xxx:~# li16x-xxx:~# dig @134.186.254.247 www.dmv.ca.gov
; <<>> DiG 9.7.3 <<>> @134.186.254.247 www.dmv.ca.gov ; (1 server found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 40218 ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION: ;www.dmv.ca.gov. IN A
;; ANSWER SECTION: www.dmv.ca.gov. 86400 IN A 134.186.15.29
;; Query time: 6 msec ;; SERVER: 134.186.254.247#53(134.186.**254.247) ;; WHEN: Mon Jul 1 18:28:25 2013 ;; MSG SIZE rcvd: 48
li16x-xxx:~# li16x-xxx:~# li16x-xxx:~# date Mon Jul 1 18:28:28 PDT 2013 li16x-xxx:~# li16x-xxx:~#
______________________________**_________________ Outages mailing list Outages@outages.org https://puck.nether.net/**mailman/listinfo/outages<https://puck.nether.net/mailman/listinfo/outages>
-- -george william herbert george.herbert@gmail.com
It's not over, Linode is still not working: li16x-xxx:~# dig @ns5.net.ca.gov. ns5.net.ca.gov.; date dig: couldn't get address for 'ns5.net.ca.gov.': not found Mon Jul 1 18:55:54 PDT 2013 li16x-xxx:~# li16x-xxx:~# li16x-xxx:~# dig @ns5.net.ca.gov. ns5.net.ca.gov. ; date dig: couldn't get address for 'ns5.net.ca.gov.': not found Mon Jul 1 19:34:48 PDT 2013 li16x-xxx:~# li16x-xxx:~# li16x-xxx:~# host www.dmv.ca.gov; date Host www.dmv.ca.gov not found: 3(NXDOMAIN) Mon Jul 1 19:35:25 PDT 2013 li16x-xxx:~# C. On 1 July 2013 19:25, George Herbert <george.herbert@gmail.com> wrote:
Either it's over, or it was just you / Linode:
http://www.downforeveryoneorjustme.com/www.dmv.ca.gov
And my local check: [gherbert@localhost ~]$ dig +trace www.dmv.ca.gov
; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.10.rc1.el6 <<>> +trace www.dmv.ca.gov ;; global options: +cmd . 5 IN NS e.root-servers.net. . 5 IN NS b.root-servers.net. . 5 IN NS a.root-servers.net. . 5 IN NS h.root-servers.net. . 5 IN NS k.root-servers.net. . 5 IN NS m.root-servers.net. . 5 IN NS l.root-servers.net. . 5 IN NS j.root-servers.net. . 5 IN NS i.root-servers.net. . 5 IN NS c.root-servers.net. . 5 IN NS f.root-servers.net. . 5 IN NS g.root-servers.net. . 5 IN NS d.root-servers.net. ;; Received 512 bytes from 192.168.135.2#53(192.168.135.2) in 155 ms
gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. ;; Received 139 bytes from 192.203.230.10#53(192.203.230.10) in 419 ms
ca.gov. 86400 IN NS ns5.net.ca.gov. ca.gov. 86400 IN NS ns6.net.ca.gov. ca.gov. 86400 IN NS ns7.net.ca.gov. ;; Received 138 bytes from 69.36.157.30#53(69.36.157.30) in 139 ms
www.dmv.ca.gov. 86400 IN A 134.186.15.29 ;; Received 48 bytes from 205.225.182.66#53(205.225.182.66) in 20 ms
On Mon, Jul 1, 2013 at 6:31 PM, Constantine A. Murenin <mureninc@gmail.com> wrote:
Hello,
There seems to be an outage of ca.gov domain names from within Linode resolvers in Fremont. I'm not sure what the issue is, because I cannot see there being anything wrong with ca.gov nameservers; nonetheless, the names cannot be resolved through Linode's default resolver.
It has been more than an hour already as ca.gov cannot be accessed with Linode's default resolvers.
Cheers, Constantine.
li16x-xxx:~# date Mon Jul 1 18:26:13 PDT 2013 li16x-xxx:~# li16x-xxx:~# li16x-xxx:~# dig @ordns.he.net www.dmv.ca.gov
; <<>> DiG 9.7.3 <<>> @ordns.he.net www.dmv.ca.gov ; (2 servers found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 49798 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION: ;www.dmv.ca.gov. IN A
;; ANSWER SECTION: www.dmv.ca.gov. 56969 IN A 134.186.15.29
;; Query time: 1 msec ;; SERVER: 2001:470:20::2#53(2001:470:20::2) ;; WHEN: Mon Jul 1 18:26:23 2013 ;; MSG SIZE rcvd: 48
li16x-xxx:~# li16x-xxx:~# li16x-xxx:~# dig @resolver1.fremont.linode.com. www.dmv.ca.gov
; <<>> DiG 9.7.3 <<>> @resolver1.fremont.linode.com. www.dmv.ca.gov ; (2 servers found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 8570 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION: ;www.dmv.ca.gov. IN A
;; Query time: 8 msec ;; SERVER: 2600:3c01::2#53(2600:3c01::2) ;; WHEN: Mon Jul 1 18:26:33 2013 ;; MSG SIZE rcvd: 32
li16x-xxx:~# li16x-xxx:~# li16x-xxx:~# dig @resolver2.fremont.linode.com. www.dmv.ca.gov
; <<>> DiG 9.7.3 <<>> @resolver2.fremont.linode.com. www.dmv.ca.gov ; (2 servers found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 57994 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION: ;www.dmv.ca.gov. IN A
;; Query time: 14 msec ;; SERVER: 2600:3c01::3#53(2600:3c01::3) ;; WHEN: Mon Jul 1 18:26:48 2013 ;; MSG SIZE rcvd: 32
li16x-xxx:~# li16x-xxx:~# li16x-xxx:~# dig -4 @resolver1.fremont.linode.com. www.dmv.ca.gov
; <<>> DiG 9.7.3 <<>> -4 @resolver1.fremont.linode.com. www.dmv.ca.gov ; (1 server found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 45873 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION: ;www.dmv.ca.gov. IN A
;; Query time: 1 msec ;; SERVER: 74.207.241.5#53(74.207.241.5) ;; WHEN: Mon Jul 1 18:27:00 2013 ;; MSG SIZE rcvd: 32
li16x-xxx:~# li16x-xxx:~# li16x-xxx:~# dig +trace www.dmv.ca.gov
; <<>> DiG 9.7.3 <<>> +trace www.dmv.ca.gov ;; global options: +cmd . 518311 IN NS j.root-servers.net. . 518311 IN NS h.root-servers.net. . 518311 IN NS e.root-servers.net. . 518311 IN NS l.root-servers.net. . 518311 IN NS g.root-servers.net. . 518311 IN NS c.root-servers.net. . 518311 IN NS m.root-servers.net. . 518311 IN NS i.root-servers.net. . 518311 IN NS a.root-servers.net. . 518311 IN NS k.root-servers.net. . 518311 IN NS d.root-servers.net. . 518311 IN NS f.root-servers.net. . 518311 IN NS b.root-servers.net. ;; Received 228 bytes from 74.207.241.5#53(74.207.241.5) in 0 ms
gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. ;; Received 139 bytes from 2001:503:c27::2:30#53(j.root-servers.net) in 1 ms
ca.gov. 86400 IN NS ns5.net.ca.gov. ca.gov. 86400 IN NS ns6.net.ca.gov. ca.gov. 86400 IN NS ns7.net.ca.gov. ;; Received 138 bytes from 2001:500:4431::2:30#53(a.gov-servers.net) in 1 ms
;; connection timed out; no servers could be reached li16x-xxx:~# li16x-xxx:~# li16x-xxx:~# dig +trace ns5.net.ca.gov.
; <<>> DiG 9.7.3 <<>> +trace ns5.net.ca.gov. ;; global options: +cmd . 518298 IN NS j.root-servers.net. . 518298 IN NS h.root-servers.net. . 518298 IN NS e.root-servers.net. . 518298 IN NS l.root-servers.net. . 518298 IN NS g.root-servers.net. . 518298 IN NS c.root-servers.net. . 518298 IN NS m.root-servers.net. . 518298 IN NS i.root-servers.net. . 518298 IN NS a.root-servers.net. . 518298 IN NS k.root-servers.net. . 518298 IN NS d.root-servers.net. . 518298 IN NS f.root-servers.net. . 518298 IN NS b.root-servers.net. ;; Received 228 bytes from 74.207.241.5#53(74.207.241.5) in 0 ms
gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. ;; Received 139 bytes from 192.112.36.4#53(g.root-servers.net) in 128 ms
ca.gov. 86400 IN NS ns5.net.ca.gov. ca.gov. 86400 IN NS ns6.net.ca.gov. ca.gov. 86400 IN NS ns7.net.ca.gov. ;; Received 130 bytes from 2001:500:4431::2:30#53(a.gov-servers.net) in 1 ms
;; connection timed out; no servers could be reached li16x-xxx:~# li16x-xxx:~# li16x-xxx:~# dig @a.gov-servers.net ns5.net.ca.gov.
; <<>> DiG 9.7.3 <<>> @a.gov-servers.net ns5.net.ca.gov. ; (2 servers found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 3857 ;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 3, ADDITIONAL: 3 ;; WARNING: recursion requested but not available
;; QUESTION SECTION: ;ns5.net.ca.gov. IN A
;; AUTHORITY SECTION: ca.gov. 86400 IN NS ns5.net.ca.gov. ca.gov. 86400 IN NS ns6.net.ca.gov. ca.gov. 86400 IN NS ns7.net.ca.gov.
;; ADDITIONAL SECTION: ns5.net.ca.gov. 86400 IN A 134.186.254.247 ns6.net.ca.gov. 86400 IN A 205.225.182.2 ns7.net.ca.gov. 86400 IN A 205.225.182.66
;; Query time: 1 msec ;; SERVER: 2001:500:4431::2:30#53(2001:500:4431::2:30) ;; WHEN: Mon Jul 1 18:27:42 2013 ;; MSG SIZE rcvd: 130
li16x-xxx:~# li16x-xxx:~# li16x-xxx:~# dig @ns5.net.ca.gov. ns5.net.ca.gov. dig: couldn't get address for 'ns5.net.ca.gov.': not found li16x-xxx:~# li16x-xxx:~# li16x-xxx:~# dig @134.186.254.247 ns5.net.ca.gov.
; <<>> DiG 9.7.3 <<>> @134.186.254.247 ns5.net.ca.gov. ; (1 server found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 29218 ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION: ;ns5.net.ca.gov. IN A
;; ANSWER SECTION: ns5.net.ca.gov. 86400 IN A 134.186.254.247
;; Query time: 7 msec ;; SERVER: 134.186.254.247#53(134.186.254.247) ;; WHEN: Mon Jul 1 18:28:03 2013 ;; MSG SIZE rcvd: 48
li16x-xxx:~# li16x-xxx:~# li16x-xxx:~# date Mon Jul 1 18:28:10 PDT 2013 li16x-xxx:~# li16x-xxx:~# li16x-xxx:~# dig @134.186.254.247 www.dmv.ca.gov
; <<>> DiG 9.7.3 <<>> @134.186.254.247 www.dmv.ca.gov ; (1 server found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 40218 ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION: ;www.dmv.ca.gov. IN A
;; ANSWER SECTION: www.dmv.ca.gov. 86400 IN A 134.186.15.29
;; Query time: 6 msec ;; SERVER: 134.186.254.247#53(134.186.254.247) ;; WHEN: Mon Jul 1 18:28:25 2013 ;; MSG SIZE rcvd: 48
li16x-xxx:~# li16x-xxx:~# li16x-xxx:~# date Mon Jul 1 18:28:28 PDT 2013 li16x-xxx:~# li16x-xxx:~#
_______________________________________________ Outages mailing list Outages@outages.org https://puck.nether.net/mailman/listinfo/outages
-- -george william herbert george.herbert@gmail.com
On Mon, Jul 01, 2013 at 07:37:23PM -0700, Constantine A. Murenin <mureninc@gmail.com> wrote a message of 326 lines which said:
It's not over, Linode is still not working:
Not the right tests. What you should do: 1) dig to the Linode resolvers. If the resolver is 2001:db8:1::53, then : dig @2001:db8:1::53 A ns5.net.ca.gov then the same with +cd (I don't know if Linode resolvers validate with DNSSEC) 2) dig to the authoritative resolvers to see if it is a network problem. Their addresses are 205.225.182.2, 134.186.254.247 and 205.225.182.66. So: dig @205.225.182.2 SOA ca.gov By the way, there IS something wrong in net.ca.gov. Name resolution of the nameservers' names servfails. To quote DNSviz "DNSKEYs exist for algorithm(s) 8, 7 in the net.ca.gov zone, but the net.ca.gov/SOA RRset was not signed by any DNSKEY with algorithm(s) 7." http://dnsviz.net/d/net.ca.gov/dnssec/
participants (3)
-
Constantine A. Murenin -
George Herbert -
Stephane Bortzmeyer