
Been having issues resolving .us domains since about 12:20 Pacific from Dallas/San Jose/San Francisco. Seems to be coming back slowly, DDOS maybe? $ nslookup neustar.us ;; connection timed out; trying next origin ;; connection timed out; no servers could be reached $ whois neustar.us [Querying whois.nic.us] [whois.nic.us: Temporary failure in name resolution] [Unable to connect to remote host]

It looks OK from TekSavvy in Toronto, Canada: [code:mike](~): dig +short neustar.us 107.21.46.236 [code:mike](~): jwhois -f neustar.us [Querying whois.nic.us] [whois.nic.us] Domain Name: NEUSTAR.US Domain ID: D670499-US Sponsoring Registrar: REGISTRY REGISTRAR Registrar URL (registration services): WWW.NEUSTAR.US ...<snip>... Thanks, - Mike -- Mike Jackson Network Analyst - Toronto Transit Commission Inbox: mike.jackson@ttc.ca ASN 40884 / MMJ6-ARIN -----Original Message----- From: Outages [mailto:outages-bounces@outages.org] On Behalf Of John Kinsella Sent: August-15-13 3:49 PM To: outages@outages.org Subject: [outages] .us TLD issues? Been having issues resolving .us domains since about 12:20 Pacific from Dallas/San Jose/San Francisco. Seems to be coming back slowly, DDOS maybe? $ nslookup neustar.us ;; connection timed out; trying next origin ;; connection timed out; no servers could be reached $ whois neustar.us [Querying whois.nic.us] [whois.nic.us: Temporary failure in name resolution] [Unable to connect to remote host] _______________________________________________ Outages mailing list Outages@outages.org https://puck.nether.net/mailman/listinfo/outages The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review retransmission dissemination or other use of or taking any action in reliance upon this information by persons or entities other than the intended recipient or delegate is strictly prohibited. If you received this in error please contact the sender and delete the material from any computer. The integrity and security of this message cannot be guaranteed on the Internet. The sender accepts no liability for the content of this e-mail or for the consequences of any actions taken on the basis of information provided. The recipient should check this e-mail and any attachments for the presence of viruses. The sender accepts no liability for any damage caused by any virus transmitted by this e-mail. This disclaimer is property of the TTC and must not be altered or circumvented in any manner.

Hi Mike, That dig really just demonstrates that you have a local cached answer. If you want to check whether the authority servers are reachable from 5645, you need to send explicit queries to each one (and avoid +short, since you want to check the RCODE). Joe Aue Te Ariki! He toki ki roto taku mahuna! On 2013-08-15, at 15:00, "Mike.Jackson@ttc.ca" <Mike.Jackson@ttc.ca> wrote:
It looks OK from TekSavvy in Toronto, Canada:
[code:mike](~): dig +short neustar.us 107.21.46.236 [code:mike](~): jwhois -f neustar.us [Querying whois.nic.us] [whois.nic.us] Domain Name: NEUSTAR.US Domain ID: D670499-US Sponsoring Registrar: REGISTRY REGISTRAR Registrar URL (registration services): WWW.NEUSTAR.US ...<snip>...
Thanks,
- Mike
-- Mike Jackson Network Analyst - Toronto Transit Commission Inbox: mike.jackson@ttc.ca ASN 40884 / MMJ6-ARIN
-----Original Message----- From: Outages [mailto:outages-bounces@outages.org] On Behalf Of John Kinsella Sent: August-15-13 3:49 PM To: outages@outages.org Subject: [outages] .us TLD issues?
Been having issues resolving .us domains since about 12:20 Pacific from Dallas/San Jose/San Francisco. Seems to be coming back slowly, DDOS maybe?
$ nslookup neustar.us ;; connection timed out; trying next origin ;; connection timed out; no servers could be reached
$ whois neustar.us [Querying whois.nic.us] [whois.nic.us: Temporary failure in name resolution] [Unable to connect to remote host]
_______________________________________________ Outages mailing list Outages@outages.org https://puck.nether.net/mailman/listinfo/outages
The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review retransmission dissemination or other use of or taking any action in reliance upon this information by persons or entities other than the intended recipient or delegate is strictly prohibited. If you received this in error please contact the sender and delete the material from any computer. The integrity and security of this message cannot be guaranteed on the Internet. The sender accepts no liability for the content of this e-mail or for the consequences of any actions taken on the basis of information provided. The recipient should check this e-mail and any attachments for the presence of viruses. The sender accepts no liability for any damage caused by any virus transmitted by this e-mail. This disclaimer is property of the TTC and must not be altered or circumvented in any manner.
_______________________________________________ Outages mailing list Outages@outages.org https://puck.nether.net/mailman/listinfo/outages

Hi Joe, yes I did a +trace and all of the other tests but omitted the output partially due to its length and partially from multitasking; doing too many things at once :) Cheers, - Mike This message sent by mobile device. ----- Original Message ----- From: Joe Abley [mailto:jabley@hopcount.ca] Sent: Thursday, August 15, 2013 05:19 PM To: Jackson, Mike Cc: jlk@thrashyour.com <jlk@thrashyour.com>; outages@outages.org <outages@outages.org> Subject: Re: [outages] .us TLD issues? Hi Mike, That dig really just demonstrates that you have a local cached answer. If you want to check whether the authority servers are reachable from 5645, you need to send explicit queries to each one (and avoid +short, since you want to check the RCODE). Joe Aue Te Ariki! He toki ki roto taku mahuna! On 2013-08-15, at 15:00, "Mike.Jackson@ttc.ca" <Mike.Jackson@ttc.ca> wrote:
It looks OK from TekSavvy in Toronto, Canada:
[code:mike](~): dig +short neustar.us 107.21.46.236 [code:mike](~): jwhois -f neustar.us [Querying whois.nic.us] [whois.nic.us] Domain Name: NEUSTAR.US Domain ID: D670499-US Sponsoring Registrar: REGISTRY REGISTRAR Registrar URL (registration services): WWW.NEUSTAR.US ...<snip>...
Thanks,
- Mike
-- Mike Jackson Network Analyst - Toronto Transit Commission Inbox: mike.jackson@ttc.ca ASN 40884 / MMJ6-ARIN
-----Original Message----- From: Outages [mailto:outages-bounces@outages.org] On Behalf Of John Kinsella Sent: August-15-13 3:49 PM To: outages@outages.org Subject: [outages] .us TLD issues?
Been having issues resolving .us domains since about 12:20 Pacific from Dallas/San Jose/San Francisco. Seems to be coming back slowly, DDOS maybe?
$ nslookup neustar.us ;; connection timed out; trying next origin ;; connection timed out; no servers could be reached
$ whois neustar.us [Querying whois.nic.us] [whois.nic.us: Temporary failure in name resolution] [Unable to connect to remote host]
_______________________________________________ Outages mailing list Outages@outages.org https://puck.nether.net/mailman/listinfo/outages
The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review retransmission dissemination or other use of or taking any action in reliance upon this information by persons or entities other than the intended recipient or delegate is strictly prohibited. If you received this in error please contact the sender and delete the material from any computer. The integrity and security of this message cannot be guaranteed on the Internet. The sender accepts no liability for the content of this e-mail or for the consequences of any actions taken on the basis of information provided. The recipient should check this e-mail and any attachments for the presence of viruses. The sender accepts no liability for any damage caused by any virus transmitted by this e-mail. This disclaimer is property of the TTC and must not be altered or circumvented in any manner.
_______________________________________________ Outages mailing list Outages@outages.org https://puck.nether.net/mailman/listinfo/outages
The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review retransmission dissemination or other use of or taking any action in reliance upon this information by persons or entities other than the intended recipient or delegate is strictly prohibited. If you received this in error please contact the sender and delete the material from any computer. The integrity and security of this message cannot be guaranteed on the Internet. The sender accepts no liability for the content of this e-mail or for the consequences of any actions taken on the basis of information provided. The recipient should check this e-mail and any attachments for the presence of viruses. The sender accepts no liability for any damage caused by any virus transmitted by this e-mail. This disclaimer is property of the TTC and must not be altered or circumvented in any manner.

On 2013-08-15, at 16:52, <Mike.Jackson@ttc.ca> wrote:
Hi Joe, yes I did a +trace and all of the other tests but omitted the output partially due to its length and partially from multitasking; doing too many things at once :)
Makes sense, I'm very familiar with that phenomenon :-)

Working here where are you coming from? nslookup ibm.com b.cctld.us Server: 156.154.125.70 Address 1: 156.154.125.70 b.cctld.us Name: ibm.com Address 1: 129.42.38.1 redirect.www.ibm.com nslookup neustar.us neustart.us Server: 199.59.243.107 Address 1: 199.59.243.107 Name: neustar.us Address 1: 107.21.46.236 ec2-107-21-46-236.compute-1.amazonaws.com "Pampers use multiple layers of protection to prevent leakage. Rommel used defense in depth to defend European fortresses." (A.White) Donald.Smith@CenturyLink.com
-----Original Message----- From: Outages [mailto:outages-bounces@outages.org] On Behalf Of John Kinsella Sent: Thursday, August 15, 2013 1:49 PM To: outages@outages.org Subject: [outages] .us TLD issues?
Been having issues resolving .us domains since about 12:20 Pacific from Dallas/San Jose/San Francisco. Seems to be coming back slowly, DDOS maybe?
$ nslookup neustar.us ;; connection timed out; trying next origin ;; connection timed out; no servers could be reached
$ whois neustar.us [Querying whois.nic.us] [whois.nic.us: Temporary failure in name resolution] [Unable to connect to remote host]
_______________________________________________ Outages mailing list Outages@outages.org https://puck.nether.net/mailman/listinfo/outages

Seems cleared up. My monitoring systems weren't configured to traceroute to the resolvers, will have that fixed for next time... John On Aug 15, 2013, at 1:08 PM, "Smith, Donald" <Donald.Smith@CenturyLink.com> wrote:
Working here where are you coming from?
nslookup ibm.com b.cctld.us Server: 156.154.125.70 Address 1: 156.154.125.70 b.cctld.us
Name: ibm.com Address 1: 129.42.38.1 redirect.www.ibm.com
nslookup neustar.us neustart.us Server: 199.59.243.107 Address 1: 199.59.243.107
Name: neustar.us Address 1: 107.21.46.236 ec2-107-21-46-236.compute-1.amazonaws.com
"Pampers use multiple layers of protection to prevent leakage. Rommel used defense in depth to defend European fortresses." (A.White) Donald.Smith@CenturyLink.com
-----Original Message----- From: Outages [mailto:outages-bounces@outages.org] On Behalf Of John Kinsella Sent: Thursday, August 15, 2013 1:49 PM To: outages@outages.org Subject: [outages] .us TLD issues?
Been having issues resolving .us domains since about 12:20 Pacific from Dallas/San Jose/San Francisco. Seems to be coming back slowly, DDOS maybe?
$ nslookup neustar.us ;; connection timed out; trying next origin ;; connection timed out; no servers could be reached
$ whois neustar.us [Querying whois.nic.us] [whois.nic.us: Temporary failure in name resolution] [Unable to connect to remote host]
_______________________________________________ Outages mailing list Outages@outages.org https://puck.nether.net/mailman/listinfo/outages
participants (4)
-
Joe Abley
-
John Kinsella
-
Mike.Jackson@ttc.ca
-
Smith, Donald