On Wed, Jul 08, 2020 at 11:20:27AM -0700, Brian Somers <[email protected]> wrote a message of 38 lines which said:
> I can only suspect that all 3 of these resolvers have an NTA for
> this domain!
No. My BIND and Unbound personal resolvers (which do not have a NTA)
get a reply and set AD. <xfiles>The truth is elsewhere.</xfiles>
% dig A grantee.fema.gov.
; <<>> DiG 9.11.5-P4-5.1+deb10u1-Debian <<>> A grantee.fema.gov.
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 62146
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL:
;; 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 4096
;; QUESTION SECTION:
;grantee.fema.gov. IN A
;; ANSWER SECTION:
grantee.fema.gov. 30 IN A 173.255.49.196
grantee.fema.gov. 30 IN RRSIG A 10 3 30 (
20200715002926 20200708002926
38990 grantee.fema.gov.
RolWLU7SxjgBJGOIXELMDVXK641r1oI3p7icXEJLjWM+
4GLdidyuwIqnSr5GyzG5zBSW4g+J9ZZWvz18asrCJcqp
+t+DtARbXoumyyTWMTKRh1TtqkQre3ncfM3vQAEOtRbp
Tjq3jmBdrwv+VQElWRYQ0H2Oy3NhiRQ6EJXNvOs=
)
grantee.fema.gov.
30
IN
RRSIG
A
10
3
30
(
20200712161915
20200705161915
25856
grantee.fema.gov.
NIKjzoiiFtvZ6KhH+eOF+ikxSU9iomF7aizRmN15Z23x
fVQkxB8sKRYtFdfWzlY5oBl0V/LVAXJI+TeuN4ovv+cT
7EZGYAC5q6y6I2CmcTtoDgmFHbSS90bLUC5ndYornCLD
YIb0Y2iMJ1P6kERDH9B4nTZoAJibUroB3t4y0z0=
)
;; Query time: 385 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Wed Jul 08 21:14:03 CEST 2020
;; MSG SIZE rcvd: 413
_______________________________________________
dns-operations mailing list
[email protected]
https://lists.dns-oarc.net/mailman/listinfo/dns-operations
