[prev in list] [next in list] [prev in thread] [next in thread] 

List:       outages-discussion
Subject:    Re: [Outages-discussion] [outages] [OUTAGES] www.openssl.org NXDOMAIN
From:       "Frank Bulk" <frnkblk () iname ! com>
Date:       2014-02-14 1:11:38
Message-ID: 017d01cf2921$b6600780$23201680$ () iname ! com
[Download RAW message or body]

This is a multipart message in MIME format.

[Attachment #2 (multipart/alternative)]
This is a multipart message in MIME format.


They have different serial numbers, too.  See
http://www.dnsinspect.com/openssl.net for a nice overview of the issues.

 

Frank

 

From: Outages [mailto:outages-bounces@outages.org] On Behalf Of Lyle Giese
Sent: Thursday, February 13, 2014 6:59 PM
To: outages@outages.org
Subject: Re: [outages] [OUTAGES] www.openssl.org NXDOMAIN

 

Right now from here, dig + trace for openssl.net is showing problems.

m.root-servers.net show the ns servers to be

ns6.gandi.net
ns1.openssl.com
dns1.indithosting.net
dns2.indithosting.net

I am not getting answers from ns6.gandi.net sometimes.  Oops a traceroute
shows my traffic goes through Level3.  So I can forgive that right now.

But...

You get different NS servers from different servers hosting openssl.net
dns2.indithosting.net is reporting the zone's NS servers as:

dns1.indithosting.net  through dns5.indihosting.net
ns1.openssl.com

and sometimes ns6.gandi.net, but not always.  Confusing at best.

Lyle Giese
LCR Computer Services, Inc.

On 02/13/14 02:17, James Hartig wrote:

Looks like that one nameserver 4.30.38.34 is on level3. Thanks for the
clarification Stephane.




Thanks,
--
James Hartig
Software Engineer @ Grooveshark.com
http://twitter.com/jameshartig 

 

 

 

 

On Thu, Feb 13, 2014 at 3:05 AM, Stephane Bortzmeyer <bortzmeyer@nic.fr
<mailto:bortzmeyer@nic.fr> > wrote:

On Thu, Feb 13, 2014 at 02:42:48AM -0500,
 James Hartig <fastest963@gmail.com <mailto:fastest963@gmail.com> > wrote

 a message of 70 lines which said:

> ** server can't find www.openssl.org <http://www.openssl.org> : NXDOMAIN

nslookup is a very poor DNS diagnostic tool. The problem is that
www.openssl.org <http://www.openssl.org>  is an alias to openssl.net
<http://openssl.net>  and openssl.net <http://openssl.net>  is
(stupidly) served by only one name server, which is currently down.

 






_______________________________________________
Outages mailing list
Outages@outages.org <mailto:Outages@outages.org> 
https://puck.nether.net/mailman/listinfo/outages

 


[Attachment #5 (text/html)]

<html xmlns:v="urn:schemas-microsoft-com:vml" \
xmlns:o="urn:schemas-microsoft-com:office:office" \
xmlns:w="urn:schemas-microsoft-com:office:word" \
xmlns:x="urn:schemas-microsoft-com:office:excel" \
xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" \
xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type \
content="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 15 \
(filtered medium)"><style><!-- /* Font Definitions */
@font-face
	{font-family:"Cambria Math";
	panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
	{font-family:Consolas;
	panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0in;
	margin-bottom:.0001pt;
	font-size:12.0pt;
	font-family:"Times New Roman","serif";
	color:black;}
a:link, span.MsoHyperlink
	{mso-style-priority:99;
	color:blue;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{mso-style-priority:99;
	color:purple;
	text-decoration:underline;}
pre
	{mso-style-priority:99;
	mso-style-link:"HTML Preformatted Char";
	margin:0in;
	margin-bottom:.0001pt;
	font-size:10.0pt;
	font-family:"Courier New";
	color:black;}
span.HTMLPreformattedChar
	{mso-style-name:"HTML Preformatted Char";
	mso-style-priority:99;
	mso-style-link:"HTML Preformatted";
	font-family:Consolas;
	color:black;}
span.EmailStyle19
	{mso-style-type:personal-reply;
	font-family:"Calibri","sans-serif";
	color:#1F497D;}
.MsoChpDefault
	{mso-style-type:export-only;
	font-size:10.0pt;}
@page WordSection1
	{size:8.5in 11.0in;
	margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
	{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body bgcolor=white lang=EN-US link=blue \
vlink=purple><div class=WordSection1><p class=MsoNormal><span \
style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>They have \
different serial numbers, too.&nbsp; See <a \
href="http://www.dnsinspect.com/openssl.net">http://www.dnsinspect.com/openssl.net</a> \
for a nice overview of the issues.<o:p></o:p></span></p><p class=MsoNormal><span \
style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p>&nbsp;</o:p></span></p><p \
class=MsoNormal><span \
style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Frank<o:p></o:p></span></p><p \
class=MsoNormal><span \
style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p>&nbsp;</o:p></span></p><div><div \
style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in'><p \
class=MsoNormal><b><span \
style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:windowtext'>From:</span></b><span \
style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:windowtext'> Outages \
[mailto:outages-bounces@outages.org] <b>On Behalf Of </b>Lyle Giese<br><b>Sent:</b> \
Thursday, February 13, 2014 6:59 PM<br><b>To:</b> \
outages@outages.org<br><b>Subject:</b> Re: [outages] [OUTAGES] www.openssl.org \
NXDOMAIN<o:p></o:p></span></p></div></div><p class=MsoNormal><o:p>&nbsp;</o:p></p><p \
class=MsoNormal style='margin-bottom:12.0pt'>Right now from here, dig + trace for \
openssl.net is showing problems.<br><br>m.root-servers.net show the ns servers to \
be<br><br>ns6.gandi.net<br>ns1.openssl.com<br>dns1.indithosting.net<br>dns2.indithosting.net<br><br>I \
am not getting answers from ns6.gandi.net sometimes.&nbsp; Oops a traceroute shows my \
traffic goes through Level3.&nbsp; So I can forgive that right \
now.<br><br>But...<br><br>You get different NS servers from different servers hosting \
openssl.net&nbsp; dns2.indithosting.net is reporting the zone's NS servers \
as:<br><br>dns1.indithosting.net&nbsp; through \
dns5.indihosting.net<br>ns1.openssl.com<br><br>and sometimes ns6.gandi.net, but not \
always.&nbsp; Confusing at best.<br><br>Lyle Giese<br>LCR Computer Services, \
Inc.<o:p></o:p></p><div><p class=MsoNormal>On 02/13/14 02:17, James Hartig \
wrote:<o:p></o:p></p></div><blockquote \
style='margin-top:5.0pt;margin-bottom:5.0pt'><div><p class=MsoNormal>Looks like that \
one nameserver&nbsp;4.30.38.34 is on level3. Thanks for the clarification \
Stephane.<o:p></o:p></p></div><div><p class=MsoNormal><br \
clear=all><o:p></o:p></p><div><div><p class=MsoNormal>Thanks,<br>--<br>James \
Hartig<br>Software Engineer @ Grooveshark.com<br><a \
href="http://twitter.com/jameshartig" \
target="_blank">http://twitter.com/jameshartig</a> <o:p></o:p></p><div><p \
class=MsoNormal>&nbsp;<o:p></o:p></p></div><div><p \
class=MsoNormal>&nbsp;<o:p></o:p></p></div><p \
class=MsoNormal><o:p>&nbsp;</o:p></p></div></div><p class=MsoNormal \
style='margin-bottom:12.0pt'><o:p>&nbsp;</o:p></p><div><p class=MsoNormal>On Thu, Feb \
13, 2014 at 3:05 AM, Stephane Bortzmeyer &lt;<a href="mailto:bortzmeyer@nic.fr" \
target="_blank">bortzmeyer@nic.fr</a>&gt; wrote:<o:p></o:p></p><blockquote \
style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in \
6.0pt;margin-left:4.8pt;margin-right:0in'><p class=MsoNormal>On Thu, Feb 13, 2014 at \
02:42:48AM -0500,<br>&nbsp;James Hartig &lt;<a \
href="mailto:fastest963@gmail.com">fastest963@gmail.com</a>&gt; \
wrote<o:p></o:p></p><div><p class=MsoNormal style='margin-bottom:12.0pt'>&nbsp;a \
message of 70 lines which said:<br><br>&gt; ** server can't find <a \
href="http://www.openssl.org" target="_blank">www.openssl.org</a>: \
NXDOMAIN<o:p></o:p></p></div><p class=MsoNormal style='margin-bottom:12.0pt'>nslookup \
is a very poor DNS diagnostic tool. The problem is that<br><a \
href="http://www.openssl.org" target="_blank">www.openssl.org</a> is an alias to <a \
href="http://openssl.net" target="_blank">openssl.net</a> and <a \
href="http://openssl.net" target="_blank">openssl.net</a> is<br>(stupidly) served by \
only one name server, which is currently down.<o:p></o:p></p></blockquote></div><p \
class=MsoNormal><o:p>&nbsp;</o:p></p></div><p \
class=MsoNormal><br><br><br><o:p></o:p></p><pre>_______________________________________________<o:p></o:p></pre><pre>Outages \
mailing list<o:p></o:p></pre><pre><a \
href="mailto:Outages@outages.org">Outages@outages.org</a><o:p></o:p></pre><pre><a \
href="https://puck.nether.net/mailman/listinfo/outages">https://puck.nether.net/mailman/listinfo/outages</a><o:p></o:p></pre></blockquote><p \
class=MsoNormal><o:p>&nbsp;</o:p></p></div></body></html>



_______________________________________________
Outages-discussion mailing list
Outages-discussion@outages.org
https://puck.nether.net/mailman/listinfo/outages-discussion


[prev in list] [next in list] [prev in thread] [next in thread] 

Configure | About | News | Add a list | Sponsored by KoreLogic