Created
November 26, 2018 08:38
-
-
Save ppanula/00f2fe4de7d12dbb7899dc02ea505a18 to your computer and use it in GitHub Desktop.
dnssec fails
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Nov 26 10:33:04 1 [365/1] question for 'grimaldi.napoli.it|MX' from 127.0.0.1 | |
| Nov 26 10:33:04 [365] grimaldi.napoli.it: Wants DNSSEC processing in query for MX | |
| Nov 26 10:33:04 [365] grimaldi.napoli.it: Looking for CNAME cache hit of 'grimaldi.napoli.it|CNAME' | |
| Nov 26 10:33:04 [365] grimaldi.napoli.it: No CNAME cache hit of 'grimaldi.napoli.it|CNAME' found | |
| Nov 26 10:33:04 [365] grimaldi.napoli.it: No cache hit for 'grimaldi.napoli.it|MX', trying to find an appropriate NS record | |
| Nov 26 10:33:04 [365] grimaldi.napoli.it: Checking if we have NS in cache for 'grimaldi.napoli.it' | |
| Nov 26 10:33:04 [365] grimaldi.napoli.it: no valid/useful NS in cache for 'grimaldi.napoli.it' | |
| Nov 26 10:33:04 [365] grimaldi.napoli.it: Checking if we have NS in cache for 'napoli.it' | |
| Nov 26 10:33:04 [365] grimaldi.napoli.it: no valid/useful NS in cache for 'napoli.it' | |
| Nov 26 10:33:04 [365] grimaldi.napoli.it: Checking if we have NS in cache for 'it' | |
| Nov 26 10:33:04 [365] grimaldi.napoli.it: NS (with ip, or non-glue) in cache for 'it' -> 'dns.nic.it' | |
| Nov 26 10:33:04 [365] grimaldi.napoli.it: within bailiwick: 1, in cache, ttl=10297 | |
| Nov 26 10:33:04 [365] grimaldi.napoli.it: NS (with ip, or non-glue) in cache for 'it' -> 's.dns.it' | |
| Nov 26 10:33:04 [365] grimaldi.napoli.it: within bailiwick: 1, in cache, ttl=10297 | |
| Nov 26 10:33:04 [365] grimaldi.napoli.it: NS (with ip, or non-glue) in cache for 'it' -> 'm.dns.it' | |
| Nov 26 10:33:04 [365] grimaldi.napoli.it: within bailiwick: 1, in cache, ttl=10297 | |
| Nov 26 10:33:04 [365] grimaldi.napoli.it: NS (with ip, or non-glue) in cache for 'it' -> 'a.dns.it' | |
| Nov 26 10:33:04 [365] grimaldi.napoli.it: within bailiwick: 1, in cache, ttl=85271 | |
| Nov 26 10:33:04 [365] grimaldi.napoli.it: NS (with ip, or non-glue) in cache for 'it' -> 'r.dns.it' | |
| Nov 26 10:33:04 [365] grimaldi.napoli.it: within bailiwick: 1, in cache, ttl=85271 | |
| Nov 26 10:33:04 [365] grimaldi.napoli.it: NS (with ip, or non-glue) in cache for 'it' -> 'nameserver.cnr.it' | |
| Nov 26 10:33:04 [365] grimaldi.napoli.it: within bailiwick: 1, in cache, ttl=10297 | |
| Nov 26 10:33:04 [365] grimaldi.napoli.it: We have NS in cache for 'it' (flawedNSSet=0) | |
| Nov 26 10:33:04 [365] grimaldi.napoli.it: Cache consultations done, have 6 NS to contact | |
| Nov 26 10:33:04 [365] grimaldi.napoli.it.: Nameservers: r.dns.it.(0.00ms), nameserver.cnr.it.(0.00ms), s.dns.it.(0.00ms), | |
| Nov 26 10:33:04 [365] grimaldi.napoli.it.: a.dns.it.(0.00ms), m.dns.it.(0.01ms), dns.nic.it.(0.01ms) | |
| Nov 26 10:33:04 [365] grimaldi.napoli.it: Trying to resolve NS 'r.dns.it' (1/6) | |
| Nov 26 10:33:04 [365] r.dns.it: Wants DNSSEC processing in query for A | |
| Nov 26 10:33:04 [365] r.dns.it: Looking for CNAME cache hit of 'r.dns.it|CNAME' | |
| Nov 26 10:33:04 [365] r.dns.it: No CNAME cache hit of 'r.dns.it|CNAME' found | |
| Nov 26 10:33:04 [365] r.dns.it: Found cache hit for A: 193.206.141.46[ttl=85271] | |
| Nov 26 10:33:04 [365] grimaldi.napoli.it: Resolved 'it' NS r.dns.it to: 193.206.141.46 | |
| Nov 26 10:33:04 [365] grimaldi.napoli.it: Trying IP 193.206.141.46:53, asking 'grimaldi.napoli.it|MX' | |
| Nov 26 10:33:04 [365] grimaldi.napoli.it: Got 9 answers from r.dns.it (193.206.141.46), rcode=0 (No Error), aa=0, in 59ms | |
| Nov 26 10:33:04 [365] grimaldi.napoli.it: accept answer 'grimaldi.napoli.it|NS|ns2.kpnqwest.it.' from 'it' nameservers? 2 YES! | |
| Nov 26 10:33:04 [365] grimaldi.napoli.it: accept answer 'grimaldi.napoli.it|NS|ns.kpnqwest.it.' from 'it' nameservers? 2 YES! | |
| Nov 26 10:33:04 [365] grimaldi.napoli.it: accept answer '1C28EQ3CF8JONLJ1ADA6GODOVQO85VT3.it|NSEC3|1 1 10 6f4374dcffa5a230 1C4PMO6QDAUPA0DJDCLP0CJQIU89LCR2 NS SOA RRSIG DNSKEY NSEC3PARAM' from 'it' nameservers? 2 YES! | |
| Nov 26 10:33:04 [365] grimaldi.napoli.it: accept answer '1C28EQ3CF8JONLJ1ADA6GODOVQO85VT3.it|RRSIG|NSEC3 10 2 3600 20181226070233 20181126070233 18395 it. jjibboqweTtFAZBfkKWOyAMZmtphNNJkzLn9x6+TXniBWvROxuwSjLyVDwLa9zknfcbNRzzPaW+oJbicsfuGiqD6ssUbOxhKNAdMLmqwbH+sHzkSH1eig/Xz7suoxzCqCN/WRAiMTSzj55ZwN8CekoxpW31E8U8LkHZFKFUdVU/8E2F4OgXV9EsT8dsCOiUymCuqh9QNHOYaWszok8o+DNo6atN5OLMKayiZM/2HOhvxnFzvkeIzMr6X2MiIMS4h4j5lbgmUIbCkBCrlky7c/rVnL38InTuNjZUQD/CMnIRGsaRL9UPeVgoi02MJs7NWZAIvZWn2iwbLkOaSKEr0Yw==' from 'it' nameservers? 2 RRSIG - separate | |
| Nov 26 10:33:04 [365] grimaldi.napoli.it: accept answer 'OFJKVLEFCSDAM1D0O63SSAU9RDMHU15V.it|NSEC3|1 1 10 6f4374dcffa5a230 OH8B24J9FE1HIR8PI29DI4HREDH601GE NS DS RRSIG' from 'it' nameservers? 2 YES! | |
| Nov 26 10:33:04 [365] grimaldi.napoli.it: accept answer 'OFJKVLEFCSDAM1D0O63SSAU9RDMHU15V.it|RRSIG|NSEC3 10 2 3600 20181226070233 20181126070233 18395 it. KcumTKhTfe2VQA7wEqTSe74Gq7Dnb4laG2dzVM4uoq4NaiGmlXswgdmB9OGGg9o+Vwi+sKn1vZQLCFWJez+hTLiYOI1f0bQfV6F1L4sGyB2PRb4yRDYwQnvxYnLf6paQ/Gea4AfItx/LYU6pN07wGD8y/euGkdLhY6+K/1tJwh/nEfrhhboEoQsvBvNsUS/m9QW1kLHiDxUixFaouET68rk4Va6l0VYTiShpJaQeJYbHGNwm+zAENG9me0USEJpSiYJlAqjhRFS9GiQ7KEKDBMu+6ZroAsddBZZ7f7bzb9GKkvoHA7UwFjwmZKuci4yxpgkbv1vP8wZMwl+apezvrQ==' from 'it' nameservers? 2 RRSIG - separate | |
| Nov 26 10:33:04 [365] grimaldi.napoli.it: accept answer 'ns.kpnqwest.it|A|212.97.32.3' from 'it' nameservers? 3 YES! | |
| Nov 26 10:33:04 [365] grimaldi.napoli.it: accept answer 'ns2.kpnqwest.it|A|94.141.24.93' from 'it' nameservers? 3 YES! | |
| Nov 26 10:33:04 [365] grimaldi.napoli.it: OPT answer '.' from 'it' nameservers | |
| Nov 26 10:33:04 [365] grimaldi.napoli.it: determining status after receiving this packet | |
| Nov 26 10:33:04 [365] grimaldi.napoli.it: got NS record 'grimaldi.napoli.it' -> 'ns2.kpnqwest.it.' | |
| Nov 26 10:33:04 [365] grimaldi.napoli.it: got NS record 'grimaldi.napoli.it' -> 'ns.kpnqwest.it.' | |
| Nov 26 10:33:04 [365] grimaldi.napoli.it: status=did not resolve, got 2 NS, looping to them | |
| Nov 26 10:33:04 [365] grimaldi.napoli.it.: Nameservers: ns2.kpnqwest.it.(0.00ms), ns.kpnqwest.it.(0.03ms) | |
| Nov 26 10:33:04 [365] grimaldi.napoli.it: Trying to resolve NS 'ns2.kpnqwest.it' (1/2) | |
| Nov 26 10:33:04 [365] ns2.kpnqwest.it: Wants DNSSEC processing in query for A | |
| Nov 26 10:33:04 [365] ns2.kpnqwest.it: Looking for CNAME cache hit of 'ns2.kpnqwest.it|CNAME' | |
| Nov 26 10:33:04 [365] ns2.kpnqwest.it: No CNAME cache hit of 'ns2.kpnqwest.it|CNAME' found | |
| Nov 26 10:33:04 [365] ns2.kpnqwest.it: Found cache hit for A: 94.141.24.93[ttl=10800] | |
| Nov 26 10:33:04 [365] grimaldi.napoli.it: Resolved 'grimaldi.napoli.it' NS ns2.kpnqwest.it to: 94.141.24.93 | |
| Nov 26 10:33:04 [365] grimaldi.napoli.it: Trying IP 94.141.24.93:53, asking 'grimaldi.napoli.it|MX' | |
| Nov 26 10:33:04 [365] grimaldi.napoli.it: Got 8 answers from ns2.kpnqwest.it (94.141.24.93), rcode=0 (No Error), aa=1, in 46ms | |
| Nov 26 10:33:04 [365] grimaldi.napoli.it: accept answer 'grimaldi.napoli.it|MX|10 avas02.eutelia.it.' from 'grimaldi.napoli.it' nameservers? 1 YES! | |
| Nov 26 10:33:04 [365] grimaldi.napoli.it: accept answer 'grimaldi.napoli.it|MX|10 avas03.eutelia.it.' from 'grimaldi.napoli.it' nameservers? 1 YES! | |
| Nov 26 10:33:04 [365] grimaldi.napoli.it: accept answer 'grimaldi.napoli.it|MX|10 avas01.eutelia.it.' from 'grimaldi.napoli.it' nameservers? 1 YES! | |
| Nov 26 10:33:04 [365] grimaldi.napoli.it: accept answer 'grimaldi.napoli.it|NS|ns.kpnqwest.it.' from 'grimaldi.napoli.it' nameservers? 2 YES! | |
| Nov 26 10:33:04 [365] grimaldi.napoli.it: accept answer 'grimaldi.napoli.it|NS|ns2.kpnqwest.it.' from 'grimaldi.napoli.it' nameservers? 2 YES! | |
| Nov 26 10:33:04 [365] grimaldi.napoli.it: accept answer 'ns.kpnqwest.it|A|212.97.32.3' from 'grimaldi.napoli.it' nameservers? 3 NO! | |
| Nov 26 10:33:04 [365] grimaldi.napoli.it: accept answer 'ns2.kpnqwest.it|A|94.141.24.93' from 'grimaldi.napoli.it' nameservers? 3 NO! | |
| Nov 26 10:33:04 [365] grimaldi.napoli.it: OPT answer '.' from 'grimaldi.napoli.it' nameservers | |
| Nov 26 10:33:04 [365] grimaldi.napoli.it: determining status after receiving this packet | |
| Nov 26 10:33:04 [365] grimaldi.napoli.it: answer is in: resolved to '10 avas02.eutelia.it.|MX' | |
| Nov 26 10:33:04 [365] grimaldi.napoli.it: answer is in: resolved to '10 avas03.eutelia.it.|MX' | |
| Nov 26 10:33:04 [365] grimaldi.napoli.it: answer is in: resolved to '10 avas01.eutelia.it.|MX' | |
| Nov 26 10:33:04 [365] grimaldi.napoli.it: got upwards/level NS record 'grimaldi.napoli.it' -> 'ns.kpnqwest.it.', had 'grimaldi.napoli.it' | |
| Nov 26 10:33:04 [365] grimaldi.napoli.it: got upwards/level NS record 'grimaldi.napoli.it' -> 'ns2.kpnqwest.it.', had 'grimaldi.napoli.it' | |
| Nov 26 10:33:04 [365] grimaldi.napoli.it: status=got results, this level of recursion done | |
| Nov 26 10:33:04 Starting validation of answer to grimaldi.napoli.it|MX for 127.0.0.1:50140 | |
| Nov 26 10:33:05 Answer to grimaldi.napoli.it|MX for 127.0.0.1:50140 validates as Bogus | |
| Nov 26 10:33:05 Sending out SERVFAIL for grimaldi.napoli.it|MX because recursor or query demands it for Bogus results |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment