Yeah, we are seeing dnssec failing on some of our resolvers but not others. Haven’t dug as to why but disabling it until sorted. Regards,
Andrew Radke Open Spaces Internet Pty Ltd Ph: 0412 798 593 <tel:0412798593> Web: osi.com.au <https://osi.com.au/> > On 18 Sep 2023, at 10:26 am, Luke Thompson <luk...@tncrew.com.au> wrote: > > Ah hah, DNSSEC makes sense. Curious to see how long goes by until everything > clears. > > On 18/9/2023 10:23 am, Ted Cooper wrote: >> The DNS signatures just expired. Everything just went boom. >> >> RRSIG net.au/DS alg 8, id 62233: The Signature Expiration field of the RRSIG >> RR (2023-09-18 00:05:29+00:00) is 15 minutes in the past. >> >> https://dnsviz.net/d/abc.net.au/ZQeX9w/dnssec/ >> >> >> On 18/9/23 10:20, Luke Thompson wrote: >>> We've got many internal/external monitoring alerts going off. Common factor >>> seems to be AU DNS. >>> >>> Is anyone else seeing alerts tripped? Emails are flowing & I can query OK >>> (Starlink), yet hosts remain "down". >>> >>> 15 minutes since the first alert came through. WhatsMyDNS for "down" hosts >>> is showing about a 50% query hit rate. >>> >>> Cheers, >>> Luke >>> >>> _______________________________________________ >>> AusNOG mailing list >>> AusNOG@lists.ausnog.net >>> https://lists.ausnog.net/mailman/listinfo/ausnog >> _______________________________________________ >> AusNOG mailing list >> AusNOG@lists.ausnog.net >> https://lists.ausnog.net/mailman/listinfo/ausnog >> > _______________________________________________ > AusNOG mailing list > AusNOG@lists.ausnog.net > https://lists.ausnog.net/mailman/listinfo/ausnog
_______________________________________________ AusNOG mailing list AusNOG@lists.ausnog.net https://lists.ausnog.net/mailman/listinfo/ausnog
