On Thu, Jun 24, 2021 at 08:09:23AM -0400, Jim Popovitch wrote: > The DNS for mirror.estone.ca only has one NS. This is a huge red flag. > erm, no, it has 2.
That said, they seem to be co-located, which isn't great. $ dig mirror.estone.ca ns ; <<>> DiG 9.11.5-P4-5.1+deb10u5-Debian <<>> mirror.estone.ca ns ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 8960 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ;; QUESTION SECTION: ;mirror.estone.ca. IN NS ;; ANSWER SECTION: mirror.estone.ca. 86399 IN CNAME www.estone.ca. ;; AUTHORITY SECTION: estone.ca. 2970 IN SOA ns1.estone.ca. hostmaster.estone.ca. 2021060101 7200 7200 2419200 10800 ;; Query time: 501 msec ;; SERVER: 127.0.0.1#53(127.0.0.1) ;; WHEN: Thu Jun 24 12:31:39 UTC 2021 ;; MSG SIZE rcvd: 114 $ dig estone.ca. ns ; <<>> DiG 9.11.5-P4-5.1+deb10u5-Debian <<>> estone.ca. ns ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 15930 ;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ;; QUESTION SECTION: ;estone.ca. IN NS ;; ANSWER SECTION: estone.ca. 85761 IN NS ns2.estone.ca. estone.ca. 85761 IN NS ns1.estone.ca. ;; Query time: 0 msec ;; SERVER: 127.0.0.1#53(127.0.0.1) ;; WHEN: Thu Jun 24 12:31:46 UTC 2021 ;; MSG SIZE rcvd: 74 Cheers, Julien
