On Mon, Sep 07, 2020 at 10:43:57AM +0200, Stephane Bortzmeyer <[email protected]> wrote a message of 22 lines which said:
> Since the main weakness of this domain is the lack of diversity in > authoritative name servers' IP addresses, I guess that your problem > comes from a routing issue between RIPE NCC and 158.108.0.0/16 (and > 2406:3100::/32). Speaking of routing, and while it is probably not the root cause of your problem, you may want to review the security of 158.108.0.0/16. There is one ROA for the origin 9411 (OK) but also route objects for other origins such as 4618. One of them is in the NTT IRR (others in RADB, which is probably less reliable). Anyway, some RIPE Atlas probes seem to have trouble reaching your name servers: % blaeu-resolve -r 100 --nameserver 158.108.216.53 --type A kasetsart.university Nameserver 158.108.216.53 [158.108.216.5] : 20 occurrences [TIMEOUT] : 2 occurrences Test #27041050 done at 2020-09-07T08:50:23Z _______________________________________________ dns-operations mailing list [email protected] https://lists.dns-oarc.net/mailman/listinfo/dns-operations
