On Mar 17, 2010, at 5:23 AM, Jim Reid wrote: > On 17 Mar 2010, at 11:28, George Barwood wrote: > >> It seems that m.root-servers.net is now serving DNSSEC, but does not have >> TCP, so the following queries all fail > > Well these queries work just fine for me. Perhaps your problems are caused by > local misconfiguration such as a broken CPE/middleware box or DNS proxy?
I think its that its agressively multihomed, and ONE of the instances is not working with TCP. My home net happily lets through anything on port 53, TCP or UDP, and I'm seeing the same symptoms, but a little more data: I think there may be something more wrong with that instance thats causing the TCP failures, so it might be something more general: --- m.root-servers.net ping statistics --- 16 packets transmitted, 5 packets received, 68.8% packet loss round-trip min/avg/max/stddev = 223.651/1423.662/2222.722/747.819 ms --- l.root-servers.net ping statistics --- 7 packets transmitted, 7 packets received, 0.0% packet loss round-trip min/avg/max/stddev = 85.971/87.705/89.645/1.164 ms _______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop
