[AusNOG] .AU DNSSEC Broken

[Nathan Brookfield]

Oh yeah, roughly around 1540hrs Sydney time it started….

Nathan Brookfield
General Manager

p: 02 4749 4949 |  1300 592 330  |
e Nathan.brookfield at iperium.com.au<mailto:Nathan.brookfield at iperium.com.au>  |  w: iperium.com.au

Suite 702, 82 Elizabeth Street, Sydney NSW 200
[cid:image001.png at 01D83E0B.C7E1DC60]
Your Telco Team
DISCLAIMER: This document is intended solely for the named addressee. This electronic communication, which includes any files or attachments thereto, contains proprietary or confidential information and may be privileged and otherwise protected under copyright or other applicable intellectual property laws. The use, disclosure, copying or distribution of any of the information contained in this document, by any person other than the addressee, is strictly prohibited. If you received this document in error, please contact the sender immediately and delete all the material from any computer. Confidentiality and legal privilege are not waived or lost by reason of mistaken delivery to you. Any views or opinions presented are solely those of the author and do not necessarily represent those of Iperium.

WARNING: Computer viruses can be transmitted via email. The recipient should check this email and any attachments for the presence of viruses. Iperium accepts no liability for any damage caused by any virus transmitted by this email.

From: AusNOG <ausnog-bounces at ausnog.net> On Behalf Of Andrew Simmonds
Sent: Tuesday, March 22, 2022 4:41 PM
To: ausnog at ausnog.net
Subject: [AusNOG] .AU DNSSEC Broken


Hi All,

Anyone notice DNS chucking a wobbly from about 1pm Perth time today?

Seems to be bringing a whole bunch of our customer .au domains down especially clients using the Cloudflare 1.1.1.1 caching resolvers etc.

Cloudflare is giving errors such as:

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
; EDE: 10 (RRSIGs Missing): (for DNSKEY au., id = 34882)

It seems .AU may be missing RRSIG records:

https://dnssec-analyzer.verisignlabs.com/gov.au

Hopefully the powers that be are already aware of this.

Best Regards,
[cid:image002.png at 01D83E0B.C7E1DC60]<https://www.levart.com.au/>
Andrew Simmonds
Systems Development Manager
Levart
1A/18 Gibberd Road
Balcatta WA 6021
p:
m:
f:
e:
w:
1300 538 278<tel:1300538278>
+61 401 218 463<tel:+61401218463>
+61 8 9382 8003<tel:+61893828003>
andrew at levart.com.au<mailto:andrew at levart.com.au>
www.levart.com.au<https://www.levart.com.au/>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ausnog.net/pipermail/ausnog/attachments/20220322/f44e7263/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 4595 bytes
Desc: image001.png
URL: <https://lists.ausnog.net/pipermail/ausnog/attachments/20220322/f44e7263/attachment.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.png
Type: image/png
Size: 4936 bytes
Desc: image002.png
URL: <https://lists.ausnog.net/pipermail/ausnog/attachments/20220322/f44e7263/attachment-0001.png>