[AusNOG] .AU DNSSEC Broken

[Two Fat Monkeys - Dirk Bermingham]

Ahhh, nothing like a broken dependency ruining an autonomous system…☹

From: AusNOG <ausnog-bounces at ausnog.net> On Behalf Of Nathan Brookfield
Sent: Tuesday, 22 March 2022 4:43 PM
To: 'Andrew Simmonds' <andrew at levart.com.au>; 'ausnog at ausnog.net' <ausnog at ausnog.net>
Subject: Re: [AusNOG] .AU DNSSEC Broken

Oh yeah, roughly around 1540hrs Sydney time it started….

Nathan Brookfield
General Manager

p: 02 4749 4949 |  1300 592 330  |
e Nathan.brookfield at iperium.com.au<mailto:Nathan.brookfield at iperium.com.au>  |  w: iperium.com.au

Suite 702, 82 Elizabeth Street, Sydney NSW 200
[cid:image001.png at 01D83E0C.11BEB470]
Your Telco Team
DISCLAIMER: This document is intended solely for the named addressee. This electronic communication, which includes any files or attachments thereto, contains proprietary or confidential information and may be privileged and otherwise protected under copyright or other applicable intellectual property laws. The use, disclosure, copying or distribution of any of the information contained in this document, by any person other than the addressee, is strictly prohibited. If you received this document in error, please contact the sender immediately and delete all the material from any computer. Confidentiality and legal privilege are not waived or lost by reason of mistaken delivery to you. Any views or opinions presented are solely those of the author and do not necessarily represent those of Iperium.

WARNING: Computer viruses can be transmitted via email. The recipient should check this email and any attachments for the presence of viruses. Iperium accepts no liability for any damage caused by any virus transmitted by this email.

From: AusNOG <ausnog-bounces at ausnog.net<mailto:ausnog-bounces at ausnog.net>> On Behalf Of Andrew Simmonds
Sent: Tuesday, March 22, 2022 4:41 PM
To: ausnog at ausnog.net<mailto:ausnog at ausnog.net>
Subject: [AusNOG] .AU DNSSEC Broken


Hi All,

Anyone notice DNS chucking a wobbly from about 1pm Perth time today?

Seems to be bringing a whole bunch of our customer .au domains down especially clients using the Cloudflare 1.1.1.1 caching resolvers etc.

Cloudflare is giving errors such as:

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
; EDE: 10 (RRSIGs Missing): (for DNSKEY au., id = 34882)

It seems .AU may be missing RRSIG records:

https://dnssec-analyzer.verisignlabs.com/gov.au

Hopefully the powers that be are already aware of this.

Best Regards,
[cid:image002.png at 01D83E0C.11BEB470]<https://www.levart.com.au/>

Andrew Simmonds
Systems Development Manager
Levart
1A/18 Gibberd Road
Balcatta WA 6021

p:
m:
f:
e:
w:

1300 538 278<tel:1300538278>
+61 401 218 463<tel:+61401218463>
+61 8 9382 8003<tel:+61893828003>
andrew at levart.com.au<mailto:andrew at levart.com.au>
www.levart.com.au<https://www.levart.com.au/>


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ausnog.net/pipermail/ausnog/attachments/20220322/09227491/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 4595 bytes
Desc: not available
URL: <https://lists.ausnog.net/pipermail/ausnog/attachments/20220322/09227491/attachment-0002.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.png
Type: image/png
Size: 4936 bytes
Desc: not available
URL: <https://lists.ausnog.net/pipermail/ausnog/attachments/20220322/09227491/attachment-0003.png>