[AusNOG] .AU DNSSEC Broken

[Simon Attwell]

Yep,

OpenDNS / Cisco Umbrella customers are noticing too.
Pretty much all .au resolution starting to fail via that service.

- Simon

On Tue, 22 Mar 2022 at 15:41, Andrew Simmonds <andrew at levart.com.au> wrote:

> Hi All,
>
> Anyone notice DNS chucking a wobbly from about 1pm Perth time today?
>
> Seems to be bringing a whole bunch of our customer .au domains down
> especially clients using the Cloudflare 1.1.1.1 caching resolvers etc.
>
> Cloudflare is giving errors such as:
>
> ;; OPT PSEUDOSECTION:
> ; EDNS: version: 0, flags:; udp: 1232
> ; EDE: 10 (RRSIGs Missing): (for DNSKEY au., id = 34882)
>
> It seems .AU may be missing RRSIG records:
>
> https://dnssec-analyzer.verisignlabs.com/gov.au
>
> Hopefully the powers that be are already aware of this.
>
> Best Regards,
> <https://www.levart.com.au/>
> Andrew Simmonds
> Systems Development Manager
> *Levart*
> 1A/18 Gibberd Road
> Balcatta WA 6021 <#m_-6691292245560964401_> p:
> m:
> f:
> e:
> w: 1300 538 278 <1300538278>
> +61 401 218 463 <+61401218463>
> +61 8 9382 8003 <+61893828003>
> andrew at levart.com.au
> www.levart.com.au
> _______________________________________________
> AusNOG mailing list
> AusNOG at ausnog.net
> https://lists.ausnog.net/mailman/listinfo/ausnog
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ausnog.net/pipermail/ausnog/attachments/20220322/551c5447/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: levart-small.png
Type: image/png
Size: 4936 bytes
Desc: not available
URL: <https://lists.ausnog.net/pipermail/ausnog/attachments/20220322/551c5447/attachment.png>