[AusNOG] .AU DNSSEC Broken

Nick Brown nick at nickbrown.id.au
Tue Mar 22 18:54:17 AEDT 2022


If only the namespace was operated by some kind of Aus Registry. 

 
 
From: AusNOG <ausnog-bounces at ausnog.net> on behalf of Nathan Brookfield <Nathan.Brookfield at iperium.com.au>
Date: Tuesday, 22 March 2022 at 6:16 pm
To: Luke Thompson <luke.t at tncrew.com.au>
Cc: "ausnog at ausnog.net" <ausnog at ausnog.net>
Subject: Re: [AusNOG] .AU DNSSEC Broken

 
Flapping like a bird… No way in the hell it’s a coincidence that .au goes live in just over 40 hours!

On 22 Mar 2022, at 17:44, Luke Thompson <luke.t at tncrew.com.au> wrote:

 
We appear to be seeing a Return of the Removal of the RRSIGs...

Thoughts are with those working on it!

Cheers,

Luke Thompson 
Operations Manager 

The Network Crew Pty Ltd 
https://thenetworkcrew.com.au <https://thenetworkcrew.com.au> 


On 22/3/22 5:22 pm, Luke Thompson wrote:

Services are coming back now. Thanks for the update.

It begs the question of where the .AU Status Page is...

Cheers,

Luke Thompson 
Operations Manager 

The Network Crew Pty Ltd 
https://thenetworkcrew.com.au <https://thenetworkcrew.com.au> 


On 22/3/22 5:13 pm, Chris Barnes wrote:

Umbrella is telling us the problem is resolved. Can you confirm through AuDA Andrew?

 
On Tue, 22 Mar 2022 at 17:09, Andrew Simmonds <andrew at levart.com.au <mailto:andrew at levart.com.au> > wrote:

Just received a reply from the powers that be (auDA),

They are aware of the issue and are working on it.

Best Regards,

 <https://www.levart.com.au/> 

Andrew Simmonds
Systems Development Manager
Levart
1A/18 Gibberd Road
Balcatta WA 6021 

	p:
m:
f:
e:
w: 

	1300 538 278
+61 401 218 463
+61 8 9382 8003
andrew at levart.com.au <mailto:andrew at levart.com.au> 
www.levart.com.au <https://www.levart.com.au/> 

On 22/03/2022 1:41 pm, Andrew Simmonds wrote:

Hi All,

Anyone notice DNS chucking a wobbly from about 1pm Perth time today?

Seems to be bringing a whole bunch of our customer .au domains down especially clients using the Cloudflare 1.1.1.1 caching resolvers etc.

Cloudflare is giving errors such as:

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
; EDE: 10 (RRSIGs Missing): (for DNSKEY au., id = 34882)

It seems .AU may be missing RRSIG records:

https://dnssec-analyzer.verisignlabs.com/gov.au <https://dnssec-analyzer.verisignlabs.com/gov.au> 

Hopefully the powers that be are already aware of this.

Best Regards,

 <https://www.levart.com.au/> 

Andrew Simmonds
Systems Development Manager
Levart
1A/18 Gibberd Road
Balcatta WA 6021 

	p:
m:
f:
e:
w: 

	1300 538 278
+61 401 218 463
+61 8 9382 8003
andrew at levart.com.au <mailto:andrew at levart.com.au> 
www.levart.com.au <https://www.levart.com.au/> 





_______________________________________________


AusNOG mailing list


AusNOG at ausnog.net <mailto:AusNOG at ausnog.net> 


https://lists.ausnog.net/mailman/listinfo/ausnog <https://lists.ausnog.net/mailman/listinfo/ausnog> 

_______________________________________________
AusNOG mailing list
AusNOG at ausnog.net <mailto:AusNOG at ausnog.net> 
https://lists.ausnog.net/mailman/listinfo/ausnog <https://lists.ausnog.net/mailman/listinfo/ausnog> 



 
-- 

Kind Regards,

Christopher Barnes

e. chris.p.barnes at gmail.com <mailto:chris.p.barnes at gmail.com> 





_______________________________________________


AusNOG mailing list


AusNOG at ausnog.net <mailto:AusNOG at ausnog.net> 


https://lists.ausnog.net/mailman/listinfo/ausnog <https://lists.ausnog.net/mailman/listinfo/ausnog> 

_______________________________________________
AusNOG mailing list
AusNOG at ausnog.net
https://lists.ausnog.net/mailman/listinfo/ausnog


_______________________________________________



AusNOG mailing list



AusNOG at ausnog.net



https://lists.ausnog.net/mailman/listinfo/ausnog


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ausnog.net/pipermail/ausnog/attachments/20220322/9c03a3a3/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 4937 bytes
Desc: not available
URL: <https://lists.ausnog.net/pipermail/ausnog/attachments/20220322/9c03a3a3/attachment.png>


More information about the AusNOG mailing list