<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body style="overflow-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;">Yeah, we are seeing dnssec failing on some of our resolvers but not others. Haven’t dug as to why but disabling it until sorted.<br><div>
<meta charset="UTF-8"><div dir="auto" style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;"><div dir="auto" style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;"><p style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-size: 12px; font-style: normal; font-variant-caps: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue", Arial, "Noto Sans", sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji; line-height: 1.35em;"; font-weight: bold;"></p><div id="signature" style="font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue", Arial, "Noto Sans", sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji; line-height: 1.35em;";"><div id="signature"><p style="font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue", Arial, "Noto Sans", sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji";">Regards,</p><p style="font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue", Arial, "Noto Sans", sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji"; font-weight: bold;">Andrew Radke</p><p style="font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue", Arial, "Noto Sans", sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji";"><span style="color: rgb(54, 125, 162); border-top-width: 2px; border-top-style: solid; border-top-color: rgb(54, 125, 162);">Open Spaces Internet Pty Ltd</span><br>Ph: <a href="tel:0412798593">0412 798 593</a><br>Web: <a href="https://osi.com.au/">osi.com.au</a></p></div></div></div></div>
</div>
<div><br><blockquote type="cite"><div>On 18 Sep 2023, at 10:26 am, Luke Thompson <luke.t@tncrew.com.au> wrote:</div><br class="Apple-interchange-newline"><div><div>Ah hah, DNSSEC makes sense. Curious to see how long goes by until everything clears.<br><br>On 18/9/2023 10:23 am, Ted Cooper wrote:<br><blockquote type="cite">The DNS signatures just expired. Everything just went boom.<br><br>RRSIG net.au/DS alg 8, id 62233: The Signature Expiration field of the RRSIG RR (2023-09-18 00:05:29+00:00) is 15 minutes in the past.<br><br>https://dnsviz.net/d/abc.net.au/ZQeX9w/dnssec/<br><br><br>On 18/9/23 10:20, Luke Thompson wrote:<br><blockquote type="cite">We've got many internal/external monitoring alerts going off. Common factor seems to be AU DNS.<br><br>Is anyone else seeing alerts tripped? Emails are flowing & I can query OK (Starlink), yet hosts remain "down".<br><br>15 minutes since the first alert came through. WhatsMyDNS for "down" hosts is showing about a 50% query hit rate.<br><br>Cheers,<br>Luke<br><br>_______________________________________________<br>AusNOG mailing list<br>AusNOG@lists.ausnog.net<br>https://lists.ausnog.net/mailman/listinfo/ausnog<br></blockquote>_______________________________________________<br>AusNOG mailing list<br>AusNOG@lists.ausnog.net<br>https://lists.ausnog.net/mailman/listinfo/ausnog<br><br></blockquote>_______________________________________________<br>AusNOG mailing list<br>AusNOG@lists.ausnog.net<br>https://lists.ausnog.net/mailman/listinfo/ausnog<br></div></div></blockquote></div><br></body></html>