<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:Helvetica;
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"Century Gothic";
panose-1:2 11 5 2 2 2 2 2 2 4;}
@font-face
{font-family:"Segoe UI";
panose-1:2 11 5 2 4 2 4 2 2 3;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
span.EmailStyle21
{mso-style-type:personal-reply;
font-family:"Century Gothic",sans-serif;
color:windowtext;
font-weight:normal;
font-style:normal;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;
mso-ligatures:none;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-AU" link="blue" vlink="purple" style="word-wrap:break-word">
<div class="WordSection1">
<div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Century Gothic",sans-serif">Isn’t PKI fun? I’d not like to be the person in charge of key renewal today…</span><o:p></o:p></p>
</div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Century Gothic",sans-serif;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span lang="EN-US">From:</span></b><span lang="EN-US"> AusNOG <ausnog-bounces@lists.ausnog.net>
<b>On Behalf Of </b>Nathan Brookfield<br>
<b>Sent:</b> Monday, September 18, 2023 10:58 AM<br>
<b>To:</b> Andrew Radke <andrew@osi.com.au>; Luke Thompson <luke.t@tncrew.com.au><br>
<b>Cc:</b> ausnog@lists.ausnog.net<br>
<b>Subject:</b> Re: [AusNOG] AU DNS - Something happening?<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US">Appears that the RRSIG
</span>expired at 00:05:29 UTC<span style="mso-fareast-language:EN-US"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><b><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif;color:#00233A">Nathan Brookfield | VK2NAB<br>
</span></b><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif;color:#00233A">General Manager</span><span style="font-size:10.0pt;font-family:"Helvetica",sans-serif"><br>
<br>
</span><b><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif;color:#FF5400">p</span></b><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif;color:#00233A">: 1300 592 330 |
</span><b><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif;color:#FF5400">m</span></b><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif;color:#00233A">: 0412 266 008</span><span style="font-size:10.0pt;font-family:"Helvetica",sans-serif"><br>
</span><b><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif;color:#FF5400">e</span></b><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif;color:#00233A">:
<a href="mailto:Nathan.brookfield@iperium.com.au">Nathan.brookfield@iperium.com.au</a> | </span><b><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif;color:#FF5400">w</span></b><span style="font-size:10.0pt;font-family:"Helvetica",sans-serif;color:#00233A">: iperium.com.au</span><span style="font-family:"Helvetica",sans-serif;color:#00233A"><br>
<br>
</span><span style="font-size:10.0pt;font-family:"Helvetica",sans-serif;color:#00233A">Suite 4.02, 189 Kent Street Sydney NSW 2000</span><b><span style="font-family:"Helvetica",sans-serif;color:#00233A"><o:p></o:p></span></b></p>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#464646"><img border="0" width="200" height="58" style="width:2.0833in;height:.6041in" id="Picture_x0020_23" src="cid:image001.png@01D9EA1F.F51F5F60"></span><br>
<b><span style="font-family:"Helvetica",sans-serif;color:#00233A">Your Telco Team<o:p></o:p></span></b></p>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span style="font-size:9.0pt;color:darkgray">DISCLAIMER: This document is intended solely for the named addressee. This electronic communication, which includes any files or attachments thereto, contains proprietary
or confidential information and may be privileged and otherwise protected under copyright or other applicable intellectual property laws. The use, disclosure, copying or distribution of any of the information contained in this document, by any person other
than the addressee, is strictly prohibited. If you received this document in error, please contact the sender immediately and delete all the material from any computer. Confidentiality and legal privilege are not waived or lost by reason of mistaken delivery
to you. Any views or opinions presented are solely those of the author and do not necessarily represent those of Iperium. <br>
<br>
WARNING: Computer viruses can be transmitted via email. The recipient should check this email and any attachments for the presence of viruses. Iperium accepts no liability for any damage caused by any virus transmitted by this email.</span><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#464646"><o:p></o:p></span></p>
</div>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span lang="EN-US">From:</span></b><span lang="EN-US"> AusNOG <<a href="mailto:ausnog-bounces@lists.ausnog.net">ausnog-bounces@lists.ausnog.net</a>>
<b>On Behalf Of </b>Andrew Radke<br>
<b>Sent:</b> Monday, September 18, 2023 10:56 AM<br>
<b>To:</b> Luke Thompson <<a href="mailto:luke.t@tncrew.com.au">luke.t@tncrew.com.au</a>><br>
<b>Cc:</b> <a href="mailto:ausnog@lists.ausnog.net">ausnog@lists.ausnog.net</a><br>
<b>Subject:</b> Re: [AusNOG] AU DNS - Something happening?<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Yeah, we are seeing dnssec failing on some of our resolvers but not others. Haven’t dug as to why but disabling it until sorted.<o:p></o:p></p>
<div>
<div>
<div>
<div id="signature">
<div id="signature">
<p><span style="font-family:"Segoe UI",sans-serif;color:black">Regards,<o:p></o:p></span></p>
<p><b><span style="font-family:"Segoe UI",sans-serif;color:black">Andrew Radke<o:p></o:p></span></b></p>
<p><span style="font-family:"Segoe UI",sans-serif;color:#367DA2;border:solid #367DA2 1.5pt;padding:0cm">Open Spaces Internet Pty Ltd</span><span style="font-family:"Segoe UI",sans-serif;color:black"><br>
Ph: <a href="tel:0412798593">0412 798 593</a><br>
Web: <a href="https://osi.com.au/">osi.com.au</a><o:p></o:p></span></p>
</div>
</div>
</div>
</div>
</div>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><o:p> </o:p></p>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class="MsoNormal">On 18 Sep 2023, at 10:26 am, Luke Thompson <<a href="mailto:luke.t@tncrew.com.au">luke.t@tncrew.com.au</a>> wrote:<o:p></o:p></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt">Ah hah, DNSSEC makes sense. Curious to see how long goes by until everything clears.<br>
<br>
On 18/9/2023 10:23 am, Ted Cooper wrote:<o:p></o:p></p>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<p class="MsoNormal" style="margin-bottom:12.0pt">The DNS signatures just expired. Everything just went boom.<br>
<br>
RRSIG net.au/DS alg 8, id 62233: The Signature Expiration field of the RRSIG RR (2023-09-18 00:05:29+00:00) is 15 minutes in the past.<br>
<br>
<a href="https://dnsviz.net/d/abc.net.au/ZQeX9w/dnssec/">https://dnsviz.net/d/abc.net.au/ZQeX9w/dnssec/</a><br>
<br>
<br>
On 18/9/23 10:20, Luke Thompson wrote:<o:p></o:p></p>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<p class="MsoNormal">We've got many internal/external monitoring alerts going off. Common factor seems to be AU DNS.<br>
<br>
Is anyone else seeing alerts tripped? Emails are flowing & I can query OK (Starlink), yet hosts remain "down".<br>
<br>
15 minutes since the first alert came through. WhatsMyDNS for "down" hosts is showing about a 50% query hit rate.<br>
<br>
Cheers,<br>
Luke<br>
<br>
_______________________________________________<br>
AusNOG mailing list<br>
<a href="mailto:AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a><br>
<a href="https://lists.ausnog.net/mailman/listinfo/ausnog">https://lists.ausnog.net/mailman/listinfo/ausnog</a><o:p></o:p></p>
</blockquote>
<p class="MsoNormal" style="margin-bottom:12.0pt">_______________________________________________<br>
AusNOG mailing list<br>
<a href="mailto:AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a><br>
<a href="https://lists.ausnog.net/mailman/listinfo/ausnog">https://lists.ausnog.net/mailman/listinfo/ausnog</a><o:p></o:p></p>
</blockquote>
<p class="MsoNormal">_______________________________________________<br>
AusNOG mailing list<br>
<a href="mailto:AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a><br>
<a href="https://lists.ausnog.net/mailman/listinfo/ausnog">https://lists.ausnog.net/mailman/listinfo/ausnog</a><o:p></o:p></p>
</div>
</div>
</blockquote>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>