[Dnsmon-test] DNSMON Atlas testing for .hk
Chris Amin
camin at ripe.net
Wed Mar 19 16:07:45 CET 2014
On 19/03/2014 13:50, Anand Buddhdev wrote:
> Thanks for reporting this to us. We think we have identified the issue.
> The RIPE Atlas DNS query software is currently setting the recursion
> available (RA) flag in queries. This flag only makes sense in DNS
> responses, and should not normally be set on queries, and DNS servers
> should just ignore it in queries. However, it seems that when queried
> over IPv6, b.hkirc.net.hk (or a firewall in front of it) is discarding
> these queries with RA set.
>
> We recognise this as a bug in the Atlas software, and we will fix it
> with the next release. In the meantime, if you reconfigure your DNS
> server or firewall to allow such queries through, then the DNSMON graph
> for it will look much greener. If you do this, will you please let us
> know so we can observe the DNSMON graphs for changes?
>
> You may also choose to just leave your settings as they are, and then it
> will become a test case for when the Atlas probe software is updated.
To add to what Anand said, it appears that DNSMON's TCP queries to this
server are working correctly. If you select "TCP" from the "Protocol"
dropdown then you will see successful responses from the majority of the
servers.
Hopefully this will allow you to use and test the service before the
underlying problem with those UDP queries has been fixed.
Kind regards,
Chris Amin
RIPE NCC
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 2466 bytes
Desc: S/MIME Cryptographic Signature
Url : https://www.ripe.net/ripe/mail/archives/dnsmon-test/attachments/20140319/ae7b481c/attachment.bin