Ticket ID: SIXXS #4410225 Ticket Status: Resolved PoP: deham01 - Easynet (Hamburg)
DNSSEC DLV entry for 2001:6f8:1300::/40 disappeared
![]()
There used to be an entry in the ISC DLV database for this prefix, but it's now gone:
$ dig 3.1.8.f.6.0.1.0.0.2.ip6.arpa.dlv.isc.org dlv
; <<>> DiG 9.7.3-RedHat-9.7.3-1.fc14 <<>> 3.1.8.f.6.0.1.0.0.2.ip6.arpa.dlv.isc.org dlv
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 48170
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;3.1.8.f.6.0.1.0.0.2.ip6.arpa.dlv.isc.org. IN DLV
;; AUTHORITY SECTION:
dlv.isc.org. 1772 IN SOA ns-int.isc.org. hostmaster.isc.org. 2011042601 7200 3600 2419200 3600
Regards,
Jan
State change: confirmed
![]() ![]()
The state of this ticket has been changed to confirmed
DNSSEC DLV entry for 2001:6f8:1300::/40 disappeared
![]()
The DLV entries are gone for other prefixes as well.
Besides that, the DS entries for end-user prefixes seem to have disappeared from Sixxs' zones as well.
Thus the DNSSEC chain is broken in two places.
DNSSEC DLV entry for 2001:6f8:1300::/40 disappeared
![]()
I can confirm this for 6.0.0.1.6.0.1.0.0.2.ip6.arpa.
Also my DS for 2001:610:6e2::/48 has been entered in the web front-end, but has not been picked up by the DNS servers. This was at least 1,5 days ago, not sure how long it might take though.
Is there any progress with this problem? Is assistance useful? (I don't mind running through zones and fixing/adding DS records in dlv.isc.org for instance, I can also script a large part of this).
DNSSEC DLV entry for 2001:6f8:1300::/40 disappeared
The problem is confirmed, we already know where the issues lie. When time is available we will resolve it, unfortunately no time at the moment as other more pressing issues go first.
State change: resolved
![]() ![]()
The state of this ticket has been changed to resolved
|