Google DNS doesn't resolve amstelveenlijn.nl
40 views
Skip to first unread message
michael...@gmail.com
Jul 1, 2019, 10:07:23 AM7/1/19
to public-dns-discuss
For the past week or so, the Google DNS servers haven't been able to resolve amstelveenlijn.nl:
% host -t NS amstelveenlijn.nl lisa.ns.cloudflare.com
Using domain server:
Name: lisa.ns.cloudflare.com
Address: 2400:cb00:2049:1::adf5:3a83#53
Aliases:
amstelveenlijn.nl name server ken.ns.cloudflare.com.
amstelveenlijn.nl name server lisa.ns.cloudflare.com.
Using domain server:
Name: lisa.ns.cloudflare.com
Address: 2400:cb00:2049:1::adf5:3a83#53
Aliases:
amstelveenlijn.nl has address 104.31.88.169
amstelveenlijn.nl has address 104.31.89.169
amstelveenlijn.nl has IPv6 address 2606:4700:30::681f:59a9
amstelveenlijn.nl has IPv6 address 2606:4700:30::681f:58a9
amstelveenlijn.nl mail is handled by 10 amstelveenlijn-nl.mail.protection.outlook.com.
Using domain server:
Name: ken.ns.cloudflare.com
Address: 2400:cb00:2049:1::adf5:3b7f#53
Aliases:
amstelveenlijn.nl has address 104.31.89.169
amstelveenlijn.nl has address 104.31.88.169
amstelveenlijn.nl has IPv6 address 2606:4700:30::681f:59a9
amstelveenlijn.nl has IPv6 address 2606:4700:30::681f:58a9
amstelveenlijn.nl mail is handled by 10 amstelveenlijn-nl.mail.protection.outlook.com.
% host amstelveenlijn.nl 8.8.8.8
Using domain server:
Name: 8.8.8.8
Address: 8.8.8.8#53
Aliases:
Host amstelveenlijn.nl not found: 3(NXDOMAIN)
Any idea why?
Thanks,
– Michael
Alex Dupuy
Jul 1, 2019, 10:28:29 AM7/1/19
to public-dns-discuss
Your domain has a DNSSEC misconfiguration (see http://dnsviz.net/d/amstelveenlijn.nl/dnssec/). You need to delete the stale DS record for your domain, and if you want to enable DNSSEC for your domain, use a DS record based on the DNSKEY used by your Cloudflare name servers.
amstelveenlijn.nl. 3600 IN DS 2371 13 2 CE608813DD8927B8D9BB6DD3F3A79256380B04AACBF4FB869AE00D850837CB54
michael...@gmail.com
Jul 1, 2019, 6:35:13 PM7/1/19
to public-dns-discuss
On Monday, July 1, 2019 at 4:28:29 PM UTC+2, Alex Dupuy wrote:
Your domain has a DNSSEC misconfiguration (see http://dnsviz.net/d/amstelveenlijn.nl/dnssec/). You need to delete the stale DS record for your domain, and if you want to enable DNSSEC for your domain, use a DS record based on the DNSKEY used by your Cloudflare name servers.amstelveenlijn.nl. 3600 IN DS 2371 13 2 CE608813DD8927B8D9BB6DD3F3A79256380B04AACBF4FB869AE00D850837CB54
Not my domain, but thanks for the explanation. I'll try to convince the site owners that they need to fix this. :-)
– Michael
Reply all
Reply to author
Forward
0 new messages