can't resolve www.pge.com

44 views
Skip to first unread message

Mu Lin

unread,
May 29, 2019, 9:12:26 AM5/29/19
to public-dns-discuss
Both 1.1.1.1 and 8.8.8.8 can resolve pge.com

$ dig @1.1.1.1 pge.com

; <<>> DiG 9.11.2-P1-1-Debian <<>> @1.1.1.1 pge.com
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 20194


However, at&t's dns server works.



;; ANSWER SECTION:
pge.com. 3600 IN A 130.19.33.56
pge.com. 3600 IN A 131.89.128.92

Alex Dupuy

unread,
May 29, 2019, 9:17:39 AM5/29/19
to public-dns-discuss
The 'pge.com' zone has a DNSSEC misconfiguration.
The parent zone 'com' has a DS record for 'pge'
but the 'pge.com' zone has no DNSKEY record.

To fix this, remove the DS record for 'pge.com'
in the 'com' zone.

'pge.com' is in 'pge.com' zone under .COM
'pge.com' is failing DNSSEC validation, and has
6 nameservers in 'akam.net' (all are failing validation)

'pge.com' is registered through 'Network Solutions, LLC'
Name Server: a1-61.akam.net
Name Server: a11-64.akam.net
Name Server: a12-65.akam.net
Name Server: a14-66.akam.net
Name Server: a24-67.akam.net
Name Server: a3-64.akam.net
DNSSEC: signedDelegation

Reply all
Reply to author
Forward
0 new messages