[nsp-sec] No access to www.ssa.gov

[Rob Thomas]

Hey, Joel.

DNS looks sane from AS23028 as well as puck (thanks, Jared!):

; <<>> DiG 9.4.3-P2 <<>> +trace ssa.gov
;; global options:  printcmd
.                       482810  IN      NS      L.ROOT-SERVERS.NET.
.                       482810  IN      NS      I.ROOT-SERVERS.NET.
.                       482810  IN      NS      A.ROOT-SERVERS.NET.
.                       482810  IN      NS      F.ROOT-SERVERS.NET.
.                       482810  IN      NS      B.ROOT-SERVERS.NET.
.                       482810  IN      NS      M.ROOT-SERVERS.NET.
.                       482810  IN      NS      G.ROOT-SERVERS.NET.
.                       482810  IN      NS      C.ROOT-SERVERS.NET.
.                       482810  IN      NS      D.ROOT-SERVERS.NET.
.                       482810  IN      NS      H.ROOT-SERVERS.NET.
.                       482810  IN      NS      K.ROOT-SERVERS.NET.
.                       482810  IN      NS      J.ROOT-SERVERS.NET.
.                       482810  IN      NS      E.ROOT-SERVERS.NET.
;; Received 316 bytes from 204.42.254.5#53(204.42.254.5) in 0 ms

gov.                    172800  IN      NS      G.GOV.ZONEEDIT.COM.
gov.                    172800  IN      NS      C.GOV.ZONEEDIT.COM.
gov.                    172800  IN      NS      A.GOV.ZONEEDIT.COM.
gov.                    172800  IN      NS      E.GOV.ZONEEDIT.COM.
gov.                    172800  IN      NS      B.GOV.ZONEEDIT.COM.
gov.                    172800  IN      NS      D.GOV.ZONEEDIT.COM.
gov.                    172800  IN      NS      F.GOV.ZONEEDIT.COM.
;; Received 265 bytes from 128.8.10.90#53(D.ROOT-SERVERS.NET) in 35 ms

ssa.gov.                86400   IN      NS      dns1.ssa.gov.
ssa.gov.                86400   IN      NS      DNS2.ssa.gov.
ssa.gov.                86400   IN      NS      dns5.ssa.gov.
ssa.gov.                86400   IN      NS      dns6.ssa.gov.
;; Received 165 bytes from 206.51.224.229#53(B.GOV.ZONEEDIT.COM) in 47 ms

ssa.gov.                36000   IN      A       199.173.225.5
ssa.gov.                36000   IN      NS      dns6.ssa.gov.
ssa.gov.                36000   IN      NS      dns2.ssa.gov.
ssa.gov.                36000   IN      NS      dns5.ssa.gov.
ssa.gov.                36000   IN      NS      dns1.ssa.gov.
;; Received 181 bytes from 137.200.4.31#53(dns6.ssa.gov) in 38 ms

: puck; host dns6.ssa.gov
dns6.ssa.gov has address 137.200.4.31

Thanks,
Rob.


Joel Rosenblatt wrote:
> This is what we see:
> 
> % dig +trace ssa.gov
> 
> ; <<>> DiG 9.5.0-P2 <<>> +trace ssa.gov
> ;; global options:  printcmd
> .                       238248  IN      NS      J.ROOT-SERVERS.NET.
> .                       238248  IN      NS      E.ROOT-SERVERS.NET.
> .                       238248  IN      NS      A.ROOT-SERVERS.NET.
> .                       238248  IN      NS      I.ROOT-SERVERS.NET.
> .                       238248  IN      NS      D.ROOT-SERVERS.NET.
> .                       238248  IN      NS      M.ROOT-SERVERS.NET.
> .                       238248  IN      NS      L.ROOT-SERVERS.NET.
> .                       238248  IN      NS      K.ROOT-SERVERS.NET.
> .                       238248  IN      NS      G.ROOT-SERVERS.NET.
> .                       238248  IN      NS      C.ROOT-SERVERS.NET.
> .                       238248  IN      NS      B.ROOT-SERVERS.NET.
> .                       238248  IN      NS      F.ROOT-SERVERS.NET.
> .                       238248  IN      NS      H.ROOT-SERVERS.NET.
> ;; Received 500 bytes from 128.59.59.70#53(128.59.59.70) in 20 ms
> 
> gov.                    172800  IN      NS      a.gov.zoneedit.com.
> gov.                    172800  IN      NS      b.gov.zoneedit.com.
> gov.                    172800  IN      NS      c.gov.zoneedit.com.
> gov.                    172800  IN      NS      d.gov.zoneedit.com.
> gov.                    172800  IN      NS      e.gov.zoneedit.com.
> gov.                    172800  IN      NS      f.gov.zoneedit.com.
> gov.                    172800  IN      NS      g.gov.zoneedit.com.
> ;; Received 265 bytes from 199.7.83.42#53(L.ROOT-SERVERS.NET) in 53 ms
> 
> ssa.gov.                86400   IN      NS      dns5.ssa.gov.
> ssa.gov.                86400   IN      NS      dns1.ssa.gov.
> ssa.gov.                86400   IN      NS      dns6.ssa.gov.
> ssa.gov.                86400   IN      NS      DNS2.ssa.gov.
> ;; Received 165 bytes from 216.55.155.29#53(a.gov.zoneedit.com) in 67 ms
> 
> dig: couldn't get address for 'dns6.ssa.gov': not found
> 
> 
> Joel
> 
> --On Wednesday, July 15, 2009 2:26 PM -0500 Rob Thomas <robt at cymru.com>
> wrote:
> 
>>
>>> We noticed that we cannot reach www.ssa.gov - is anyone else having this
>>> problem?
>>
>> No problems from here (AS23028).
>>
>>
>> -- 
>> Rob Thomas
>> Team Cymru Research NFP
>> https://www.team-cymru.org/
>> cmn_err(CEO_PANIC, "Out of coffee!");
>>
>>
> 
> 
> 
> Joel Rosenblatt, Manager Network & Computer Security
> Columbia Information Security Office (CISO)
> Columbia University, 612 W 115th Street, NY, NY 10025 / 212 854 3033
> http://www.columbia.edu/~joel
> 

-- 
Rob Thomas
Team Cymru Research NFP
https://www.team-cymru.org/
cmn_err(CEO_PANIC, "Out of coffee!");