[outages] DNS: 8.8.8.8 won't resolve noaa.gov sites?

Jeremy Chadwick outages at jdc.parodius.com
Thu Sep 1 23:02:56 EDT 2011


Can't reproduce from a Comcast residential connection.  Note the use of
CNAMEs (in case you need to change your dig options), however.  Here we
go:


$ dig @8.8.8.8 soa noaa.gov

; <<>> DiG 9.6.-ESV-R5 <<>> @8.8.8.8 soa noaa.gov
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 35452
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;noaa.gov.                      IN      SOA

;; ANSWER SECTION:
noaa.gov.               86400   IN      SOA     dns02.woc.noaa.gov. hostmaster.noaa.gov. 2011090205 10800 3600 604800 86400

;; Query time: 59 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Thu Sep  1 19:59:49 2011
;; MSG SIZE  rcvd: 83


$ dig @8.8.8.8 ns noaa.gov

; <<>> DiG 9.6.-ESV-R5 <<>> @8.8.8.8 ns noaa.gov
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 63344
;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;noaa.gov.                      IN      NS

;; ANSWER SECTION:
noaa.gov.               77010   IN      NS      ns-nw.noaa.gov.
noaa.gov.               77010   IN      NS      ns-mw.noaa.gov.
noaa.gov.               77010   IN      NS      ns-e.noaa.gov.

;; Query time: 36 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Thu Sep  1 19:59:54 2011
;; MSG SIZE  rcvd: 85


$ dig @8.8.8.8 a www.noaa.gov

; <<>> DiG 9.6.-ESV-R5 <<>> @8.8.8.8 a www.noaa.gov
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 3905
;; flags: qr rd ra; QUERY: 1, ANSWER: 6, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;www.noaa.gov.                  IN      A

;; ANSWER SECTION:
www.noaa.gov.           258     IN      CNAME   edge-hdq.woc.noaa.gov.
edge-hdq.woc.noaa.gov.  258     IN      CNAME   edge-rev.lb.noaa.gov.
edge-rev.lb.noaa.gov.   25      IN      A       129.15.96.23
edge-rev.lb.noaa.gov.   25      IN      A       140.90.33.23
edge-rev.lb.noaa.gov.   25      IN      A       140.90.200.23
edge-rev.lb.noaa.gov.   25      IN      A       140.172.17.23

;; Query time: 39 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Thu Sep  1 19:59:59 2011
;; MSG SIZE  rcvd: 147


$ dig @8.8.8.8 a edge-hdq.woc.noaa.gov.

; <<>> DiG 9.6.-ESV-R5 <<>> @8.8.8.8 a edge-hdq.woc.noaa.gov.
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 59998
;; flags: qr rd ra; QUERY: 1, ANSWER: 5, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;edge-hdq.woc.noaa.gov.         IN      A

;; ANSWER SECTION:
edge-hdq.woc.noaa.gov.  300     IN      CNAME   edge-rev.lb.noaa.gov.
edge-rev.lb.noaa.gov.   30      IN      A       129.15.96.23
edge-rev.lb.noaa.gov.   30      IN      A       140.90.33.23
edge-rev.lb.noaa.gov.   30      IN      A       140.90.200.23
edge-rev.lb.noaa.gov.   30      IN      A       140.172.17.23

;; Query time: 83 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Thu Sep  1 20:01:24 2011
;; MSG SIZE  rcvd: 129


$ dig @8.8.8.8 a edge-rev.lb.noaa.gov.

; <<>> DiG 9.6.-ESV-R5 <<>> @8.8.8.8 a edge-rev.lb.noaa.gov.
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 27531
;; flags: qr rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;edge-rev.lb.noaa.gov.          IN      A

;; ANSWER SECTION:
edge-rev.lb.noaa.gov.   12      IN      A       140.90.33.23
edge-rev.lb.noaa.gov.   12      IN      A       140.90.200.23
edge-rev.lb.noaa.gov.   12      IN      A       140.172.17.23
edge-rev.lb.noaa.gov.   12      IN      A       129.15.96.23

;; Query time: 37 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Thu Sep  1 20:01:47 2011
;; MSG SIZE  rcvd: 102

-- 
| Jeremy Chadwick                                jdc at parodius.com |
| Parodius Networking                       http://www.parodius.com/ |
| UNIX Systems Administrator                   Mountain View, CA, US |
| Making life hard for others since 1977.               PGP 4BD6C0CB |

On Thu, Sep 01, 2011 at 10:41:39PM -0400, Jay Ashworth wrote:
> [ Cross-posted to NANOG and Outages; replies to outages or outages-discussion;
> I would set the header, but Zimbra sucks.  :-) ]
> 
> I've had my home box set to use 8.8.8.8 as its primary resolver, falling back
> to the BBN anycast.
> 
> Sometime today, 8.8.8.8 appears to have stopped resolving www.noaa.gov and
> www.nhc.noaa.gov:
> 
> ; <<>> DiG 9.7.3-P3 <<>> @8.8.8.8 www.noaa.gov
> ; (1 server found)
> ;; global options: +cmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 34999
> ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
> 
> ;; QUESTION SECTION:
> ;www.noaa.gov.                  IN      A
> 
> ;; Query time: 33 msec
> ;; SERVER: 8.8.8.8#53(8.8.8.8)
> ;; WHEN: Thu Sep  1 22:38:11 2011
> ;; MSG SIZE  rcvd: 30
> 
> though it resolves Yahoo and Google and Akamai.com and everything else
> I throw at it.
> 
> Digging noaa.gov at 4.2.2.1 returns what I expect.
> 
> Interesting, too, that Firefox 5.0 wouldn't DTRT, even though 4.2.2.1-3 were
> the backup nameservers in my resolv.conf.
> 
> Road Runner Tampa Bay connection.
> 
> Can anyone confirm or deny?  Google DNS or NOAA people here, before I go ping 
> NOAA staff on Twitter?
> 
> Cheers,
> -- jra
> -- 
> Jay R. Ashworth                  Baylink                       jra at baylink.com
> Designer                     The Things I Think                       RFC 2100
> Ashworth & Associates     http://baylink.pitas.com         2000 Land Rover DII
> St Petersburg FL USA      http://photo.imageinc.us             +1 727 647 1274
> _______________________________________________
> Outages mailing list
> Outages at outages.org
> https://puck.nether.net/mailman/listinfo/outages



More information about the Outages mailing list