<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
There's been some chatter on NANOG - they're under DDOS attack apparently.</div>
<div>
<div id="appendonsend"></div>
<div style="font-family:Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" color="#000000" style="font-size:11pt"><b>From:</b> Outages <outages-bounces@outages.org> on behalf of Matthew Huff via Outages <outages@outages.org><br>
<b>Sent:</b> 14 June 2021 11:35<br>
<b>To:</b> outages@outages.org <outages@outages.org><br>
<b>Subject:</b> [outages] DNS SERVFAIL for nist.gov</font>
<div> </div>
</div>
<div class="BodyFragment"><font size="2"><span style="font-size:11pt">
<div class="PlainText">We have to query and compare against NIST time servers for FINRA compliance. This morning I noticed our systems are unable to DNS query the NIST time servers. Neither our local resolvers or google (8.8.8.8) work.<br>
<br>
[root@bacall log]# dig @8.8.8.8 time-a-g.nist.gov<br>
<br>
; <<>> DiG 9.11.4-P2-RedHat-9.11.4-26.P2.el7_9.5 <<>> @8.8.8.8 time-a-g.nist.gov<br>
; (1 server found)<br>
;; global options: +cmd<br>
;; Got answer:<br>
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 36018<br>
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1<br>
<br>
;; OPT PSEUDOSECTION:<br>
; EDNS: version: 0, flags:; udp: 512<br>
;; QUESTION SECTION:<br>
;time-a-g.nist.gov. IN A<br>
<br>
;; Query time: 6 msec<br>
;; SERVER: 8.8.8.8#53(8.8.8.8)<br>
;; WHEN: Mon Jun 14 06:27:45 EDT 2021<br>
;; MSG SIZE rcvd: 46<br>
<br>
[root@bacall log]# dig @8.8.8.8 nist.gov in soa<br>
<br>
; <<>> DiG 9.11.4-P2-RedHat-9.11.4-26.P2.el7_9.5 <<>> @8.8.8.8 nist.gov in soa<br>
; (1 server found)<br>
;; global options: +cmd<br>
;; Got answer:<br>
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 17779<br>
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1<br>
<br>
;; OPT PSEUDOSECTION:<br>
; EDNS: version: 0, flags:; udp: 512<br>
;; QUESTION SECTION:<br>
;nist.gov. IN SOA<br>
<br>
;; Query time: 5 msec<br>
;; SERVER: 8.8.8.8#53(8.8.8.8)<br>
;; WHEN: Mon Jun 14 06:31:59 EDT 2021<br>
;; MSG SIZE rcvd: 37<br>
<br>
The time servers are documented here: <a href="https://tf.nist.gov/tf-cgi/servers.cgi">
https://tf.nist.gov/tf-cgi/servers.cgi</a><br>
<br>
Using the IP addresses work, it look like the nist.gov domain is offline.<br>
<br>
Matthew Huff | Director of Technical Operations | OTA Management LLC<br>
<br>
Office: 914-460-4039<br>
mhuff@ox.com | www.ox.com<br>
...........................................................................................................................................<br>
<br>
_______________________________________________<br>
Outages mailing list<br>
Outages@outages.org<br>
<a href="https://puck.nether.net/mailman/listinfo/outages">https://puck.nether.net/mailman/listinfo/outages</a><br>
</div>
</span></font></div>
</div>
</body>
</html>