Hello,
I use https://www.dibbs.bsm.dla.mil/ for work, but I can’t reach any of the .mil sites when using 1.1.1.1.
They all work with 8.8.8.8
tia
I believe the issue is already known to the team.
But a new case is never bad as there are more info, would you mind following this?
Is there a way to get an ETA? I’ve been checking every 2 weeks but the issue persist.
I believe this probably the same root cause and is being addressed in a code change to the resolver in use itself:
Appreciate the additional data point though and have linked this thread to our internal tracking so we can update when a resolution is available.
2 Likes
heh… checking in before I head out for the day.
1 Like
So, you work on Saturdays too, have a great weekend!
Hi, the problem is that the www.dibbs.bsm.dla.mil in bsm.dla.mil zone has broken DNSSEC, so validating DNS resolvers will block the answer. We’ll try to reach out.
1 Like
Sad to see still not fixed.
nslookup web-mont02.mail.mil 1.1.1.1
Server: 1.1.1.1
Address: 1.1.1.1#53
** server can’t find web-mont02.mail.mil: SERVFAIL
nslookup web-mont02.mail.mil 8.8.8.8
Server: 8.8.8.8
Address: 8.8.8.8#53
Non-authoritative answer:
Name: web-mont02.mail.mil
Address: 156.112.76.42
Indeed. You would think that having mandated DNSsec for security reasons years ago our government would actually get around to making it work.
— OG
1 Like
Yea, maybe once ARCYBER is really done migrating off WinXP 