SERVFAIL for domain, cloudflare only

dns-resolver
#1

$ dig www.lancaster.ac.uk @1.1.1.1

; <<>> DiG 9.11.3-1ubuntu1.5-Ubuntu <<>> www.lancaster.ac.uk @1.1.1.1
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 56629
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1452
;; QUESTION SECTION:
;www.lancaster.ac.uk. IN A

;; ANSWER SECTION:
www.lancaster.ac.uk. 43200 IN CNAME www.lancs.ac.uk.
www.lancs.ac.uk. 1048 IN A 148.88.65.80

;; Query time: 126 msec
;; SERVER: 1.1.1.1#53(1.1.1.1)
;; WHEN: Mon Mar 25 20:05:17 MSK 2019
;; MSG SIZE rcvd: 88

Same query is OK with google:

$ dig www.lancaster.ac.uk @8.8.8.8

; <<>> DiG 9.11.3-1ubuntu1.5-Ubuntu <<>> www.lancaster.ac.uk @8.8.8.8
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 12029
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; QUESTION SECTION:
;www.lancaster.ac.uk. IN A

;; ANSWER SECTION:
lancaster.ac.uk. 18385 IN DNAME lancs.ac.uk.
www.lancaster.ac.uk. 18385 IN CNAME www.lancs.ac.uk.
www.lancs.ac.uk. 385 IN A 148.88.65.80

;; Query time: 17 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Mon Mar 25 20:09:39 MSK 2019
;; MSG SIZE rcvd: 113

Tested DNSSEC here:
https://dnssec-analyzer.verisignlabs.com/www.lancaster.ac.uk
– no issues.

#2

Previously discussed here: Www.lancaster.ac.uk not resolving (SERVFAIL)

# 1.1.1.1
www.lancaster.ac.uk
  [!!] A: CNAME www.lancs.ac.uk.
        E:MISSING_RRSIG
        W:ERROR_WITHOUT_REQUEST_FLAG
# 9.9.9.9
www.lancaster.ac.uk
  [.?] A: CNAME www.lancs.ac.uk.
        W:ERROR_WITHOUT_REQUEST_FLAG
  [.?]   DNAME: lancs.ac.uk. [.]
          W:ERROR_WITHOUT_REQUEST_FLAG
  [.]      RRSIG: lancaster.ac.uk/8/63531 (2019-03-19 - 2019-04-18) [.]
2 Likes
#3

*If you’re a student, I’d call help desk and point this out. If in computer science, bring it in class :slight_smile:

https://ednscomp.isc.org/ednscomp/76724ca9d1

2 Likes
#4

Missed that, thank you!

Not anymore, since the previous century :wink:
Just providing some support.
Good idea about the class, BTW. They are also doing some other weird stuff with their web site.

1 Like