SERVFAIL for www.frischauf-fanshop.de

Zero Trust 1.1.1.1
1

I noticed that 1.1.1.1 and 1.0.0.1 don’t resolve the domain www.frischauf-fanshop.de but return SERVFAIL instead when looking up this domain.

Here’s the link to the output of the diagnostic tool:

Here’s useful output from a linux machine in my network:

dig www.frischauf-fanshop.de @1.1.1.1

; <<>> DiG 9.11.19-RedHat-9.11.19-1.fc32 <<>> www.frischauf-fanshop.de @1.1.1.1
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 23063
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1452
;; QUESTION SECTION:
;www.frischauf-fanshop.de.	IN	A

;; Query time: 2833 msec
;; SERVER: 1.1.1.1#53(1.1.1.1)
;; WHEN: Fri Jun 12 19:09:41 CEST 2020
;; MSG SIZE  rcvd: 53

dig www.frischauf-fanshop.de @1.0.0.1

; <<>> DiG 9.11.19-RedHat-9.11.19-1.fc32 <<>> www.frischauf-fanshop.de @1.0.0.1
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 61357
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1452
;; QUESTION SECTION:
;www.frischauf-fanshop.de.	IN	A

;; Query time: 2847 msec
;; SERVER: 1.0.0.1#53(1.0.0.1)
;; WHEN: Fri Jun 12 19:10:53 CEST 2020
;; MSG SIZE  rcvd: 53

dig www.frischauf-fanshop.de @8.8.8.8

; <<>> DiG 9.11.19-RedHat-9.11.19-1.fc32 <<>> www.frischauf-fanshop.de @8.8.8.8
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 2653
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; QUESTION SECTION:
;www.frischauf-fanshop.de.	IN	A

;; ANSWER SECTION:
www.frischauf-fanshop.de. 599	IN	A	78.46.95.108

;; Query time: 33 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Fri Jun 12 19:11:24 CEST 2020
;; MSG SIZE  rcvd: 69

dig +short CHAOS TXT id.server @1.1.1.1
"FRA"

dig +short CHAOS TXT id.server @1.0.0.1
"FRA"

And here’s the link to DNSViz:
https://dnsviz.net/d/www.frischauf-fanshop.de/dnssec/

2

Hi alexander,

Thanks for the information. Domain www.frischauf-fanshop.de. has nameserver ns[12].mars-solutions.it., which in turn delegated to ns[12]a.dodns.net., which unfortunately, couldn’t be accessed by our FRA colo. We’ll try to figure out where the issue is.

4

Now, it works again.