I’m getting a SERVFAIL error when trying to resolve disa.mil domains using 184.108.40.206 and 220.127.116.11 resolvers.
dig +short CHAOS TXT id.server @18.104.22.168 and post the result. That should show which datacenter isn’t returning a result.
@anb is pretty good about tracking these down.
It’s the nameservers serving
disa.mil don’t respond to some of our severs over TCP, results in DNSSEC verification failed. I’ll check what we can do here.