Unable to resolve host using 1.1.1.1

NSLOOKUP results

% nslookup

server 1.1.1.1
Default server: 1.1.1.1
Address: 1.1.1.1#53
www.kpru.ac.th
Server: 1.1.1.1
Address: 1.1.1.1#53

** server can’t find www.kpru.ac.th: SERVFAIL

server 8.8.8.8
www.kpru.ac.th
Server: 8.8.8.8
Address: 8.8.8.8#53

Non-authoritative answer:
Name: www.kpru.ac.th
Address: 202.29.15.3
Name: www.kpru.ac.th
Address: 202.129.39.214

This is a DNSSEC issue. One of the name servers for kpru.ac.th (ns2.kpru.ac.th) is not returning RRSIG records.

$ dig +dnssec +noall +answer @ns1.kpru.ac.th www.kpru.ac.th
www.kpru.ac.th.		3600	IN	A	202.29.15.3
www.kpru.ac.th.		3600	IN	A	202.129.39.214
www.kpru.ac.th.		3600	IN	RRSIG	A 8 4 3600 20230615152535 20230605142535 41931 kpru.ac.th. UKhTzuZnxQHxQcPuFBENZGDnatTxE2piiaGO1ekirlm9ywg4v7nXi/NK uW+XvAMzSv36skNELEmzc85+loVn5NWrkcXtmhA69RI58iFqPPmkECEg vuVDA+kIkrjqBGp4lfdWfkvoF+ljytJM8s3fHR487k7heYdkpdHnnFtO qAY=
$ dig +dnssec +noall +answer @ns2.kpru.ac.th www.kpru.ac.th
www.kpru.ac.th.		3600	IN	A	202.129.39.214
www.kpru.ac.th.		3600	IN	A	202.29.15.3
3 Likes

Thank You, @albert .

This topic was automatically closed 3 days after the last reply. New replies are no longer allowed.