Hmm a little morning mystery while trying to pay the #dvla my annual car tax. For some unknown reason #dns requests for the payment processor are getting dropped. #itsalwaysdns

1/5

Even curiouser - if I disabled #dnssec on my router I can get a response. I assume there is something about the forwarded response it didn't like. I'm now immediately suspicious of every other #DNS providers response.

2/x

One thing that jumps out of the overly voluminous logs is: " mitigation for NXNSAttack CVE-2020-12667". Do I really want to be reading #kresd #dns #CVE reports on my last day of holiday?

3/x

Hmm well the current HEAD of #kresd also fails the lookup but its hard to say from the voluminous debug logs what could the problem be. kresd also fails to resolve the root servers in my local build which could be a problem.

4/x

Well looking up the SOA records for ephapay.net yields nothing. From that I'm going to content that #kresd is being super cautious and I'm kinda shocked the other #dns servers are giving responses for the domain. So now all I need to work out is how to notify them of this issue. I think that is the end of todays "problems with DNS" thread.

5/5