DNSSEC/NSEC3+opt-out - moin.dnsq.info

DNSSEC/NSEC3+opt-outについて、ここに記述してください。

$ dig -t ns mufj.jp +dnssec @a.dns.jp

; <<>> DiG 9.11.2 <<>> -t ns mufj.jp +dnssec @a.dns.jp
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 5279
;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 3, ADDITIONAL: 2
;; WARNING: recursion requested but not available

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 4096
;; QUESTION SECTION:
;mufj.jp.                       IN      NS

;; AUTHORITY SECTION:
mufj.jp.                86400   IN      NS      ns.mufj.jp.
mufj.jp.                7200    IN      DS      60678 7 1 A8A132CEA6926E7B284094272C71D1FFD025BF6E
mufj.jp.                7200    IN      RRSIG   DS 8 2 7200 20180212174502 20180113174502 56598 jp. r+ktv31BURCLaZbSTHVTKWYa3Iyvm1ZAOmp24f6Hwt8mt3PLC5UhqWhV Ro2RppBgdSZnYWctOg0hNw/cHZNE6OHzeIJ3uWMuycuOubAq9BbBIBkl za3UxWNCEhvrujpuG7dz28o2vyG/trCOYhXQfxlUiOdGpl+/mG2dnwjq ruk=

;; ADDITIONAL SECTION:
ns.mufj.jp.             86400   IN      A       150.42.6.4

;; Query time: 6 msec
;; SERVER: 203.119.1.1#53(203.119.1.1)
;; WHEN: Thu Jan 18 20:31:54 JST 2018
;; MSG SIZE  rcvd: 267

$ dig -t a foobar.gov.mufj.jp +dnssec @ns.mufj.jp

; <<>> DiG 9.11.2 <<>> -t a foobar.gov.mufj.jp +dnssec @ns.mufj.jp
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51542
;; flags: qr aa rd; QUERY: 1, ANSWER: 0, AUTHORITY: 6, ADDITIONAL: 1
;; WARNING: recursion requested but not available

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 4096
;; QUESTION SECTION:
;foobar.gov.mufj.jp.            IN      A

;; AUTHORITY SECTION:
s93butv3tghjltonk17o9qb3ls2p73t6.mufj.jp. 300 IN NSEC3 1 1 12 DECAFE UQHN509734GPUULR1R76P6QRSITD2LFG  A RRSIG
s93butv3tghjltonk17o9qb3ls2p73t6.mufj.jp. 300 IN RRSIG NSEC3 7 3 300 20200101000000 20171129235218 19682 mufj.jp. OtXdWTSS3Ly6GrNgXFfpGBRHU97bb+jIuMzHgVGnsMBta4aV1uEOCNKI k4fVA+CkBYVe9YnmMFcOf+MOl2/zhZ367EbLwc8ViLh6Ie12+MeikclX z+t77cnV6Kt0ViqQPo7/UbOMU0vA9EC1KZl9yLyzeM6vzz9f5ujUe4Rb 0WY=
uqhn509734gpuulr1r76p6qrsitd2lfg.mufj.jp. 300 IN NSEC3 1 1 12 DECAFE AE1H13EECDKG02L57UHK6VUMBLRFFRS5  A RRSIG
uqhn509734gpuulr1r76p6qrsitd2lfg.mufj.jp. 300 IN RRSIG NSEC3 7 3 300 20200101000000 20171129235218 19682 mufj.jp. CVaEnKA/EJWVXUO0AlfSFOn2MwWhWT/XRn1UyE7C90zKYYLqPgKgfMoR aFMNLu4CwwG+N4HZXXb90nAFeLSqfJRSDKYtono9GLTui1VJqoNioI/7 tB/eeDuvBbJaepix95fDXotBedElgczQZMRw1jMRuJld9MCa+0PUacfN 4v4=
mufj.jp.                300     IN      SOA     ns.mufj.jp. tss.e-ontap.com. 2017112001 3600 600 86400 300
mufj.jp.                300     IN      RRSIG   SOA 7 2 3600 20200101000000 20171129235218 19682 mufj.jp. D57pO/lZhuZuW4z6pMWkhXzCMP3n6dIOMhUsRqjey1WuQKK25CqREMaM mjs0JXD5RqqKh+wo7+GLmcHtq431AMeMe/xMuLpLOI1YI1nPnQFluDj8 eCllhArnXQ4StbUTzbr5iyww+F7DJHiIt1/mpC369J0f0zsm7DFq2IUT lr0=

;; Query time: 13 msec
;; SERVER: 150.42.6.4#53(150.42.6.4)
;; WHEN: Thu Jan 18 20:32:41 JST 2018
;; MSG SIZE  rcvd: 766

$ dig -t a foobar.gov.mufj.jp +dnssec @8.8.8.8

; <<>> DiG 9.11.2 <<>> -t a foobar.gov.mufj.jp +dnssec @8.8.8.8
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 28069
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 512
;; QUESTION SECTION:
;foobar.gov.mufj.jp.            IN      A

;; Query time: 210 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Thu Jan 18 20:33:35 JST 2018
;; MSG SIZE  rcvd: 47

$ dig -t a foobar.gov.mufj.jp +dnssec @127.0.0.2
;; Truncated, retrying in TCP mode.

; <<>> DiG 9.11.2 <<>> -t a foobar.gov.mufj.jp +dnssec @127.0.0.2
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 5719
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 6, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 1220
;; QUESTION SECTION:
;foobar.gov.mufj.jp.            IN      A

;; AUTHORITY SECTION:
s93butv3tghjltonk17o9qb3ls2p73t6.mufj.jp. 245 IN NSEC3 1 1 12 DECAFE UQHN509734GPUULR1R76P6QRSITD2LFG  A RRSIG
s93butv3tghjltonk17o9qb3ls2p73t6.mufj.jp. 245 IN RRSIG NSEC3 7 3 300 20200101000000 20171129235218 19682 mufj.jp. OtXdWTSS3Ly6GrNgXFfpGBRHU97bb+jIuMzHgVGnsMBta4aV1uEOCNKI k4fVA+CkBYVe9YnmMFcOf+MOl2/zhZ367EbLwc8ViLh6Ie12+MeikclX z+t77cnV6Kt0ViqQPo7/UbOMU0vA9EC1KZl9yLyzeM6vzz9f5ujUe4Rb 0WY=
uqhn509734gpuulr1r76p6qrsitd2lfg.mufj.jp. 245 IN NSEC3 1 1 12 DECAFE AE1H13EECDKG02L57UHK6VUMBLRFFRS5  A RRSIG
uqhn509734gpuulr1r76p6qrsitd2lfg.mufj.jp. 245 IN RRSIG NSEC3 7 3 300 20200101000000 20171129235218 19682 mufj.jp. CVaEnKA/EJWVXUO0AlfSFOn2MwWhWT/XRn1UyE7C90zKYYLqPgKgfMoR aFMNLu4CwwG+N4HZXXb90nAFeLSqfJRSDKYtono9GLTui1VJqoNioI/7 tB/eeDuvBbJaepix95fDXotBedElgczQZMRw1jMRuJld9MCa+0PUacfN 4v4=
mufj.jp.                245     IN      SOA     ns.mufj.jp. tss.e-ontap.com. 2017112001 3600 600 86400 300
mufj.jp.                245     IN      RRSIG   SOA 7 2 3600 20200101000000 20171129235218 19682 mufj.jp. D57pO/lZhuZuW4z6pMWkhXzCMP3n6dIOMhUsRqjey1WuQKK25CqREMaM mjs0JXD5RqqKh+wo7+GLmcHtq431AMeMe/xMuLpLOI1YI1nPnQFluDj8 eCllhArnXQ4StbUTzbr5iyww+F7DJHiIt1/mpC369J0f0zsm7DFq2IUT lr0=

;; Query time: 0 msec
;; SERVER: 127.0.0.2#53(127.0.0.2)
;; WHEN: Thu Jan 18 20:34:20 JST 2018
;; MSG SIZE  rcvd: 766