[172015] in North American Network Operators' Group
Re: rz.verisign-grs.com root zone ftp access
daemon@ATHENA.MIT.EDU (Doug Barton)
Wed May 21 01:50:49 2014
X-Original-To: nanog@nanog.org
Date: Tue, 20 May 2014 22:50:40 -0700
From: Doug Barton <dougb@dougbarton.us>
To: Mehmet Akcin <mehmet@akcin.net>
In-Reply-To: <D699D43F-3EA4-4B43-BB5F-CC1CD21B6A42@akcin.net>
Cc: NANOG mailing list <nanog@nanog.org>
Errors-To: nanog-bounces@nanog.org
The last time I asked them, F-root had a "we allow it because it's the
right thing to do but we don't like it" policy. Given that ICANN
operates an infrastructure purposely built for doing zone transfers, and
given that they offer more zones than are on the roots, that's the way I
recommend people go. YMMV.
Doug
On 05/20/2014 10:42 PM, Mehmet Akcin wrote:
> F-root also allows you to axfr root-zone ( dig @f.root-servers.net . axfr )
>
>
> On May 20, 2014, at 10:32 PM, Doug Barton <dougb@dougbarton.us> wrote:
>
>> Signed PGP part
>> On 05/20/2014 02:21 PM, Brandon Applegate wrote:
>> | Is anyone using this and having failed login for a few days now ?
>> I?ve been mirroring the root zone(s) for years and I just started
>> getting failures in my logs. I emailed an address I found on the
>> Verisign website but so far dead air. If anyone knows of a more pointed
>> email POC that would actually have clue about this that would be awesome.
>>
>> You can slave the root and more directly from ICANN:
>>
>> http://www.dns.icann.org/services/axfr/
>>
>>
>
