[193562] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: DOT FRA website broken on ipv6

daemon@ATHENA.MIT.EDU (Carl Byington)
Sun Feb 5 03:14:18 2017

X-Original-To: nanog@nanog.org
From: Carl Byington <carl@five-ten-sg.com>
To: "nanog@nanog.org" <nanog@nanog.org>
In-Reply-To: <CAD6AjGRoZh+SJ8tDCMSbp3wsvPDFFn3ZO5JiAbw2j4Ea9VmVcg@mail.gmail.com>
Date: Sat, 04 Feb 2017 15:56:30 -0800
Errors-To: nanog-bounces@nanog.org

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On Thu, 2017-02-02 at 10:22 -0800, Ca By wrote:
> Anyone have a contact at DOT or FRA that can solve this?  It would be
> really nice if they remove the DNS AAAA record on www.fra.dot.gov
> until it works correctly, customers are complaining

Their SOA record suggests hostmaster@dot.gov.

You could temporarily (ab)use a bind rpz zone to override that.

www.fra.dot.gov A 204.68.194.250

That rpz A record will suppress the real AAAA record.


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.14 (GNU/Linux)

iEYEAREKAAYFAliWaigACgkQL6j7milTFsFnagCcD8Cxq6rW9fmP4yREA2Vbt4FU
XQQAniIhLcnUUmsfzkyY9mZzsBto2wKm
=ePCp
-----END PGP SIGNATURE-----



home help back first fref pref prev next nref lref last post