On Jun 3 2014, Tony Finch wrote:
Bill, could you please fix the reverse DNS for 2001:500:84::/48 ?
4.8.0.0.0.0.5.0.1.0.0.2.ip6.arpa. 10800 IN NS DOT.RS.NET. 4.8.0.0.0.0.5.0.1.0.0.2.ip6.arpa. 10800 IN NS NS.ISI.EDU. 4.8.0.0.0.0.5.0.1.0.0.2.ip6.arpa. 10800 IN NS FORK.STH.DNSNODE.NET.
[which variously give REFUSED or SERVFAIL for the domain] This prompted me to wonder whether reverse lookups of other #.root-servers.net addresses work correctly. Alas, 2001:500:1::803f:235 for h.root-servers.net also gives SERVFAIL, but for a different reason. There is a DNSKEY/DS mismatch between 1.0.0.0.0.0.5.0.1.0.0.2.ip6.arpa and 5.0.1.0.0.2.ip6.arpa. See http://dnssec-debugger.verisignlabs.com/1.0.0.0.0.0.5.0.1.0.0.2.ip6.arpa -- Chris Thompson University of Cambridge Information Services, Email: cet1@uis.cam.ac.uk Roger Needham Building, 7 JJ Thomson Avenue, Phone: +44 1223 334715 Cambridge CB3 0RB, United Kingdom.