## page was renamed from DNS/watch-www/iij.ad.jp-dnssec ## page was renamed from DNS/watch/www/iij.ad.jp-dnssec ## page was renamed from DNS/watch/www.iij.ad.jp DNS/watch/www.iij.ad.jpについて、ここに記述してください。 $ dig +dnssec a www1.qmail.jp @dns0.iij.ad.jp {{{ ; <<>> DiG 9.7.3 <<>> +dnssec a www1.qmail.jp @dns0.iij.ad.jp ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: REFUSED, id: 29085 ;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1 ;; WARNING: recursion requested but not available ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags: do; udp: 4096 ;; QUESTION SECTION: ;www1.qmail.jp. IN A ;; Query time: 36 msec ;; SERVER: 210.138.174.16#53(210.138.174.16) ;; WHEN: Tue Jun 14 09:09:55 2011 ;; MSG SIZE rcvd: 42 tmaeno@:~$ dig +dnssec a www.iij.ad.jp @dns0.iij.ad.jp ; <<>> DiG 9.7.3 <<>> +dnssec a www.iij.ad.jp @dns0.iij.ad.jp ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 1071 ;; flags: qr aa rd; QUERY: 1, ANSWER: 2, AUTHORITY: 3, ADDITIONAL: 9 ;; WARNING: recursion requested but not available ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags: do; udp: 4096 ;; QUESTION SECTION: ;www.iij.ad.jp. IN A ;; ANSWER SECTION: www.iij.ad.jp. 300 IN A 210.130.137.80 www.iij.ad.jp. 300 IN RRSIG A 8 4 300 20110713151005 20110613151005 21105 iij.ad.jp. BJoa0qWs5eXpHwrV0Z6Ua6gRfm8YBBIMoCAJC+IXKVeBNRAczsGpvoGW qJeKYVbd5NresRUm7DWqk3K/HVswA0sxAeyyd0/QlF1Ymg8wgoU9qSxP tIIMr2vHhm6I7J80JgwdyrvZfEzWriBBFjhyXbQWY108BMjkEiOxNHhi d7c= ;; AUTHORITY SECTION: iij.ad.jp. 604800 IN NS dns1.iij.ad.jp. iij.ad.jp. 604800 IN NS dns0.iij.ad.jp. iij.ad.jp. 604800 IN RRSIG NS 8 3 604800 20110713151005 20110613151005 21105 iij.ad.jp. Fybvuo2rwOthFj0papFrhWCqgCueNhaZTOVY4njyrE+m3z9CRs0P+YiH W8wfq8fOcxRgcWo8d6ltjOw/2Yf3Vmfo35jzt99NiLCLtlgjPZ17TZTt 1Ftz8NcEfAVqlYOvPIkFm4SSNYV9wUkxYIenC8cF7SDk5ccDCHjvswtv NPQ= ;; ADDITIONAL SECTION: dns0.iij.ad.jp. 86400 IN A 210.138.174.16 dns0.iij.ad.jp. 86400 IN AAAA 2001:240:bb41:8002::1:16 dns1.iij.ad.jp. 86400 IN A 210.138.175.5 dns1.iij.ad.jp. 86400 IN AAAA 2001:240:bb4c:8000::1:5 dns0.iij.ad.jp. 86400 IN RRSIG A 8 4 86400 20110713151005 20110613151005 21105 iij.ad.jp. hEELgnTt1ah6IOuKH8Q6YRSGeOF8pPtAD0lqKA5dQyOKntat3BFHFtVp hiKfqrbDsoD9dxVnYOkgyYnchEuiK+jRZ2tD9nPgdVySHp++cwQMme1O Ff1LOOBbKWhgjungJ/KoSG1jGBJgBmKBjTaVbss1Q8hpMliLQVrHIBcZ yXg= dns0.iij.ad.jp. 86400 IN RRSIG AAAA 8 4 86400 20110713151005 20110613151005 21105 iij.ad.jp. bO48PhgLqZEMJf27cHSHPpru4r07Bm7Ls6GshvvnwNG+xI5JspqRVtr7 8w/E64fygtY5+MIfP1HPFmEXJa4vdo8O+mFKKz3BueKsOe8pzoApcUUh jAs2ImJ2tIhXRWX5MosrBsZUU5sopW3GEqdMInnF58yjTAvIbntWfFQ3 nEI= dns1.iij.ad.jp. 86400 IN RRSIG A 8 4 86400 20110713151005 20110613151005 21105 iij.ad.jp. HVKjUW+PvXkfSsLP/CPGB6EryTgU0I5BDpxg8Gz9ZmYmOZg9oqoE42AE AXMBLF2BzCh1ApV2/CnVLAQkINPqDICFn2VgH13b4W+q7x6TW6kDpJM5 sFBpNBzsfqB/L1pC7XlD3hDu9zHPVJuHzlExpHOkPTDy0A2YBidNo946 tIM= dns1.iij.ad.jp. 86400 IN RRSIG AAAA 8 4 86400 20110713151005 20110613151005 21105 iij.ad.jp. j5uq4kK3GUnowNBwkb5cUQfH9CIRcbwuHP9E0L28be/O9ND8a9Icjj7p QdElSTAbcUNg1KBOxXyxSrR0wAUjMukOimVbEKBEyUyZE3Pkytf9n4fm XjjsqqKhhnnwfC6vHLGzEnR49Zd6mMIog1BdSdfS3XkCjrKTbQz/nHXN Fm0= ;; Query time: 40 msec ;; SERVER: 210.138.174.16#53(210.138.174.16) ;; WHEN: Tue Jun 14 09:11:06 2011 ;; MSG SIZE rcvd: 1198 }}} == www2.iij.ad.jp (nxdomain) == additional 1 は変だ。 {{{ ; <<>> DiG 9.7.3 <<>> +dnssec a www2.iij.ad.jp @dns0.iij.ad.jp ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 29503 ;; flags: qr aa rd; QUERY: 1, ANSWER: 0, AUTHORITY: 8, ADDITIONAL: 1 ;; WARNING: recursion requested but not available ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags: do; udp: 4096 ;; QUESTION SECTION: ;www2.iij.ad.jp. IN A ;; AUTHORITY SECTION: iij.ad.jp. 3600 IN SOA bh0.iij.ad.jp. postmaster.iij.ad.jp. 1307981405 3600 1800 1209600 3600 iij.ad.jp. 3600 IN RRSIG SOA 8 3 86400 20110713151005 20110613151005 21105 iij.ad.jp. P6NFZIOOiPc5+X/8Gm4EpQMugfGzdDWo/yF5MkOy+OwbXlL04Amze/VV V2Mq5S6srKx0n/P1eNUxh1myGMuEF4L45a+6N5fOIV19RfQUpBPE9+kR M4M9DdElexLDPA05kO1uvOgw46w44whUcAsJaJLYp1obLWIjSggZWGyb qGY= V8Q9F7PQBI6FEHKCEPI6L3T3NEFLUKRG.iij.ad.jp. 3600 IN NSEC3 1 1 8 4B8139A132625FDF VB7E03K3FJ0UUBKE5LJPH5CMPOQ5J1AK NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM V8Q9F7PQBI6FEHKCEPI6L3T3NEFLUKRG.iij.ad.jp. 3600 IN RRSIG NSEC3 8 4 3600 20110713151005 20110613151005 21105 iij.ad.jp. Nrugm1AUENg4kL0v0CMN77cIT3ImYVMPiY2yGCbsLtKMO97TZIjcwbzQ EdpGi/YbpQruI5JdpuQ36WIBkf380C3KLFTPX33luxD1fjL+ZFwrfhxJ 7MiEWIqVoVb2kgUxT+KBXSV1lHVLIKZUiVDsfQE+zFwOBymPZB/KF3ri REU= 8GPVM0OSNALAEM9Q366R7QP77HGRQOQI.iij.ad.jp. 3600 IN NSEC3 1 1 8 4B8139A132625FDF 8M2B7LSRD81PT3KTJ2JC8NTNVV7ADP86 A RRSIG 8GPVM0OSNALAEM9Q366R7QP77HGRQOQI.iij.ad.jp. 3600 IN RRSIG NSEC3 8 4 3600 20110713151005 20110613151005 21105 iij.ad.jp. dvUhK9p1s4Sp+BwTbh7iPu4Mrhmb7y0J4pij9+yDfR3uXAWz9OTuHMrW +hhCUw/5FU1DkovWUuTrKxu7OfDq8zKdaW2548dKsx+lnqIz8jl7IHrz TZMe+YAetN5PqR88iROM8PUWAlCLYGAc1KcLuyHcDPLmWfUF5vQCT+9V 6uo= L58CSMH87K7JJBEPCCVT8TV9NOGOEV3A.iij.ad.jp. 3600 IN NSEC3 1 1 8 4B8139A132625FDF L7OV61V7LFKSGER2OI34GD0V5ODEEL37 A RRSIG L58CSMH87K7JJBEPCCVT8TV9NOGOEV3A.iij.ad.jp. 3600 IN RRSIG NSEC3 8 4 3600 20110713151005 20110613151005 21105 iij.ad.jp. NgvAS0e2cAOR0Rt5DX8r6fT/BKhh1dNSyIOFMSa+Ev5dWO+Mvf0H0Z9R UcVtobLNV+o4DP9PGtbwUOvgdiuvy0kPN632Vli0gpG8HJOlXKGWdahk fO5KfSVgB7lBFcxleBAPMngOFTFPg2aWFfIbzTQU3opR2dnoi00TQOyu MA4= ;; Query time: 37 msec ;; SERVER: 210.138.174.16#53(210.138.174.16) ;; WHEN: Tue Jun 14 09:13:47 2011 ;; MSG SIZE rcvd: 1032 }}} ---- どうも、TYPE OPT (EDNS0 option) を数えているようです。 -- [[tss]] <> なるほど。そうらしい。