[Cerowrt-devel] First DNSSEC failure with CeroWRT

[Aaron Wood]

One of the many servers involved with BofA's online banking:

Sat Apr 19 09:37:37 2014 daemon.info dnsmasq[29719]: using nameserver
8.8.4.4#53
Sat Apr 19 09:37:37 2014 daemon.info dnsmasq[29719]: using nameserver
8.8.8.8#53
Sat Apr 19 09:37:37 2014 daemon.info dnsmasq[29719]: using local addresses
only for domain home.lan
Sat Apr 19 09:37:37 2014 daemon.info dnsmasq[29719]: read /etc/hosts - 1
addresses
Sat Apr 19 09:37:37 2014 daemon.info dnsmasq-dhcp[29719]: read /etc/ethers
- 0 addresses
Sat Apr 19 09:37:39 2014 daemon.info dnsmasq[29719]: query[A]
saml-bac.onefiserv.com from 172.30.42.99
Sat Apr 19 09:37:39 2014 daemon.info dnsmasq[29719]: forwarded
saml-bac.onefiserv.com to 8.8.4.4
Sat Apr 19 09:37:39 2014 daemon.info dnsmasq[29719]: forwarded
saml-bac.onefiserv.com to 8.8.8.8
Sat Apr 19 09:37:39 2014 daemon.info dnsmasq[29719]: dnssec-query[DS]
saml-bac.onefiserv.com to 8.8.4.4
Sat Apr 19 09:37:41 2014 daemon.info dnsmasq[29719]: reply
saml-bac.onefiserv.com is BOGUS DS
Sat Apr 19 09:37:41 2014 daemon.info dnsmasq[29719]: validation result is
BOGUS
Sat Apr 19 09:37:41 2014 daemon.info dnsmasq[29719]: reply
saml-bac.onefiserv.com is <CNAME>
Sat Apr 19 09:37:41 2014 daemon.info dnsmasq[29719]: reply
saml-bac.gslb.onefiserv.com is 64.128.98.58


Sat Apr 19 09:38:04 2014 daemon.info dnsmasq[29719]: query[A]
sso-fi.bankofamerica.com from 172.30.42.99
Sat Apr 19 09:38:04 2014 daemon.info dnsmasq[29719]: forwarded
sso-fi.bankofamerica.com to 8.8.4.4
Sat Apr 19 09:38:04 2014 daemon.info dnsmasq[29719]: forwarded
sso-fi.bankofamerica.com to 8.8.8.8
Sat Apr 19 09:38:04 2014 daemon.info dnsmasq[29719]: dnssec-query[DS]
sso-fi.bankofamerica.com to 8.8.8.8
Sat Apr 19 09:38:05 2014 daemon.info dnsmasq[29719]: query[A]
sso-fi.bankofamerica.com from 172.30.42.99
Sat Apr 19 09:38:05 2014 daemon.info dnsmasq[29719]: dnssec retry to 8.8.8.8
Sat Apr 19 09:38:06 2014 daemon.info dnsmasq[29719]: reply
sso-fi.bankofamerica.com is BOGUS DS
Sat Apr 19 09:38:06 2014 daemon.info dnsmasq[29719]: validation result is
BOGUS
Sat Apr 19 09:38:06 2014 daemon.info dnsmasq[29719]: reply
sso-fi.bankofamerica.com is <CNAME>
Sat Apr 19 09:38:06 2014 daemon.info dnsmasq[29719]: reply
saml-bac.onefiserv.com is 64.128.98.58
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.bufferbloat.net/pipermail/cerowrt-devel/attachments/20140419/d2a5e407/attachment-0002.html>