Discover Centmin Mod today
Register Now

September 6th, 2017 - EPEL Yum Repo DNS Issues

Discussion in 'Centmin Mod News' started by eva2000, Sep 6, 2017.

Tags:
Thread Status:
Not open for further replies.
  1. eva2000

    eva2000 Administrator Staff Member

    54,601
    12,225
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,794
    Local Time:
    10:21 PM
    Nginx 1.27.x
    MariaDB 10.x/11.4+
    Centmin Mod LEMP stack relies on EPEL Yum repository for some Yum packages. Right now new installs will have problems completing successfully or existing installs might have issues updating yum.

    Problem

    EPEL yum repo's domain dns is down right now with some public dns resolvers like Google's 8.8.8.8

    Testing EPEL domain DNS returns empty / missing DNS records using Google public 8.8.8.8 dns
    Code (Text):
    dig @8.8.8.8 +short download.fedoraproject.org
    


    Example error when you try to use yum update
    Code (Text):
    One of the configured repositories failed (Unknown),
    and yum doesn't have enough cached data to continue. At this point the only
    safe thing yum can do is fail. There are a few ways to work "fix" this:
    
    1. Contact the upstream for the repository and get them to fix the problem.
    
    2. Reconfigure the baseurl/etc. for the repository, to point to a working
    upstream. This is most often useful if you are using a newer
    distribution release than is supported by the repository (and the
    packages for the previous distribution release still work).
    
    3. Run the command with the repository temporarily disabled
    yum --disablerepo=<repoid> ...
    
    4. Disable the repository permanently, so yum won't use it by default. Yum
    will then just ignore the repository until you permanently enable it
    again or use --enablerepo for temporary usage:
    
    yum-config-manager --disable <repoid>
    or
    subscription-manager repos --disable=<repoid>
    
    5. Configure the failing repository to be skipped, if it is unavailable.
    Note that yum will try to contact the repo. when it runs most commands,
    so will have to try and fail each time (and thus. yum will be be much
    slower). If it is a very temporary problem though, this is often a nice
    compromise:
    
    yum-config-manager --save --setopt=<repoid>.skip_if_unavailable=true
    
    Cannot retrieve metalink for repository: epel/x86_64. Please verify its path and try again
    



    Workaround Solution

    Use a different DNS resolver for your server i.e. 4.2.2.2 (level3) revised /etc/resolv.conf
    Code (Text):
    options rotate
    options timeout:1
    nameserver 4.2.2.2
    nameserver 8.8.8.8
    nameserver 8.26.56.26
    

    4.2.2.2 is level DNS server
    Code (Text):
    curl ipinfo.io/4.2.2.2  
    {
      "ip": "4.2.2.2",
      "hostname": "b.resolvers.Level3.net",
      "city": "",
      "region": "",
      "country": "US",
      "loc": "37.7510,-97.8220",
      "org": "AS3356 Level 3 Communications, Inc."
    }
    

    testing EPEL domain resolution using 4.2.2.2 DNS server works
    Code (Text):
    dig @4.2.2.2 +short mirrors.fedoraproject.org              
    wildcard.fedoraproject.org.
    140.211.169.206
    67.203.2.67
    152.19.134.142
    152.19.134.198
    66.35.62.162
    209.132.181.16
    209.132.181.15
    8.43.85.67
    140.211.169.196
    67.219.144.68
    

    Code (Text):
    dig @4.2.2.2 +short download.fedoraproject.org              
    wildcard.fedoraproject.org.
    67.219.144.68
    66.35.62.162
    67.203.2.67
    140.211.169.196
    152.19.134.198
    209.132.181.15
    8.43.85.67
    152.19.134.142
    209.132.181.16
    140.211.169.206
    

    or Comodo DNS 8.26.56.26
    Code (Text):
    dig @8.26.56.26 +short download.fedoraproject.org
    wildcard.fedoraproject.org.
    67.219.144.68
    152.19.134.198
    209.132.181.15
    8.43.85.67
    140.211.169.206
    85.236.55.6
    185.141.165.254
    209.132.181.16
    152.19.134.142
    174.141.234.172
    

    Code (Text):
    curl ipinfo.io/8.26.56.26
    {
      "ip": "8.26.56.26",
      "hostname": "ns1.recursive.dnsbycomodo.com",
      "city": "Mountain View",
      "region": "California",
      "country": "US",
      "loc": "37.3860,-122.0840",
      "org": "AS16589 ANYCAST-AS",
      "postal": "94035",
      "phone": "650"
    }
    
     
  2. eva2000

    eva2000 Administrator Staff Member

    54,601
    12,225
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,794
    Local Time:
    10:21 PM
    Nginx 1.27.x
    MariaDB 10.x/11.4+
    Centmin Mod 123.09beta01 has a new tools/checkdomains.sh which is being developed for security to verify download domain's dns and eventually alert to dns changes for such domains (as is the case with EPEL issue). Not 100% finished but useful to check domain dns for download urls that Centmin Mod relies on. Unfortunately, the tools/checkdomains.sh relies on Google 8.8.8.8 dns for domain dns look ups right now - which is where EPEL domain dns issue is located :LOL: So will need to work on adding fallback dns servers for tools/checkdomains.sh :)

    tools/checkdomains.sh uses dig command tool to do dns look ups and dig only reads the 1st entry in /etc/resolv.conf regardless of option rotate used and defines the public dns server used for dns lookups using variable
    Code (Text):
    WHOIS_NAMESERVER='8.8.8.8'
    


    Notice entry for EPEL domain has no ips associated with dns servers
    Code (Text):
    dl.fedoraproject.org dnssec: no registrar: http://www.comlaude.com
    expiry: Sep 24 2018 updated: Sep 06 2017
    ns02.fedoraproject.org
    ns04.fedoraproject.org
    ns05.fedoraproject.org
    


    Full tools/checkdomain.sh check output
    Code (Text):
    tools/checkdomains.sh check
    ----------
    nginx.org dnssec: no registrar: http://www.directnic.com
    expiry: Dec 23 2018 updated: Jan 30 2017
    nginx.org 95.211.80.227 NL AS60781 LeaseWeb Netherlands B.V.
    nginx.org 206.251.255.63 US AS21581 M5 Computer Security
    ns.nginx.org 206.251.255.60
    ns2.nginx.org 95.211.80.227
    
    ----------
    centminmod.com dnssec: no registrar: http://www.internet.bs
    expiry: Oct 06 2026 updated: Oct 08 2016
    centminmod.com 45.63.18.5 US AS20473 Choopa LLC,
    ns-1430.awsdns-50.org 205.251.197.150
    ns-1846.awsdns-38.co.uk 205.251.199.54
    ns-212.awsdns-26.com 205.251.192.212
    ns-568.awsdns-07.net 205.251.194.56
    
    ----------
    centmin.com dnssec: yes registrar: http://www.namesilo.com
    expiry: Feb 21 2018 updated: Aug 30 2017
    centmin.com 104.27.174.238 AS13335 Cloudflare Inc.
    centmin.com 104.27.175.238 AS13335 Cloudflare Inc.
    andy.ns.cloudflare.com 173.245.59.101
    fay.ns.cloudflare.com 173.245.58.115
    
    ----------
    centmin.sh dnssec: yes registrar: http://www.1api.net
    expiry: Apr 02 2019 updated: Aug 30 2017
    centmin.sh 104.27.173.154 AS13335 Cloudflare Inc.
    centmin.sh 104.27.172.154 AS13335 Cloudflare Inc.
    andy.ns.cloudflare.com 173.245.59.101
    fay.ns.cloudflare.com 173.245.58.115
    
    ----------
    github.com dnssec: no registrar: http://www.markmonitor.com
    expiry: Oct 09 2020 updated: Jun 26 2017
    github.com 192.30.253.113 US AS36459 GitHub Inc.,
    github.com 192.30.253.112 US AS36459 GitHub Inc.,
    ns-1283.awsdns-32.org 205.251.197.3
    ns-1707.awsdns-21.co.uk 205.251.198.171
    ns-421.awsdns-52.com 205.251.193.165
    ns-520.awsdns-01.net 205.251.194.8
    ns1.p16.dynect.net 208.78.70.16
    ns2.p16.dynect.net 204.13.250.16
    ns3.p16.dynect.net 208.78.71.16
    ns4.p16.dynect.net 204.13.251.16
    
    ----------
    php.net dnssec: no registrar: http://www.tucowsdomains.com
    expiry: Nov 17 2023 updated: Aug 08 2015
    php.net 72.52.91.14 US AS6939 Hurricane Electric Inc.,
    dns1.easydns.com 64.68.192.10
    dns2.easydns.net 198.41.222.254
    dns3.easydns.org 64.68.196.10
    dns4.easydns.info 194.0.2.19
    
    ----------
    yum.mariadb.org dnssec: no registrar: http://www.gandi.net
    expiry: Mar 04 2020 updated: Aug 29 2017
    yum.mariadb.org 142.4.217.28 CA AS16276 OVH SAS
    yum.mariadb.org 192.99.47.208 CA AS16276 OVH SAS
    dns2.stabletransit.com 65.61.188.4
    dns1.stabletransit.com 69.20.95.4
    
    ----------
    gitlab.com dnssec: no registrar: http://www.gandi.net
    expiry: Jan 15 2018 updated: May 03 2017
    gitlab.com 52.167.219.168 US AS8075 Microsoft Corporation
    ns-1373.awsdns-43.org 205.251.197.93
    ns-1644.awsdns-13.co.uk 205.251.198.108
    ns-505.awsdns-63.com 205.251.193.249
    ns-705.awsdns-24.net 205.251.194.193
    
    ----------
    rpms.remirepo.net dnssec: yes registrar: http://www.gandi.net
    expiry: May 24 2018 updated: May 24 2015
    rpms.remirepo.net 195.154.241.117 FR AS12876 ONLINE S.A.S.
    a.dns.gandi.net 173.246.98.1
    b.dns.gandi.net 213.167.229.1
    c.dns.gandi.net 217.70.179.1
    
    ----------
    copr-be.cloud.fedoraproject.org dnssec: no registrar: http://www.comlaude.com
    expiry: Sep 24 2018 updated: Sep 06 2017
    ns02.fedoraproject.org
    ns04.fedoraproject.org
    ns05.fedoraproject.org
    
    ----------
    ftp.openbsd.org dnssec: no registrar: http://www.godaddy.com
    expiry: Oct 11 2023 updated: May 19 2015
    ftp.openbsd.org 129.128.5.191 CA AS3359 University of Alberta
    ns1.superblock.net 207.158.15.119
    ns2.superblock.net 207.244.65.199
    c.ns.bsws.de 46.29.43.7
    a.ns.bsws.de 80.86.183.56
    b.ns.bsws.de 80.86.183.57
    dns1.openbsd.org 199.185.230.18
    dns2.openbsd.org 199.185.230.19
    
    ----------
    vault.centos.org dnssec: no registrar: http://www.comlaude.com
    expiry: Dec 04 2017 updated: Nov 05 2016
    vault.centos.org 107.158.252.35 US AS30693 Eonix Corporation
    ns1.centos.org 199.187.126.93
    ns3.centos.org 88.208.217.170
    ns4.centos.org 62.141.54.220
    
    ----------
    repo.percona.com dnssec: no registrar: http://www.directnic.com
    expiry: Jun 08 2020 updated: Apr 10 2017
    repo.percona.com 74.121.199.234 US AS36473 BlackMesh Inc.
    ns1.p13.dynect.net 208.78.70.13
    ns2.p13.dynect.net 204.13.250.13
    ns3.p13.dynect.net 208.78.71.13
    ns4.p13.dynect.net 204.13.251.13
    
    ----------
    mirrors.tuna.tsinghua.edu.cn dnssec: yes registrar:
    expiry: - updated: -
    mirrors.tuna.tsinghua.edu.cn 101.6.6.177 CN AS4538 China Education and Research Network Center
    
    ----------
    mirror.city-fan.org dnssec: no registrar: http://www.register.com
    expiry: May 12 2018 updated: May 13 2017
    mirror.city-fan.org 212.56.100.58 GB AS6871 British Telecommunications PLC
    ns1.twisted4life.com 202.157.182.142
    goalkeeper.city-fan.org 212.56.100.58
    
    ----------
    download.docker.com dnssec: yes registrar: http://www.gandi.net
    expiry: Jan 26 2019 updated: Sep 02 2015
    download.docker.com 54.192.48.140 US AS16509 Amazon.com Inc.,
    download.docker.com 54.192.48.166 US AS16509 Amazon.com Inc.,
    download.docker.com 54.192.48.91 US AS16509 Amazon.com Inc.,
    download.docker.com 54.192.48.142 US AS16509 Amazon.com Inc.,
    download.docker.com 54.192.48.238 US AS16509 Amazon.com Inc.,
    download.docker.com 54.192.48.63 US AS16509 Amazon.com Inc.,
    download.docker.com 54.192.48.179 US AS16509 Amazon.com Inc.,
    download.docker.com 54.192.48.71 US AS16509 Amazon.com Inc.,
    ns-1289.awsdns-33.org 205.251.197.9
    ns-1981.awsdns-55.co.uk 205.251.199.189
    ns-207.awsdns-25.com 205.251.192.207
    ns-568.awsdns-07.net 205.251.194.56
    
    ----------
    mirrors.fedoraproject.org dnssec: no registrar: http://www.comlaude.com
    expiry: Sep 24 2018 updated: Sep 06 2017
    ns02.fedoraproject.org
    ns04.fedoraproject.org
    ns05.fedoraproject.org
    
    ----------
    raw.githubusercontent.com dnssec: yes registrar: http://www.markmonitor.com
    expiry: Feb 06 2018 updated: Jun 26 2017
    raw.githubusercontent.com 151.101.0.133 US AS54113 Fastly
    raw.githubusercontent.com 151.101.64.133 US AS54113 Fastly
    raw.githubusercontent.com 151.101.128.133 US AS54113 Fastly
    raw.githubusercontent.com 151.101.192.133 US AS54113 Fastly
    ns-1411.awsdns-48.org 205.251.197.131
    ns-181.awsdns-22.com 205.251.192.181
    ns-1867.awsdns-41.co.uk 205.251.199.75
    ns-596.awsdns-10.net 205.251.194.84
    ns1.p16.dynect.net 208.78.70.16
    ns2.p16.dynect.net 204.13.250.16
    ns3.p16.dynect.net 208.78.71.16
    ns4.p16.dynect.net 204.13.251.16
    
    ----------
    mirrorlist.centos.org dnssec: no registrar: http://www.comlaude.com
    expiry: Dec 04 2017 updated: Nov 05 2016
    mirrorlist.centos.org 85.236.43.108 DE AS15456 InterNetX GmbH
    mirrorlist.centos.org 212.69.166.138 AT AS8218 Zayo France SAS
    mirrorlist.centos.org 216.176.179.218 US AS23033 Wowrack.com
    mirrorlist.centos.org 67.219.148.138 US AS54455 MadeIT inc.
    ns1.centos.org 199.187.126.93
    ns3.centos.org 88.208.217.170
    ns4.centos.org 62.141.54.220
    
    ----------
    www.percona.com dnssec: no registrar: http://www.directnic.com
    expiry: Jun 08 2020 updated: Apr 10 2017
    www.percona.com 74.121.199.234 US AS36473 BlackMesh Inc.
    ns1.p13.dynect.net 208.78.70.13
    ns2.p13.dynect.net 204.13.250.13
    ns3.p13.dynect.net 208.78.71.13
    ns4.p13.dynect.net 204.13.251.13
    
    ----------
    dl.iuscommunity.org dnssec: yes registrar: www.cscglobal.com/global/web/csc/digital-brand-services.html
    expiry: Aug 31 2018 updated: Aug 27 2017
    dl.iuscommunity.org 146.20.25.47 US AS27357 Rackspace Hosting
    ns2.rackspace.com 65.61.188.4
    ns.rackspace.com 69.20.95.4
    
    ----------
    rpm.nodesource.com dnssec: yes registrar: http://www.name.com
    expiry: Mar 13 2018 updated: Feb 11 2017
    rpm.nodesource.com 54.192.48.51 US AS16509 Amazon.com Inc.,
    rpm.nodesource.com 54.192.48.178 US AS16509 Amazon.com Inc.,
    rpm.nodesource.com 54.192.48.170 US AS16509 Amazon.com Inc.,
    rpm.nodesource.com 54.192.48.171 US AS16509 Amazon.com Inc.,
    rpm.nodesource.com 54.192.48.129 US AS16509 Amazon.com Inc.,
    rpm.nodesource.com 54.192.48.152 US AS16509 Amazon.com Inc.,
    rpm.nodesource.com 54.192.48.28 US AS16509 Amazon.com Inc.,
    rpm.nodesource.com 54.192.48.103 US AS16509 Amazon.com Inc.,
    rodney.ns.cloudflare.com 173.245.59.228
    sima.ns.cloudflare.com 173.245.58.222
    
    ----------
    mirrorlist.repoforge.org dnssec: yes registrar: http://www.joker.com
    expiry: Jan 04 2019 updated: Mar 24 2017
    mirrorlist.repoforge.org 151.101.1.147 US AS54113 Fastly
    mirrorlist.repoforge.org 151.101.65.147 US AS54113 Fastly
    mirrorlist.repoforge.org 151.101.129.147 US AS54113 Fastly
    mirrorlist.repoforge.org 151.101.193.147 US AS54113 Fastly
    ns2.3ti.be 136.243.177.23
    ns1.3ti.be 148.251.123.139
    
    ----------
    downloads3.ioncube.com dnssec: yes registrar: http://www.enom.com
    expiry: Jun 19 2019 updated: May 24 2017
    downloads3.ioncube.com 52.216.225.66 US AS16509 Amazon.com Inc.,
    ns0.dnsmadeeasy.com 208.94.148.2
    ns1.dnsmadeeasy.com 208.80.124.2
    ns2.dnsmadeeasy.com 208.80.126.2
    ns3.dnsmadeeasy.com 208.80.125.2
    ns4.dnsmadeeasy.com 208.80.127.2
    
    ----------
    packagecloud.io dnssec: no registrar: http://www.key-systems.net
    expiry: Oct 14 2017 updated: Jun 11 2017
    packagecloud.io 50.97.198.58 US AS36351 SoftLayer Technologies Inc.
    dns1.easydns.com 64.68.192.10
    dns2.easydns.net 198.41.222.254
    dns3.easydns.org 64.68.196.10
    ns2.dnsimple.com 162.159.25.4
    ns1.dnsimple.com 162.159.24.4
    ns3.dnsimple.com 162.159.26.4
    ns4.dnsimple.com 162.159.27.4
    
    ----------
    xcache.lighttpd.net dnssec: yes registrar: http://www.hetzner.de
    expiry: Dec 04 2017 updated: Dec 05 2016
    xcache.lighttpd.net 188.40.103.19 DE AS24940 Hetzner Online GmbH
    ns1.lighttpd.net 188.40.103.19
    ns1.stbuehler.de 88.198.35.59
    
    ----------
    wordpress.org dnssec: no registrar: http://www.markmonitor.com
    expiry: Mar 28 2020 updated: Jan 13 2017
    wordpress.org 66.155.40.249 CA AS13768 Cogeco Peer 1
    wordpress.org 66.155.40.250 CA AS13768 Cogeco Peer 1
    ns1.wordpress.org 198.181.116.10
    ns2.wordpress.org 198.181.117.10
    ns3.wordpress.org 192.0.74.10
    ns4.wordpress.org 192.0.75.10
    
    ----------
    repo.varnish-cache.org dnssec: yes registrar: http://www.domainnameshop.com
    expiry: Jul 23 2018 updated: Jun 14 2017
    repo.varnish-cache.org 176.58.90.154 GB AS36236 NetActuate Inc,
    ns2.hyp.net 151.249.125.2
    ns1.hyp.net 151.249.124.1
    ns3.hyp.net 151.249.126.3
    
    ----------
    repos.lax-noc.com dnssec: no registrar: http://www.wildwestdomains.com
    expiry: Aug 29 2020 updated: Aug 12 2015
    repos.lax-noc.com 198.55.111.5 US AS8100 QuadraNet Inc,
    ns1.lax-noc.com 204.152.222.2
    ns2.lax-noc.com 204.152.223.2
    
    ----------
    packages.atrpms.net dnssec: no registrar: http://www.gandi.net
    expiry: Nov 18 2019 updated: Nov 18 2014
    packages.atrpms.net 160.45.254.26 DE AS680 Verein zur Foerderung eines Deutschen Forschungsnetzes e.V.
    ns1.atrpms.net 160.45.254.18
    ns2.atrpms.net 160.45.254.19
    ns6.gandi.net 217.70.177.40
    
    ----------
    mirror.ventraip.net.au dnssec: no registrar:
    expiry: - updated: -
    mirror.ventraip.net.au 103.252.152.2 AU AS45638 SYNERGY WHOLESALE PTY LTD
    
    ----------
    mirrors.mit.edu dnssec: no registrar:
    expiry: - updated: Sep 06 2017
    mirrors.mit.edu 18.7.29.125 US AS3 Massachusetts Institute of Technology
    
    ----------
    mirrors.elrepo.org dnssec: no registrar: http://www.godaddy.com
    expiry: Mar 15 2018 updated: May 12 2016
    mirrors.elrepo.org 69.195.83.87 US AS46606 Unified Layer
    ns1.elrepo.org 74.102.29.58
    ns2.elrepo.org 74.102.29.62
    ns3.elrepo.org 92.27.241.245
    
    ----------
    mirrors.coreix.net dnssec: no registrar: http://www.godaddy.com
    expiry: Dec 14 2022 updated: May 07 2017
    mirrors.coreix.net 85.13.241.50 GB AS31708 Coreix Ltd
    authns1.coreix.net 193.26.222.1
    authns2.coreix.net 83.142.24.1
    authns3.coreix.net 85.13.252.2
    
    ----------
    mirror.rise.ph dnssec: no registrar:
    expiry: - updated: -
    mirror.rise.ph 43.226.6.79 PH AS63927 RISE ASIA TECHNOLOGY LIMITED
    
    ----------
    mirror.rackspace.com dnssec: no registrar: http://www.cscglobal.com/global/web/csc/digital-brand-services.html
    expiry: Aug 13 2024 updated: Jan 26 2015
    mirror.rackspace.com 72.4.120.219 US AS27357 Rackspace Hosting
    ns.rackspace.com 69.20.95.4
    ns2.rackspace.com 65.61.188.4
    
    ----------
    mirror.centos.org dnssec: no registrar: http://www.comlaude.com
    expiry: Dec 04 2017 updated: Nov 05 2016
    mirror.centos.org 198.15.78.42 US AS20454 SECURED SERVERS LLC
    ns1.centos.org 199.187.126.93
    ns3.centos.org 88.208.217.170
    ns4.centos.org 62.141.54.220
    
    ----------
    geolite.maxmind.com dnssec: yes registrar: http://www.domain.com
    expiry: Feb 24 2019 updated: Aug 07 2015
    geolite.maxmind.com 104.16.37.47 AS13335 Cloudflare Inc.
    geolite.maxmind.com 104.16.38.47 AS13335 Cloudflare Inc.
    ns0.dnsmadeeasy.com 208.94.148.2
    ns1.dnsmadeeasy.com 208.80.124.2
    ns2.dnsmadeeasy.com 208.80.126.2
    ns3.dnsmadeeasy.com 208.80.125.2
    ns4.dnsmadeeasy.com 208.80.127.2
    
    ----------
    elrepo.org dnssec: no registrar: http://www.godaddy.com
    expiry: Mar 15 2018 updated: May 12 2016
    elrepo.org 69.195.83.87 US AS46606 Unified Layer
    ns1.elrepo.org 74.102.29.58
    ns2.elrepo.org 74.102.29.62
    ns3.elrepo.org 92.27.241.245
    
    ----------
    download.savannah.gnu.org dnssec: no registrar: http://www.gandi.net
    expiry: Nov 23 2022 updated: Aug 04 2014
    download.savannah.gnu.org 208.118.235.200 US AS22989 Free Software Foundation Inc.,
    ns1.gnu.org 208.118.235.164
    ns2.gnu.org 87.98.253.102
    ns3.gnu.org 46.43.37.70
    
    ----------
    dev.mysql.com dnssec: yes registrar: http://www.markmonitor.com
    expiry: Feb 28 2021 updated: Jun 19 2017
    dev.mysql.com 137.254.60.11 US AS792 Oracle Corporation
    a1-198.akam.net 193.108.91.198
    a2-67.akam.net 95.100.174.67
    a22-64.akam.net 23.211.61.64
    ns1.p04.dynect.net 208.78.70.4
    ns2.p04.dynect.net 204.13.250.4
    ns3.p04.dynect.net 208.78.71.4
    
    ----------
    centos7.iuscommunity.org dnssec: yes registrar: www.cscglobal.com/global/web/csc/digital-brand-services.html
    expiry: Aug 31 2018 updated: Aug 27 2017
    centos7.iuscommunity.org 162.242.221.48 US AS27357 Rackspace Hosting
    ns2.rackspace.com 65.61.188.4
    ns.rackspace.com 69.20.95.4
    
    ----------
    centos6.iuscommunity.org dnssec: yes registrar: www.cscglobal.com/global/web/csc/digital-brand-services.html
    expiry: Aug 31 2018 updated: Aug 27 2017
    centos6.iuscommunity.org 162.242.221.48 US AS27357 Rackspace Hosting
    ns2.rackspace.com 65.61.188.4
    ns.rackspace.com 69.20.95.4
    
    ----------
    www.ftp.ne.jp dnssec: no registrar:
    expiry: - updated: -
    www.ftp.ne.jp 192.26.91.193 JP AS7667 KDDI R&D Laboratories INC.,
    
    ----------
    wftp.tu-chemnitz.de dnssec: no registrar:
    expiry: - updated: -
    wftp.tu-chemnitz.de 134.109.228.1 DE AS680 Verein zur Foerderung eines Deutschen Forschungsnetzes e.V.
    dns-3.dfn.de 193.174.75.58
    merkur.hrz.tu-chemnitz.de 134.109.133.38
    134.109.133.38
    2001:638:911:b01:134:109:133:38
    secondary.rrze.uni-erlangen.de 131.188.3.4
    venus.hrz.tu-chemnitz.de 134.109.133.39
    134.109.133.39
    2001:638:911:b01:134:109:133:39
    
    ----------
    rpmfind.net dnssec: no registrar: http://www.gandi.net
    expiry: Nov 24 2018 updated: Nov 16 2016
    rpmfind.net 195.220.108.108 FR AS2200 Renater
    a.dns.gandi.net 173.246.98.1
    b.dns.gandi.net 213.167.229.1
    c.dns.gandi.net 217.70.179.1
    
    ----------
    rh-mirror.linux.iastate.edu dnssec: no registrar:
    expiry: - updated: Nov 16 2016
    
    ----------
    mirrors.ircam.fr dnssec: yes registrar:
    date: invalid date ‘31/12/2017’
    expiry: updated: -
    mirrors.ircam.fr 129.102.1.37 FR AS2200 Renater
    maelzel.ircam.fr 129.102.1.10
    [129.102.1.10
    2001:660:3004:4000::10:53]
    nadia.ircam.fr 129.102.1.8
    [129.102.1.8
    2001:660:3004:4000::8:53]
    vaslav.ircam.fr 129.102.1.6
    [129.102.1.6
    2001:660:3004:4000::6:53]
    ns0.pasteur.fr 157.99.64.65
    [157.99.64.64]
    ns1.pasteur.fr 157.99.64.64
    [157.99.64.65]
    piston.ecp.fr 138.195.33.3
    [138.195.33.3]
    
    ----------
    mirror.sfo12.us.leaseweb.net dnssec: no registrar: http://www.key-systems.net
    expiry: Dec 20 2017 updated: Dec 21 2016
    mirror.sfo12.us.leaseweb.net 209.58.135.187 US AS7203 Leaseweb USA Inc.,
    ns1.leaseweb.nl 62.212.64.121
    ns4.leaseweb.net 62.212.78.199
    ns5.leaseweb.nl 83.149.64.123
    
    ----------
    mirror.cpsc.ucalgary.ca dnssec: no registrar:
    expiry: - updated: -
    mirror.cpsc.ucalgary.ca 136.159.2.91 CA AS33091 University of Calgary
    
    ----------
    luajit.org dnssec: no registrar:
    expiry: - updated: -
    luajit.org 163.172.177.144 FR AS12876 ONLINE S.A.S.
    
    ----------
    ftp.tu-chemnitz.de dnssec: yes registrar:
    expiry: - updated: -
    ftp.tu-chemnitz.de 134.109.228.1 DE AS680 Verein zur Foerderung eines Deutschen Forschungsnetzes e.V.
    dns-3.dfn.de 193.174.75.58
    merkur.hrz.tu-chemnitz.de 134.109.133.38
    134.109.133.38
    2001:638:911:b01:134:109:133:38
    secondary.rrze.uni-erlangen.de 131.188.3.4
    venus.hrz.tu-chemnitz.de 134.109.133.39
    134.109.133.39
    2001:638:911:b01:134:109:133:39
    
    ----------
    ftp-stud.fht-esslingen.de dnssec: yes registrar:
    expiry: - updated: -
    ftp-stud.fht-esslingen.de 129.143.116.10 DE AS553 Universitaet Stuttgart
    dns1.belwue.de 129.143.2.10
    dns1.hs-esslingen.de 134.108.44.53
    dns3.belwue.de 131.246.119.18
    
    ----------
    ftp2.lcpe.uni-sofia.bg dnssec: no registrar:
    expiry: - updated: -
    
    ----------
    epel.mirror.constant.com dnssec: no registrar: http://www.domain.com
    expiry: Jun 07 2018 updated: Aug 07 2015
    epel.mirror.constant.com 108.61.5.85 US AS20473 Choopa LLC,
    ns1.constant.com 68.232.191.191
    ns2.constant.com 68.232.191.232
    
    ----------
    download.postgresql.org dnssec: yes registrar: http://www.gandi.net
    expiry: Oct 21 2018 updated: Jan 18 2017
    download.postgresql.org 87.238.57.227 NO AS39029 Redpill Linpro AS
    download.postgresql.org 204.145.124.244 US AS46656 MeetMe Inc.,
    download.postgresql.org 217.196.149.55 AT AS5404 conova communications GmbH
    download.postgresql.org 174.143.35.246 US AS33070 Rackspace Hosting
    ns1.postgresql.org 204.145.124.245
    ns2.postgresql.org 174.143.35.199
    ns3.postgresql.org 217.196.149.51
    ns4.postgresql.org 87.238.57.235
    
    ----------
    dl.fedoraproject.org dnssec: no registrar: http://www.comlaude.com
    expiry: Sep 24 2018 updated: Sep 06 2017
    ns02.fedoraproject.org
    ns04.fedoraproject.org
    ns05.fedoraproject.org
    
    ----------
    debuginfo.centos.org dnssec: no registrar: http://www.comlaude.com
    expiry: Dec 04 2017 updated: Nov 05 2016
    debuginfo.centos.org 109.72.83.61 NL AS48635 PCextreme B.V.
    debuginfo.centos.org 67.219.148.138 US AS54455 MadeIT inc.
    ns1.centos.org 199.187.126.93
    ns3.centos.org 88.208.217.170
    ns4.centos.org 62.141.54.220
    
    ----------
    bitbucket.org dnssec: no registrar: http://www.enom.com
    expiry: Nov 23 2017 updated: May 17 2017
    bitbucket.org 104.192.143.3 US AS133530 ATLASSIAN PTY LTD
    bitbucket.org 104.192.143.2 US AS133530 ATLASSIAN PTY LTD
    bitbucket.org 104.192.143.1 US AS133530 ATLASSIAN PTY LTD
    ns-1305.awsdns-35.org 205.251.197.25
    ns-584.awsdns-09.net 205.251.194.72
    ns-1746.awsdns-26.co.uk 205.251.198.210
    ns-445.awsdns-55.com 205.251.193.189
    
    ----------
    archive.cs.uu.nl dnssec: yes registrar:
    expiry: - updated: -
    archive.cs.uu.nl 131.211.32.146 NL AS1103 SURFnet bv
    
    ----------
    zlib.net dnssec: no registrar: http://www.godaddy.com
    expiry: Mar 16 2022 updated: Feb 14 2017
    zlib.net 69.73.182.198 US AS3595 Global Net Access LLC,
    ns.nocdirect.com 69.73.188.14
    ns2.nocdirect.com 69.73.180.70
    
    ----------
    www.python.org dnssec: yes registrar: http://www.gandi.net
    expiry: Mar 28 2018 updated: Feb 25 2017
    www.python.org 151.101.0.223 US AS54113 Fastly
    www.python.org 151.101.64.223 US AS54113 Fastly
    www.python.org 151.101.128.223 US AS54113 Fastly
    www.python.org 151.101.192.223 US AS54113 Fastly
    ns3.p11.dynect.net 208.78.71.11
    ns1.p11.dynect.net 208.78.70.11
    ns2.p11.dynect.net 204.13.250.11
    ns4.p11.dynect.net 204.13.251.11
    
    ----------
    www.openssl.org dnssec: yes registrar: http://www.gandi.net
    expiry: Dec 19 2018 updated: Oct 20 2016
    www.openssl.org 104.93.160.186 US AS16625 Akamai Technologies Inc.,
    primary.lp.se 185.9.166.143
    secondary.lp.se 83.226.236.204
    ns.openssl.org 194.97.150.232
    
    ----------
    www.nlnetlabs.nl dnssec: no registrar:
    expiry: - updated: -
    www.nlnetlabs.nl 185.49.140.10 NL AS199664 Stichting NLnet Labs
    
    ----------
    www.mirrorservice.org dnssec: no registrar: http://www.easyspace.com
    expiry: Jul 08 2018 updated: Aug 12 2015
    www.mirrorservice.org 212.219.56.184 GB AS786 Jisc Services Limited
    ns1.bishnet.net 91.230.243.15
    dns0.mirrorservice.org 212.219.56.157
    dns2.mirrorservice.org 212.219.56.158
    
    ----------
    www.city-fan.org dnssec: yes registrar: http://www.register.com
    expiry: May 12 2018 updated: May 13 2017
    www.city-fan.org 212.56.100.58 GB AS6871 British Telecommunications PLC
    ns1.twisted4life.com 202.157.182.142
    goalkeeper.city-fan.org 212.56.100.58
    
    ----------
    mirror.yandex.ru dnssec: no registrar:
    expiry: - updated: -
    mirror.yandex.ru 213.180.204.183 RU AS13238 YANDEX LLC
    ns1.yandex.ru. 213.180.193.1
    213.180.193.1,
    2a02:6b8::1
    ns2.yandex.ru. 93.158.134.1
    93.158.134.1,
    2a02:6b8:0:1::1
    ns9.z5h64q92x9.net. 195.156.199.201
    
    ----------
    mirror.us.leaseweb.net dnssec: yes registrar: http://www.key-systems.net
    expiry: Dec 20 2017 updated: Dec 21 2016
    mirror.us.leaseweb.net 207.244.94.80 US AS30633 Leaseweb USA Inc.,
    ns1.leaseweb.nl 62.212.64.121
    ns4.leaseweb.net 62.212.78.199
    ns5.leaseweb.nl 83.149.64.123
    
    ----------
    mirrors.sonic.net dnssec: yes registrar: http://www.tucowsdomains.com
    expiry: Jul 25 2018 updated: Mar 31 2016
    mirrors.sonic.net 69.12.162.27 US AS7065 Sonoma Interconnect
    a.auth-ns.sonic.net 184.23.168.53
    b.auth-ns.sonic.net 184.173.92.18
    c.auth-ns.sonic.net 147.75.64.146
    d.auth-ns.sonic.net 147.75.192.219
    
    ----------
    mirror.aarnet.edu.au dnssec: no registrar:
    expiry: - updated: -
    mirror.aarnet.edu.au 202.158.214.106 AU AS7575 Australian Academic and Reasearch Network (AARNet)
    
    ----------
    launchpad.net dnssec: no registrar: http://www.markmonitor.com
    expiry: Jan 26 2018 updated: Oct 24 2016
    launchpad.net 91.189.89.223 GB AS41231 Canonical Ltd
    launchpad.net 91.189.89.222 GB AS41231 Canonical Ltd
    ns1.p27.dynect.net 208.78.70.27
    ns2.p27.dynect.net 204.13.250.27
    ns3.p27.dynect.net 208.78.71.27
    ns4.p27.dynect.net 204.13.251.27
    
    ----------
    gitorious.org dnssec: no registrar: http://www.name.com
    expiry: Dec 30 2017 updated: Sep 01 2016
    gitorious.org 64.13.172.37 US AS11404 vanoppen.biz LLC
    ns1.messagingengine.com 162.159.24.178
    ns2.messagingengine.com 162.159.25.191
    
    ----------
    gist.githubusercontent.com dnssec: yes registrar: http://www.markmonitor.com
    expiry: Feb 06 2018 updated: Jun 26 2017
    gist.githubusercontent.com 151.101.0.133 US AS54113 Fastly
    gist.githubusercontent.com 151.101.64.133 US AS54113 Fastly
    gist.githubusercontent.com 151.101.128.133 US AS54113 Fastly
    gist.githubusercontent.com 151.101.192.133 US AS54113 Fastly
    ns-1411.awsdns-48.org 205.251.197.131
    ns-181.awsdns-22.com 205.251.192.181
    ns-1867.awsdns-41.co.uk 205.251.199.75
    ns-596.awsdns-10.net 205.251.194.84
    ns1.p16.dynect.net 208.78.70.16
    ns2.p16.dynect.net 204.13.250.16
    ns3.p16.dynect.net 208.78.71.16
    ns4.p16.dynect.net 204.13.251.16
    
    ----------
    downloads.xiph.org dnssec: yes registrar: www.domain.com
    expiry: May 10 2018 updated: Apr 25 2017
    downloads.xiph.org 140.211.15.28 US AS3701 Network for Education and Research in Oregon (NERO)
    ns1.ghostscript.com 184.73.189.105
    ns1.xiph.org 140.211.166.32
    ns0.xiph.org 140.211.15.28
    
    ----------
    downloads.sourceforge.net dnssec: no registrar: http://www.tucowsdomains.com
    expiry: Aug 08 2018 updated: Jul 10 2017
    downloads.sourceforge.net 216.34.181.59 US AS3561 Savvis
    ns1.dnsmadeeasy.com 208.80.124.2
    ns2.dnsmadeeasy.com 208.80.126.2
    ns3.dnsmadeeasy.com 208.80.125.2
    ns4.dnsmadeeasy.com 208.80.127.2
    
    ----------
    dl.atrpms.net dnssec: no registrar: http://www.gandi.net
    expiry: Nov 18 2019 updated: Nov 18 2014
    dl.atrpms.net 160.45.254.22 DE AS680 Verein zur Foerderung eines Deutschen Forschungsnetzes e.V.
    ns1.atrpms.net 160.45.254.18
    ns2.atrpms.net 160.45.254.19
    ns6.gandi.net 217.70.177.40
    
    ----------
    buildlogs.centos.org dnssec: no registrar: http://www.comlaude.com
    expiry: Dec 04 2017 updated: Nov 05 2016
    buildlogs.centos.org 163.172.17.132 FR AS12876 ONLINE S.A.S.
    ns1.centos.org 199.187.126.93
    ns3.centos.org 88.208.217.170
    ns4.centos.org 62.141.54.220
    
    ----------
    www.rfxn.com dnssec: no registrar: http://www.enom.com
    expiry: May 30 2020 updated: Apr 19 2017
    www.rfxn.com 45.33.122.151 US AS63949 Linode LLC,
    cory.ns.cloudflare.com 173.245.59.93
    kara.ns.cloudflare.com 173.245.58.123
    
    ----------
    www.memcached.org dnssec: yes registrar: http://www.gandi.net
    expiry: Oct 18 2017 updated: Aug 09 2017
    www.memcached.org 173.255.253.96 US AS63949 Linode LLC,
    ns1.linode.com 162.159.27.72
    ns2.linode.com 162.159.24.39
    ns3.linode.com 162.159.25.129
    ns4.linode.com 162.159.26.99
    ns5.linode.com 162.159.24.25
    
    ----------
    www.joedog.org dnssec: no registrar: www.domain.com
    expiry: Dec 27 2017 updated: Dec 12 2016
    www.joedog.org 104.28.22.70 AS13335 Cloudflare Inc.
    www.joedog.org 104.28.23.70 AS13335 Cloudflare Inc.
    greg.ns.cloudflare.com 173.245.59.115
    jill.ns.cloudflare.com 173.245.58.122
    
    ----------
    storage.googleapis.com dnssec: yes registrar: http://www.markmonitor.com
    expiry: Jan 25 2018 updated: Dec 24 2016
    storage.googleapis.com 172.217.5.240 US AS15169 Google Inc.
    ns1.google.com 216.239.32.10
    ns2.google.com 216.239.34.10
    ns3.google.com 216.239.36.10
    ns4.google.com 216.239.38.10
    
    ----------
    sourceforge.net dnssec: no registrar: http://www.tucowsdomains.com
    expiry: Aug 08 2018 updated: Jul 10 2017
    sourceforge.net 216.34.181.60 US AS3561 Savvis
    ns1.dnsmadeeasy.com 208.80.124.2
    ns2.dnsmadeeasy.com 208.80.126.2
    ns3.dnsmadeeasy.com 208.80.125.2
    ns4.dnsmadeeasy.com 208.80.127.2
    
    ----------
    rvm.io dnssec: no registrar: www.name.com
    expiry: Dec 29 2017 updated: -
    rvm.io 151.101.128.196 US AS54113 Fastly
    rvm.io 151.101.0.196 US AS54113 Fastly
    rvm.io 151.101.192.196 US AS54113 Fastly
    rvm.io 151.101.64.196 US AS54113 Fastly
    ns2.dnsimple.com 162.159.25.4
    ns1.dnsimple.com 162.159.24.4
    ns3.dnsimple.com 162.159.26.4
    ns4.dnsimple.com 162.159.27.4
    
    ----------
    pypi.python.org dnssec: yes registrar: http://www.gandi.net
    expiry: Mar 28 2018 updated: Feb 25 2017
    pypi.python.org 151.101.0.223 US AS54113 Fastly
    pypi.python.org 151.101.64.223 US AS54113 Fastly
    pypi.python.org 151.101.128.223 US AS54113 Fastly
    pypi.python.org 151.101.192.223 US AS54113 Fastly
    ns3.p11.dynect.net 208.78.71.11
    ns1.p11.dynect.net 208.78.70.11
    ns2.p11.dynect.net 204.13.250.11
    ns4.p11.dynect.net 204.13.251.11
    
    ----------
    people.freebsd.org dnssec: yes registrar: http://www.gandi.net
    expiry: Sep 18 2018 updated: Aug 18 2017
    people.freebsd.org 96.47.72.75 US AS11403 The New York Internet Company
    ns1.isc-sns.net 72.52.71.1
    ns2.isc-sns.com 63.243.194.1
    ns3.isc-sns.info 63.243.194.1
    
    ----------
    packages.amplify.nginx.com dnssec: no registrar: http://www.directnic.com
    expiry: Dec 23 2018 updated: Jan 30 2017
    packages.amplify.nginx.com 52.9.219.142 US AS16509 Amazon.com Inc.,
    ns.nginx.com 206.251.255.60
    ns2.nginx.com 95.211.80.227
    
    ----------
    openbsd.mirror.garr.it dnssec: yes registrar:
    expiry: - updated: -
    openbsd.mirror.garr.it 90.147.164.69 IT AS137 Consortium GARR
    openbsd.mirror.garr.it 90.147.160.69 IT AS137 Consortium GARR
    
    ----------
    openbsd.cs.toronto.edu dnssec: no registrar:
    expiry: - updated: Sep 06 2017
    openbsd.cs.toronto.edu 128.100.17.240 CA AS239 University of Toronto
    
    ----------
    nodejs.org dnssec: no registrar: http://www.enom.com
    expiry: Sep 29 2018 updated: Nov 21 2016
    nodejs.org 104.20.23.46 AS13335 Cloudflare Inc.
    nodejs.org 104.20.22.46 AS13335 Cloudflare Inc.
    meera.ns.cloudflare.com 173.245.58.195
    pablo.ns.cloudflare.com 173.245.59.220
    
    ----------
    mirror.telepoint.bg dnssec: no registrar:
    expiry: - updated: -
    mirror.telepoint.bg 79.124.67.90 BG AS31083 Telepoint Ltd
    
    ----------
    mirrors.unb.br dnssec: no registrar:
    expiry: - updated: -
    mirrors.unb.br 164.41.105.6 BR AS21506 Fundação Universidade de Brasília
    dns1.unb.br 164.41.101.3
    164.41.101.3
    dns2.unb.br 164.41.101.6
    164.41.101.6
    dns3.unb.br 164.41.101.8
    164.41.101.8
    dns10.unb.br 191.36.236.4
    191.36.236.4
    
    ----------
    mirrors.ucr.ac.cr dnssec: no registrar:
    expiry: - updated: -
    mirrors.ucr.ac.cr 163.178.174.25 CR AS263683 Universidad de Costa Rica
    p.nic.cr 204.61.216.89
    (204.61.216.89,
    2001:500:14:6089:ad::1)
    dns.nic.cr 200.107.82.100
    (200.107.82.100,
    2001:13c7:7004:1::d100)
    a.lactld.org 200.0.68.10
    h.root-servers.net. b.root-servers.net.
    l.root-servers.net. c.root-servers.net.
    m.root-servers.net. k.root-servers.net.
    e.root-servers.net. d.root-servers.net.
    a.root-servers.net. j.root-servers.net.
    g.root-servers.net. f.root-servers.net.
    i.root-servers.net.
    de.nic.cr 194.0.11.107
    a.root-servers.net. b.root-servers.net.
    c.root-servers.net. d.root-servers.net.
    e.root-servers.net. f.root-servers.net.
    g.root-servers.net. h.root-servers.net.
    i.root-servers.net. j.root-servers.net.
    k.root-servers.net. l.root-servers.net.
    m.root-servers.net.
    ca1.nic.cr 185.159.197.100
    a.root-servers.net. b.root-servers.net.
    c.root-servers.net. d.root-servers.net.
    e.root-servers.net. f.root-servers.net.
    g.root-servers.net. h.root-servers.net.
    i.root-servers.net. j.root-servers.net.
    k.root-servers.net. l.root-servers.net.
    m.root-servers.net.
    ca2.nic.cr 185.159.198.100
    d.root-servers.net. c.root-servers.net.
    k.root-servers.net. f.root-servers.net.
    b.root-servers.net. h.root-servers.net.
    i.root-servers.net. e.root-servers.net.
    g.root-servers.net. a.root-servers.net.
    m.root-servers.net. j.root-servers.net.
    l.root-servers.net.
    
    ----------
    mirror.one.com dnssec: yes registrar: http://www.joker.com
    expiry: Feb 13 2022 updated: Nov 06 2014
    mirror.one.com 46.30.211.12 DK AS51468 One.com A/S
    a.b-one-dns.net 195.206.121.11
    b.b-one-dns.net 195.206.121.139
    
    ----------
    mirror.bytemark.co.uk dnssec: no registrar:
    expiry: - updated: -
    mirror.bytemark.co.uk 212.110.161.69 GB AS35425 Bytemark Limited
    
    ----------
    linxnet.com dnssec: yes registrar: http://www.godaddy.com
    expiry: Jan 25 2018 updated: Jan 26 2017
    linxnet.com 173.162.42.193 US AS7922 Comcast Cable Communications LLC,
    jimsun.linxnet.com 173.162.42.193
    puck.nether.net 204.42.254.5
    
    ----------
    kartolo.sby.datautama.net.id dnssec: no registrar:
    expiry: - updated: -
    kartolo.sby.datautama.net.id 123.255.202.74 ID AS24521 PT. DATA Utama Dinamika
    
    ----------
    git.xiph.org dnssec: yes registrar: www.domain.com
    expiry: May 10 2018 updated: Apr 25 2017
    git.xiph.org 140.211.15.28 US AS3701 Network for Education and Research in Oregon (NERO)
    ns1.ghostscript.com 184.73.189.105
    ns1.xiph.org 140.211.166.32
    ns0.xiph.org 140.211.15.28
    
    ----------
    get.rvm.io dnssec: no registrar: www.name.com
    expiry: Dec 29 2017 updated: -
    get.rvm.io 97.107.133.48 US AS63949 Linode LLC,
    ns2.dnsimple.com 162.159.25.4
    ns1.dnsimple.com 162.159.24.4
    ns3.dnsimple.com 162.159.26.4
    ns4.dnsimple.com 162.159.27.4
    
    ----------
    ftp.icm.edu.pl dnssec: no registrar:
    date: invalid date ‘        2004.02.09 12:23:27\r’
    expiry: - updated:
    ftp.icm.edu.pl 193.219.28.2 PL AS8664 University of Warsaw
    
    ----------
    ftp.hostserver.de dnssec: no registrar:
    expiry: - updated: -
    ftp.hostserver.de 217.31.80.35 DE AS29140 Hostserver GmbH
    ns1.hostweb.de 217.31.82.10
    ns2.hostweb.de 62.116.145.206
    ns4.hostweb.de 62.116.145.23
    
    ----------
    ftp.heanet.ie dnssec: no registrar:
    expiry: - updated: -
    ftp.heanet.ie 193.1.193.64 IE AS1213 HEAnet Limited
    ns.heanet.ie 193.1.193.194
    193.1.193.194
    2001:770:18:4::c101:c1c2
    auth-ns2.heanet.ie 193.1.247.198
    193.1.247.198
    2001:770:1c:4::c101:f7c6
    auth-ns3.heanet.ie 5.196.22.225
    5.196.22.225
    2001:41d0:52:900::871
    
    ----------
    ftp.fr.openbsd.org dnssec: yes registrar: http://www.godaddy.com
    expiry: Oct 11 2023 updated: May 19 2015
    ftp.fr.openbsd.org 145.238.209.46 FR AS2200 Renater
    ns1.superblock.net 207.158.15.119
    ns2.superblock.net 207.244.65.199
    c.ns.bsws.de 46.29.43.7
    a.ns.bsws.de 80.86.183.56
    b.ns.bsws.de 80.86.183.57
    dns1.openbsd.org 199.185.230.18
    dns2.openbsd.org 199.185.230.19
    
    ----------
    ftp.eu.openbsd.org dnssec: no registrar: http://www.godaddy.com
    expiry: Oct 11 2023 updated: May 19 2015
    ftp.eu.openbsd.org 193.156.26.18 NO AS224 UNINETT AS
    ns1.superblock.net 207.158.15.119
    ns2.superblock.net 207.244.65.199
    c.ns.bsws.de 46.29.43.7
    a.ns.bsws.de 80.86.183.56
    b.ns.bsws.de 80.86.183.57
    dns1.openbsd.org 199.185.230.18
    dns2.openbsd.org 199.185.230.19
    
    ----------
    ftp.bit.nl dnssec: no registrar:
    expiry: - updated: -
    ftp.bit.nl 213.136.12.213 NL AS12859 BIT BV
    
    ----------
    ftp3.usa.openbsd.org dnssec: yes registrar: http://www.godaddy.com
    expiry: Oct 11 2023 updated: May 19 2015
    ftp3.usa.openbsd.org 192.43.244.161 US AS194 University Corporation for Atmospheric Research
    ns1.superblock.net 207.158.15.119
    ns2.superblock.net 207.244.65.199
    c.ns.bsws.de 46.29.43.7
    a.ns.bsws.de 80.86.183.56
    b.ns.bsws.de 80.86.183.57
    dns1.openbsd.org 199.185.230.18
    dns2.openbsd.org 199.185.230.19
    
    ----------
    ftp2.eu.openbsd.org dnssec: no registrar: http://www.godaddy.com
    expiry: Oct 11 2023 updated: May 19 2015
    ftp2.eu.openbsd.org 137.208.8.135 AT AS1776 WU (Wirtschaftsuniversitaet Wien) - Vienna University of Economics and Business
    ns1.superblock.net 207.158.15.119
    ns2.superblock.net 207.244.65.199
    c.ns.bsws.de 46.29.43.7
    a.ns.bsws.de 80.86.183.56
    b.ns.bsws.de 80.86.183.57
    dns1.openbsd.org 199.185.230.18
    dns2.openbsd.org 199.185.230.19
    
    ----------
    download.suhosin.org dnssec: no registrar: http://www.antagus.de
    expiry: Aug 20 2018 updated: Aug 07 2017
    download.suhosin.org 51.15.48.120 NL AS12876 ONLINE S.A.S.
    ns1.first-ns.de 213.239.242.238
    robotns2.second-ns.de 213.133.105.6
    robotns3.second-ns.com 193.47.99.3
    
    ----------
    downloads.rclone.org dnssec: no registrar: http://www.tucows.com
    expiry: Feb 06 2018 updated: Apr 18 2017
    downloads.rclone.org 5.153.250.7 GB AS50957 MEMSET Ltd
    ns1.memset.com 89.200.136.74
    89.200.136.74
    ns2.memset.com 78.31.107.87
    78.31.107.87
    ns3.memset.com 31.222.188.99
    31.222.188.99
    
    ----------
    download.joedog.org dnssec: no registrar: www.domain.com
    expiry: Dec 27 2017 updated: Dec 12 2016
    download.joedog.org 52.24.24.107 US AS16509 Amazon.com Inc.,
    greg.ns.cloudflare.com 173.245.59.115
    jill.ns.cloudflare.com 173.245.58.122
    
    ----------
    download.configserver.com dnssec: no registrar: http://www.joker.com
    expiry: Jan 18 2019 updated: Oct 23 2016
    download.configserver.com 85.10.199.177 DE AS24940 Hetzner Online GmbH
    ns.ukwebs.net 109.70.137.73
    ns3.ukwebs.net 144.76.182.39
    
    ----------
    dl.google.com dnssec: yes registrar: http://www.markmonitor.com
    expiry: Sep 14 2020 updated: Jul 20 2011
    dl.google.com 172.217.5.238 US AS15169 Google Inc.
    ns1.google.com 216.239.32.10
    ns2.google.com 216.239.34.10
    ns3.google.com 216.239.36.10
    ns4.google.com 216.239.38.10
    
    ----------
    curl.haxx.se dnssec: yes registrar:
    expiry: - updated: May 13 2014
    curl.haxx.se 151.101.2.49 US AS54113 Fastly
    curl.haxx.se 151.101.66.49 US AS54113 Fastly
    curl.haxx.se 151.101.130.49 US AS54113 Fastly
    curl.haxx.se 151.101.194.49 US AS54113 Fastly
    ns1.haxx.se 80.67.6.50
    80.67.6.50
    vic20.blipp.com 192.195.142.21
    
    ----------
    chromium.googlesource.com dnssec: no registrar: http://www.markmonitor.com
    expiry: Oct 20 2017 updated: Sep 18 2016
    chromium.googlesource.com 209.85.144.82 US AS15169 Google Inc.
    ns1.google.com 216.239.32.10
    ns2.google.com 216.239.34.10
    ns3.google.com 216.239.36.10
    ns4.google.com 216.239.38.10
    
    ----------
    boringssl.googlesource.com dnssec: no registrar: http://www.markmonitor.com
    expiry: Oct 20 2017 updated: Sep 18 2016
    boringssl.googlesource.com 209.85.144.82 US AS15169 Google Inc.
    ns1.google.com 216.239.32.10
    ns2.google.com 216.239.34.10
    ns3.google.com 216.239.36.10
    ns4.google.com 216.239.38.10
    
    ----------
    archive.lbzip2.org dnssec: no registrar: http://www.netart-registrar.com
    expiry: Jun 20 2018 updated: Jun 17 2017
    archive.lbzip2.org 52.216.19.18 US AS16509 Amazon.com Inc.,
    ns-1369.awsdns-43.org 205.251.197.89
    ns-667.awsdns-19.net 205.251.194.155
    ns-1662.awsdns-15.co.uk 205.251.198.126
    ns-424.awsdns-53.com 205.251.193.168
    
    ----------
    api.pushover.net dnssec: no registrar: http://www.tucowsdomains.com
    expiry: Jan 02 2018 updated: Jul 02 2017
    api.pushover.net 108.59.13.232 US AS30633 Leaseweb USA Inc.
    api.pushover.net 162.216.6.175 US AS29802 HIVELOCITY VENTURES CORP
    ns-1210.awsdns-23.org 205.251.196.186
    ns-1731.awsdns-24.co.uk 205.251.198.195
    ns-332.awsdns-41.com 205.251.193.76
    ns-776.awsdns-33.net 205.251.195.8
    


    Switching tools/checkdomains.sh from 8.8.8.8 to 4.2.2.2, allows EPEL domain dns to resolve
    Code (Text):
    WHOIS_NAMESERVER='4.2.2.2'
    

    now shows resolved IP addresses for domain and nameservers
    Code (Text):
    dl.fedoraproject.org dnssec: no registrar: http://www.comlaude.com
    expiry: Sep 24 2018 updated: Sep 06 2017
    dl.fedoraproject.org 209.132.181.23 US AS31976 Red Hat Inc.,
    dl.fedoraproject.org 209.132.181.24 US AS31976 Red Hat Inc.,
    dl.fedoraproject.org 209.132.181.25 US AS31976 Red Hat Inc.,
    ns02.fedoraproject.org 152.19.134.139
    ns04.fedoraproject.org 209.132.181.17
    ns05.fedoraproject.org 85.236.55.10
    


    edit: ooh noticed the fedoraproject.org domain's DNS was last updated today September 6th, 2017 so maybe they messed up ? One possible scenario is I see their domain doesn't have DNSSEC enabled. If they enabled it, it could be a delay between nameservers responding to the updated DNSSEC configuration ? Just guessing :)
     
  3. eva2000

    eva2000 Administrator Staff Member

    54,601
    12,225
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,794
    Local Time:
    10:21 PM
    Nginx 1.27.x
    MariaDB 10.x/11.4+
    Looks like EPEL dns issues might be resolved for Google 8.8.8.8 dns querying
    Code (Text):
    dig @8.8.8.8 +short download.fedoraproject.org
    wildcard.fedoraproject.org.
    152.19.134.142
    67.219.144.68
    140.211.169.196
    140.211.169.206
    174.141.234.172
    185.141.165.254
    152.19.134.198
    8.43.85.67
    209.132.181.15
    209.132.181.16
    

    Though EPEL domain DNS old IPs 152.19.134.198, 67.203.2.67 and 66.35.62.162 are gone replaced with 67.219.144.68, 185.141.165.254 and 174.141.234.172

    Hopefully, once my tools/checkdomains.sh script is complete you can setup alert notifications when a download/yum domain that Centmin Mod LEMP stack relies on changes or modifies it's DNS configuration or changes it whois information. This will be an added safe guard against compromised domain DNS issues.
     
  4. eva2000

    eva2000 Administrator Staff Member

    54,601
    12,225
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,794
    Local Time:
    10:21 PM
    Nginx 1.27.x
    MariaDB 10.x/11.4+
Thread Status:
Not open for further replies.