nlm.gov zone: The server(s) responded over TCP with a malformed response or with an invalid RCODE. (140.142.5.5, 2607:4000:200:42::5)
nlm.gov zone: The server(s) responded over UDP with a malformed response or with an invalid RCODE. (140.142.5.5, 2607:4000:200:42::5)
nlm.gov/A: The response had an invalid RCODE (SERVFAIL). (140.142.5.5, 2607:4000:200:42::5, UDP_-_NOEDNS_)
nlm.gov/AAAA: The response had an invalid RCODE (SERVFAIL). (140.142.5.5, 2607:4000:200:42::5, UDP_-_NOEDNS_)
nlm.gov/DNSKEY: The response had an invalid RCODE (SERVFAIL). (140.142.5.5, 2607:4000:200:42::5, UDP_-_EDNS0_512_D_KN, UDP_-_NOEDNS_)
nlm.gov/MX: The response had an invalid RCODE (SERVFAIL). (140.142.5.5, 2607:4000:200:42::5, UDP_-_EDNS0_512_D_KN, UDP_-_NOEDNS_)
nlm.gov/NS: The response had an invalid RCODE (SERVFAIL). (140.142.5.5, 2607:4000:200:42::5, UDP_-_NOEDNS_)
nlm.gov/SOA: The response had an invalid RCODE (SERVFAIL). (140.142.5.5, 2607:4000:200:42::5, TCP_-_NOEDNS_)
nlm.gov/SOA: The response had an invalid RCODE (SERVFAIL). (140.142.5.5, 2607:4000:200:42::5, UDP_-_NOEDNS_, UDP_-_NOEDNS__0x20)
nlm.gov/TXT: The response had an invalid RCODE (SERVFAIL). (140.142.5.5, 2607:4000:200:42::5, UDP_-_NOEDNS_)
Warnings (28)
RRSIG nlm.gov/A alg 7, id 17057: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG nlm.gov/AAAA alg 7, id 17057: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG nlm.gov/DNSKEY alg 7, id 11374: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG nlm.gov/DNSKEY alg 7, id 11374: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG nlm.gov/DNSKEY alg 7, id 11374: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG nlm.gov/DNSKEY alg 7, id 17057: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG nlm.gov/DNSKEY alg 7, id 17057: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG nlm.gov/DNSKEY alg 7, id 17057: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG nlm.gov/DNSKEY alg 7, id 45658: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG nlm.gov/DNSKEY alg 7, id 45658: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG nlm.gov/DNSKEY alg 7, id 45658: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG nlm.gov/MX alg 7, id 17057: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG nlm.gov/NS alg 7, id 17057: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG nlm.gov/SOA alg 7, id 17057: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG nlm.gov/TXT alg 7, id 17057: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
gov to nlm.gov: Authoritative AAAA records exist for lhcns1.nlm.nih.gov, but there are no corresponding AAAA glue records.
gov to nlm.gov: Authoritative AAAA records exist for lhcns2.nlm.nih.gov, but there are no corresponding AAAA glue records.
gov/DS (alg 8, id 7698): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1).
gov/DS (alg 8, id 7698): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1).
gov/DS (alg 8, id 7698): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset.
gov/DS (alg 8, id 7698): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset.
nlm.gov/DNSKEY (alg 7, id 11374): No response was received until the UDP payload size was decreased, indicating that the server might be attempting to send a payload that exceeds the path maximum transmission unit (PMTU) size. (2607:f220:41e:7055::72, 2607:f220:41e:7055::128, UDP_-_EDNS0_4096_D_KN)
nlm.gov/DNSKEY (alg 7, id 17057): No response was received until the UDP payload size was decreased, indicating that the server might be attempting to send a payload that exceeds the path maximum transmission unit (PMTU) size. (2607:f220:41e:7055::72, 2607:f220:41e:7055::128, UDP_-_EDNS0_4096_D_KN)
nlm.gov/DNSKEY (alg 7, id 45658): No response was received until the UDP payload size was decreased, indicating that the server might be attempting to send a payload that exceeds the path maximum transmission unit (PMTU) size. (2607:f220:41e:7055::72, 2607:f220:41e:7055::128, UDP_-_EDNS0_4096_D_KN)
nlm.gov/DS (alg 7, id 45658): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1).
nlm.gov/DS (alg 7, id 45658): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1).
nlm.gov/DS (alg 7, id 45658): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset.
nlm.gov/DS (alg 7, id 45658): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset.