Incorrect DNS information

2009-10-13

. SE (The Internet Infrastructure Foundation) sent out an incorrect zone file Monday October 12 at 21.45, in connection with a planned maintenance work. The cause was an incorrect software update, which, despite our testing procedures were not detected. Thanks to well-functioning surveillance system .SE discovered the error immediately and a new file with the DNS data (zone file) was produced and distributed within one hour.

To minimize the impact on the availability of .se domains, we chose to produce and distribute a zone file that lacked proper signatures for DNSSEC to quickly come out with the correct DNS information. Subsequently, we generated immediately initiated a zone file according to normal procedures. It was fully distributed 01:00 am.

The false information that was sent out affected accessibility to all .se domains for a short time. However, there may still be some name servers that have not changed out of misinformation against the real.

BIND resolver can be forced to refresh the .SE-zone by issuing the command “rndc flush” or by doing a restart. Similar commands exist for other resolver softwares.

Right now is an ongoing internal investigation to find out the cause of the faulty software update so that we can improve our procedures further.

For more information, please contact:
Maria Ekelund, head of PR and information at .SE
Phone: +46-8-452 35 27, +46-70-777 44 87
E-mail: maria.ekelund@iis.se