DNS and Checkpoint

[majkl]

Hi!

Does anybody knows what is wrong with DNS resolution for checkpoint.com.

Record expires on 30-Mar-2012.
Record created on 29-Mar-1994.
Database last updated on 22-Dec-2006 05:53:06 EST.

They changed something. but now DNS resolution doesn't work.

Any clues?

Majkl

[chillyjim]

When I called the TAC they told me they have a major network outage.

[larstr]

I noticed that too and tried sending a post about it to the mailing list.

yeah right, as if it would go through when the mailing list also has been hit ;(

I noticed that I could reach www.checkpoint.com through the ip address. I really needed to use the usercenter, but I don't have the ip address....

Lars

[chillyjim]

Everything seems to be back now.

[RayPesek]

Not here. usercenter.checkpoint.com redirects to the login page OK but then I get a 404. SecureKnowledge lets me login but when I run an advanced query limited by date:
----------------------
The SecureKnowledge server is temporarily unavailable.
Please try your search again later.

We apologize for any inconvenience this may cause. We are currently working on the problem and should have the server back online momentarily.

Thank you for your patience.
----------------------
Ray

[RayPesek]

DNS Report isn't too happy with some of their config and they've made at least five DNS changes already today: http://www.dnsreport.com/tools/dnsre...checkpoint.com

A check on zonelabs.com http://www.dnsreport.com/tools/dnsre...n=zonelabs.com returns this: "A timeout occurred getting the NS records from your nameservers! None of your nameservers responded fast enough. They are probably down or unreachable. I can't continue since your nameservers aren't responding."

There was more to the error message about a bug with Watchguard firewalls, but I think we can rule that out. :-)

Ray

[RayPesek]

Odd. I'm seeing these serial numbers now:
216.228.148.29: 2006122201
194.29.32.199: 2006122204

I am sure the latter was 05 before. If they set the serial number back, everyone will ignore whatever changes were made.

Ray

[RayPesek]

Still down. Wow. That's pretty unbelievable for this day and age for any company. The authoritative zone serial numbers between the two are a day different and about eight versions if my counting is correct.

They're also reporting different NS records:

> set q=soa
> checkpoint.com
Server: dyn32-199.checkpoint.com
Address: 194.29.32.199

checkpoint.com
primary name server = checkpoint.com
responsible mail addr = system.checkpoint.com
serial = 2006122304
refresh = 10800 (3 hours)
retry = 3600 (1 hour)
expire = 604800 (7 days)
default TTL = 86400 (1 day)
checkpoint.com nameserver = ns6.checkpoint.com
checkpoint.com nameserver = ns8.checkpoint.com
ns6.checkpoint.com internet address = 194.29.32.199
ns8.checkpoint.com internet address = 216.228.148.29

> server 216.228.148.29
Default Server: D8E4941D.ts.checkpoint.com
Address: 216.228.148.29

> checkpoint.com
Server: D8E4941D.ts.checkpoint.com
Address: 216.228.148.29

checkpoint.com
primary name server = checkpoint.com
responsible mail addr = system.checkpoint.com
serial = 2006122201
refresh = 10800 (3 hours)
retry = 3600 (1 hour)
expire = 604800 (7 days)
default TTL = 86400 (1 day)
checkpoint.com nameserver = ns4.checkpoint.com
checkpoint.com nameserver = ns1.checkpoint.com
ns1.checkpoint.com internet address = 194.29.32.197
ns4.checkpoint.com internet address = 216.228.148.26

Ray