updates.checkpoint.com IPv6 problems

[Tobias_Moritz]

Hello Community,

is anyone aware of the IPv6 DNS problem, updates.checkpoint.com suffers since a few days?

This is really annoying because it's makes our automatic updates (for IPS e.g) unreliable in an Dual Stack environment.

Details:

Do a query to a DNS resolver of your choice and ask for an A record and for an AAAA record for updates.checkpoint.com.

When asking for an A record, you will always get an answer (and you will get the answer fast). The answer will be the CNAME updates.g01.checkpoint.com and almost all resolvers will provide you the A record for this CNAME in the same answer.

When asking for an AAAA record, you will sometimes get an answer and sometimes not. The answer (if you get any) will be the CNAME updates.g01.checkpoint.com and almost all resolvers will provide you the AAAA record for this CNAME in the same answer. If it is not working, depending on the current cache status of the resolver you asked, it can take a quite long time before you get the SERVFAIL answer. So there are three options for an IPv6 DNS query:

• Correct answer (you will get an AAAA record in the end)
• Wrong answer immediatly (you will get an NXDOMAIN from your resolvers cache)
• Wrong answer after a long waittime (in my cases sometimes more than the 20sec my dig was waiting)

I've tried this not only with our own resolvers, but also with the public ones from Level 3 (4.2.2.1) and Google (8.8.8.8). Doing this, I can say this is not a problem on our side.

Please see the following tests I did today (timestamps included). You will see sometimes it is working, sometimes not.

Click to Expand

[Expert@obscured:0]# dig -t AAAA updates.checkpoint.com

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-25.P1.11.cp991310011 <<>> -t AAAA updates.checkpoint.com
;; global options: printcmd
;; connection timed out; no servers could be reached
[Expert@obscured:0]# dig -t A updates.checkpoint.com

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-25.P1.11.cp991310011 <<>> -t A updates.checkpoint.com
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 37771
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:
;updates.checkpoint.com. IN A

;; ANSWER SECTION:
updates.checkpoint.com. 126 IN CNAME updates.g01.checkpoint.com.
updates.g01.checkpoint.com. 30 IN A 209.87.209.87

;; AUTHORITY SECTION:
g01.checkpoint.com. 169 IN NS gns3.checkpoint.com.
g01.checkpoint.com. 169 IN NS gns1.checkpoint.com.

;; ADDITIONAL SECTION:
gns1.checkpoint.com. 300 IN A 194.29.39.5
gns3.checkpoint.com. 300 IN A 209.87.211.190

;; Query time: 173 msec
;; SERVER: 192.168.0.111#53(192.168.0.111)
;; WHEN: Mon Apr 8 11:42:55 2019
;; MSG SIZE rcvd: 152

[Expert@obscured:0]# dig -t AAAA updates.checkpoint.com

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-25.P1.11.cp991310011 <<>> -t AAAA updates.checkpoint.com
;; global options: printcmd
;; connection timed out; no servers could be reached

[Expert@obscured:0]# dig -t A updates.checkpoint.com

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-25.P1.11.cp991310011 <<>> -t A updates.checkpoint.com
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 63707
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 2, ADDITIONAL: 0

;; QUESTION SECTION:
;updates.checkpoint.com. IN A

;; ANSWER SECTION:
updates.checkpoint.com. 300 IN CNAME updates.g01.checkpoint.com.
updates.g01.checkpoint.com. 30 IN A 209.87.209.87

;; AUTHORITY SECTION:
g01.checkpoint.com. 300 IN NS gns3.checkpoint.com.
g01.checkpoint.com. 300 IN NS gns1.checkpoint.com.

;; Query time: 290 msec
;; SERVER: 192.168.0.111#53(192.168.0.111)
;; WHEN: Mon Apr 8 11:52:20 2019
;; MSG SIZE rcvd: 120

[Expert@obscured:0]# dig @8.8.8.8 -t A updates.checkpoint.com

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-25.P1.11.cp991310011 <<>> @8.8.8.8 -t A updates.checkpoint.com
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 2724
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;updates.checkpoint.com. IN A

;; ANSWER SECTION:
updates.checkpoint.com. 81 IN CNAME updates.g01.checkpoint.com.
updates.g01.checkpoint.com. 29 IN A 209.87.209.87

;; Query time: 92 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Mon Apr 8 11:52:26 2019
;; MSG SIZE rcvd: 82

[Expert@obscured:0]# dig @8.8.8.8 -t AAAA updates.checkpoint.com

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-25.P1.11.cp991310011 <<>> @8.8.8.8 -t AAAA updates.checkpoint.com
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 65158
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;updates.checkpoint.com. IN AAAA

;; Query time: 21 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Mon Apr 8 11:52:31 2019
;; MSG SIZE rcvd: 40

[Expert@obscured:0]# dig @8.8.8.8 -t AAAA updates.checkpoint.com

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-25.P1.11.cp991310011 <<>> @8.8.8.8 -t AAAA updates.checkpoint.com
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 18465
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;updates.checkpoint.com. IN AAAA

;; Query time: 2025 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Mon Apr 8 11:52:34 2019
;; MSG SIZE rcvd: 40

[Expert@obscured:0]# dig @8.8.8.8 -t AAAA updates.checkpoint.com

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-25.P1.11.cp991310011 <<>> @8.8.8.8 -t AAAA updates.checkpoint.com
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 48562
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;updates.checkpoint.com. IN AAAA

;; Query time: 21 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Mon Apr 8 11:52:36 2019
;; MSG SIZE rcvd: 40

[Expert@obscured:0]# dig @8.8.8.8 -t AAAA updates.checkpoint.com

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-25.P1.11.cp991310011 <<>> @8.8.8.8 -t AAAA updates.checkpoint.com
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 61827
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;updates.checkpoint.com. IN AAAA

;; Query time: 2025 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Mon Apr 8 11:52:38 2019
;; MSG SIZE rcvd: 40

[Expert@obscured:0]# dig @4.2.2.1 -t AAAA updates.checkpoint.com

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-25.P1.11.cp991310011 <<>> @4.2.2.1 -t AAAA updates.checkpoint.com
; (1 server found)
;; global options: printcmd
;; connection timed out; no servers could be reached
[Expert@obscured:0]# dig @4.2.2.1 -t AAAA updates.checkpoint.com

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-25.P1.11.cp991310011 <<>> @4.2.2.1 -t AAAA updates.checkpoint.com
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 23084
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;updates.checkpoint.com. IN AAAA

;; Query time: 12 msec
;; SERVER: 4.2.2.1#53(4.2.2.1)
;; WHEN: Mon Apr 8 11:53:06 2019
;; MSG SIZE rcvd: 40

[Expert@obscured:0]# dig @4.2.2.1 -t AAAA updates.checkpoint.com

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-25.P1.11.cp991310011 <<>> @4.2.2.1 -t AAAA updates.checkpoint.com
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 26514
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;updates.checkpoint.com. IN AAAA

;; Query time: 3662 msec
;; SERVER: 4.2.2.1#53(4.2.2.1)
;; WHEN: Mon Apr 8 11:53:16 2019
;; MSG SIZE rcvd: 40

[Expert@obscured:0]# dig @4.2.2.1 -t AAAA updates.checkpoint.com

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-25.P1.11.cp991310011 <<>> @4.2.2.1 -t AAAA updates.checkpoint.com
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 50896
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;updates.checkpoint.com. IN AAAA

;; ANSWER SECTION:
updates.checkpoint.com. 93 IN CNAME updates.g01.checkpoint.com.
updates.g01.checkpoint.com. 30 IN AAAA 2620:0:2a01:3::1a11

;; Query time: 106 msec
;; SERVER: 4.2.2.1#53(4.2.2.1)
;; WHEN: Mon Apr 8 12:00:59 2019
;; MSG SIZE rcvd: 94

[Expert@obscured:0]# dig @4.2.2.1 -t AAAA updates.checkpoint.com

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-25.P1.11.cp991310011 <<>> @4.2.2.1 -t AAAA updates.checkpoint.com
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 65149
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;updates.checkpoint.com. IN AAAA

;; ANSWER SECTION:
updates.checkpoint.com. 193 IN CNAME updates.g01.checkpoint.com.
updates.g01.checkpoint.com. 17 IN AAAA 2620:0:2a01:3::1a11

;; Query time: 127 msec
;; SERVER: 4.2.2.1#53(4.2.2.1)
;; WHEN: Mon Apr 8 12:01:01 2019
;; MSG SIZE rcvd: 94

[Expert@obscured:0]# dig @4.2.2.1 -t AAAA updates.checkpoint.com

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-25.P1.11.cp991310011 <<>> @4.2.2.1 -t AAAA updates.checkpoint.com
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 12458
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;updates.checkpoint.com. IN AAAA

;; ANSWER SECTION:
updates.checkpoint.com. 192 IN CNAME updates.g01.checkpoint.com.
updates.g01.checkpoint.com. 16 IN AAAA 2620:0:2a01:3::1a11

;; Query time: 166 msec
;; SERVER: 4.2.2.1#53(4.2.2.1)
;; WHEN: Mon Apr 8 12:01:02 2019
;; MSG SIZE rcvd: 94

[Expert@obscured:0]# dig @4.2.2.1 -t AAAA updates.checkpoint.com

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-25.P1.11.cp991310011 <<>> @4.2.2.1 -t AAAA updates.checkpoint.com
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 54578
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;updates.checkpoint.com. IN AAAA

;; ANSWER SECTION:
updates.checkpoint.com. 89 IN CNAME updates.g01.checkpoint.com.
updates.g01.checkpoint.com. 26 IN AAAA 2620:0:2a01:3::1a11

;; Query time: 15 msec
;; SERVER: 4.2.2.1#53(4.2.2.1)
;; WHEN: Mon Apr 8 12:01:03 2019
;; MSG SIZE rcvd: 94

[Expert@obscured:0]# dig @4.2.2.1 -t AAAA updates.checkpoint.com

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-25.P1.11.cp991310011 <<>> @4.2.2.1 -t AAAA updates.checkpoint.com
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 60294
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;updates.checkpoint.com. IN AAAA

;; ANSWER SECTION:
updates.checkpoint.com. 263 IN CNAME updates.g01.checkpoint.com.
updates.g01.checkpoint.com. 30 IN AAAA 2001:67c:2840:5::20

;; Query time: 68 msec
;; SERVER: 4.2.2.1#53(4.2.2.1)
;; WHEN: Mon Apr 8 12:01:04 2019
;; MSG SIZE rcvd: 94

[Expert@obscured:0]# dig @4.2.2.1 -t AAAA updates.checkpoint.com

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-25.P1.11.cp991310011 <<>> @4.2.2.1 -t AAAA updates.checkpoint.com
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 22040
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;updates.checkpoint.com. IN AAAA

;; ANSWER SECTION:
updates.checkpoint.com. 87 IN CNAME updates.g01.checkpoint.com.
updates.g01.checkpoint.com. 24 IN AAAA 2620:0:2a01:3::1a11

;; Query time: 13 msec
;; SERVER: 4.2.2.1#53(4.2.2.1)
;; WHEN: Mon Apr 8 12:01:05 2019
;; MSG SIZE rcvd: 94

[Expert@obscured:0]# dig @4.2.2.1 -t AAAA updates.checkpoint.com

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-25.P1.11.cp991310011 <<>> @4.2.2.1 -t AAAA updates.checkpoint.com
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 43017
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;updates.checkpoint.com. IN AAAA

;; ANSWER SECTION:
updates.checkpoint.com. 187 IN CNAME updates.g01.checkpoint.com.
updates.g01.checkpoint.com. 11 IN AAAA 2620:0:2a01:3::1a11

;; Query time: 12 msec
;; SERVER: 4.2.2.1#53(4.2.2.1)
;; WHEN: Mon Apr 8 12:01:07 2019
;; MSG SIZE rcvd: 94

[Expert@obscured:0]# dig @4.2.2.1 -t AAAA updates.checkpoint.com

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-25.P1.11.cp991310011 <<>> @4.2.2.1 -t AAAA updates.checkpoint.com
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 25130
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;updates.checkpoint.com. IN AAAA

;; Query time: 1189 msec
;; SERVER: 4.2.2.1#53(4.2.2.1)
;; WHEN: Mon Apr 8 12:01:09 2019
;; MSG SIZE rcvd: 40

[Expert@obscured:0]# dig @4.2.2.1 -t AAAA updates.checkpoint.com

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-25.P1.11.cp991310011 <<>> @4.2.2.1 -t AAAA updates.checkpoint.com
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 59042
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;updates.checkpoint.com. IN AAAA

;; ANSWER SECTION:
updates.checkpoint.com. 84 IN CNAME updates.g01.checkpoint.com.
updates.g01.checkpoint.com. 1 IN AAAA 2620:0:2a01:3::1a11

;; Query time: 13 msec
;; SERVER: 4.2.2.1#53(4.2.2.1)
;; WHEN: Mon Apr 8 12:01:09 2019
;; MSG SIZE rcvd: 94

[Expert@obscured:0]# dig @4.2.2.1 -t AAAA updates.checkpoint.com

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-25.P1.11.cp991310011 <<>> @4.2.2.1 -t AAAA updates.checkpoint.com
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 53783
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;updates.checkpoint.com. IN AAAA

;; ANSWER SECTION:
updates.checkpoint.com. 257 IN CNAME updates.g01.checkpoint.com.
updates.g01.checkpoint.com. 24 IN AAAA 2001:67c:2840:5::20

;; Query time: 13 msec
;; SERVER: 4.2.2.1#53(4.2.2.1)
;; WHEN: Mon Apr 8 12:01:10 2019
;; MSG SIZE rcvd: 94

[Expert@obscured:0]# dig @4.2.2.1 -t AAAA updates.checkpoint.com

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-25.P1.11.cp991310011 <<>> @4.2.2.1 -t AAAA updates.checkpoint.com
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 30749
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;updates.checkpoint.com. IN AAAA

;; ANSWER SECTION:
updates.checkpoint.com. 176 IN CNAME updates.g01.checkpoint.com.
updates.g01.checkpoint.com. 1 IN AAAA 2620:0:2a01:3::1a11

;; Query time: 12 msec
;; SERVER: 4.2.2.1#53(4.2.2.1)
;; WHEN: Mon Apr 8 12:01:18 2019
;; MSG SIZE rcvd: 94

[Expert@obscured:0]# dig @4.2.2.1 -t AAAA updates.checkpoint.com

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-25.P1.11.cp991310011 <<>> @4.2.2.1 -t AAAA updates.checkpoint.com
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 61655
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;updates.checkpoint.com. IN AAAA

;; Query time: 12 msec
;; SERVER: 4.2.2.1#53(4.2.2.1)
;; WHEN: Mon Apr 8 12:01:23 2019
;; MSG SIZE rcvd: 40

[Expert@obscured:0]# dig @4.2.2.1 -t AAAA updates.checkpoint.com

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-25.P1.11.cp991310011 <<>> @4.2.2.1 -t AAAA updates.checkpoint.com
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 30597
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;updates.checkpoint.com. IN AAAA

;; ANSWER SECTION:
updates.checkpoint.com. 67 IN CNAME updates.g01.checkpoint.com.
updates.g01.checkpoint.com. 4 IN AAAA 2620:0:2a01:3::1a11

;; Query time: 13 msec
;; SERVER: 4.2.2.1#53(4.2.2.1)
;; WHEN: Mon Apr 8 12:01:25 2019
;; MSG SIZE rcvd: 94

[Expert@obscured:0]# dig @4.2.2.1 -t AAAA updates.checkpoint.com

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-25.P1.11.cp991310011 <<>> @4.2.2.1 -t AAAA updates.checkpoint.com
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 38988
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;updates.checkpoint.com. IN AAAA

;; ANSWER SECTION:
updates.checkpoint.com. 167 IN CNAME updates.g01.checkpoint.com.
updates.g01.checkpoint.com. 1 IN AAAA 2620:0:2a01:3::1a11

;; Query time: 13 msec
;; SERVER: 4.2.2.1#53(4.2.2.1)
;; WHEN: Mon Apr 8 12:01:27 2019
;; MSG SIZE rcvd: 94

[Expert@obscured:0]# dig @8.8.8.8 -t AAAA updates.checkpoint.com

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-25.P1.11.cp991310011 <<>> @8.8.8.8 -t AAAA updates.checkpoint.com
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 43867
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;updates.checkpoint.com. IN AAAA

;; ANSWER SECTION:
updates.checkpoint.com. 18 IN CNAME updates.g01.checkpoint.com.
updates.g01.checkpoint.com. 29 IN AAAA 2620:0:2a01:3::1a11

;; Query time: 86 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Mon Apr 8 12:01:34 2019
;; MSG SIZE rcvd: 94

[Expert@obscured:0]# dig @8.8.8.8 -t AAAA updates.checkpoint.com

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-25.P1.11.cp991310011 <<>> @8.8.8.8 -t AAAA updates.checkpoint.com
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 52684
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;updates.checkpoint.com. IN AAAA

;; ANSWER SECTION:
updates.checkpoint.com. 17 IN CNAME updates.g01.checkpoint.com.
updates.g01.checkpoint.com. 28 IN AAAA 2620:0:2a01:3::1a11

;; Query time: 22 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Mon Apr 8 12:01:35 2019
;; MSG SIZE rcvd: 94

[Expert@obscured:0]# dig @8.8.8.8 -t AAAA updates.checkpoint.com

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-25.P1.11.cp991310011 <<>> @8.8.8.8 -t AAAA updates.checkpoint.com
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 22684
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;updates.checkpoint.com. IN AAAA

;; ANSWER SECTION:
updates.checkpoint.com. 17 IN CNAME updates.g01.checkpoint.com.
updates.g01.checkpoint.com. 28 IN AAAA 2620:0:2a01:3::1a11

;; Query time: 22 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Mon Apr 8 12:01:35 2019
;; MSG SIZE rcvd: 94

[Expert@obscured:0]# dig @8.8.8.8 -t AAAA updates.checkpoint.com

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-25.P1.11.cp991310011 <<>> @8.8.8.8 -t AAAA updates.checkpoint.com
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 64877
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;updates.checkpoint.com. IN AAAA

;; ANSWER SECTION:
updates.checkpoint.com. 32 IN CNAME updates.g01.checkpoint.com.
updates.g01.checkpoint.com. 29 IN AAAA 2620:0:2a01:3::1a11

;; Query time: 95 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Mon Apr 8 12:01:36 2019
;; MSG SIZE rcvd: 94

[Expert@obscured:0]# dig @8.8.8.8 -t AAAA updates.checkpoint.com

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-25.P1.11.cp991310011 <<>> @8.8.8.8 -t AAAA updates.checkpoint.com
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 47347
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;updates.checkpoint.com. IN AAAA

;; ANSWER SECTION:
updates.checkpoint.com. 278 IN CNAME updates.g01.checkpoint.com.
updates.g01.checkpoint.com. 29 IN AAAA 2620:0:2a01:3::1a11

;; Query time: 88 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Mon Apr 8 12:01:37 2019
;; MSG SIZE rcvd: 94

[Expert@obscured:0]# dig @8.8.8.8 -t AAAA updates.checkpoint.com

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-25.P1.11.cp991310011 <<>> @8.8.8.8 -t AAAA updates.checkpoint.com
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 59419
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;updates.checkpoint.com. IN AAAA

;; ANSWER SECTION:
updates.checkpoint.com. 276 IN CNAME updates.g01.checkpoint.com.
updates.g01.checkpoint.com. 27 IN AAAA 2620:0:2a01:3::1a11

;; Query time: 21 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Mon Apr 8 12:01:39 2019
;; MSG SIZE rcvd: 94

[Expert@obscured:0]# dig @8.8.8.8 -t AAAA updates.checkpoint.com

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-25.P1.11.cp991310011 <<>> @8.8.8.8 -t AAAA updates.checkpoint.com
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 28586
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;updates.checkpoint.com. IN AAAA

;; ANSWER SECTION:
updates.checkpoint.com. 190 IN CNAME updates.g01.checkpoint.com.
updates.g01.checkpoint.com. 29 IN AAAA 2620:0:2a01:3::1a11

;; Query time: 118 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Mon Apr 8 12:01:40 2019
;; MSG SIZE rcvd: 94

[Expert@obscured:0]# dig @8.8.8.8 -t AAAA updates.checkpoint.com

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-25.P1.11.cp991310011 <<>> @8.8.8.8 -t AAAA updates.checkpoint.com
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 45148
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;updates.checkpoint.com. IN AAAA

;; ANSWER SECTION:
updates.checkpoint.com. 28 IN CNAME updates.g01.checkpoint.com.
updates.g01.checkpoint.com. 25 IN AAAA 2620:0:2a01:3::1a11

;; Query time: 17 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Mon Apr 8 12:01:40 2019
;; MSG SIZE rcvd: 94

[Expert@obscured:0]# dig @8.8.8.8 -t AAAA updates.checkpoint.com

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-25.P1.11.cp991310011 <<>> @8.8.8.8 -t AAAA updates.checkpoint.com
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 11913
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;updates.checkpoint.com. IN AAAA

;; ANSWER SECTION:
updates.checkpoint.com. 257 IN CNAME updates.g01.checkpoint.com.
updates.g01.checkpoint.com. 29 IN AAAA 2001:67c:2840:5::20

;; Query time: 95 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Mon Apr 8 12:01:41 2019
;; MSG SIZE rcvd: 94

[Expert@obscured:0]# dig -t AAAA updates.checkpoint.com

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-25.P1.11.cp991310011 <<>> -t AAAA updates.checkpoint.com
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 53354
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 2, ADDITIONAL: 0

;; QUESTION SECTION:
;updates.checkpoint.com. IN AAAA

;; ANSWER SECTION:
updates.checkpoint.com. 299 IN CNAME updates.g01.checkpoint.com.
updates.g01.checkpoint.com. 29 IN AAAA 2620:0:2a01:3::1a11

;; AUTHORITY SECTION:
g01.checkpoint.com. 299 IN NS gns1.checkpoint.com.
g01.checkpoint.com. 299 IN NS gns3.checkpoint.com.

;; Query time: 3 msec
;; SERVER: 192.168.0.222#53(192.168.0.222)
;; WHEN: Mon Apr 8 12:01:47 2019
;; MSG SIZE rcvd: 132

[Expert@obscured:0]# dig -t AAAA updates.checkpoint.com

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-25.P1.11.cp991310011 <<>> -t AAAA updates.checkpoint.com
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 54222
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 2, ADDITIONAL: 0

;; QUESTION SECTION:
;updates.checkpoint.com. IN AAAA

;; ANSWER SECTION:
updates.checkpoint.com. 294 IN CNAME updates.g01.checkpoint.com.
updates.g01.checkpoint.com. 25 IN AAAA 2620:0:2a01:3::1a11

;; AUTHORITY SECTION:
g01.checkpoint.com. 231 IN NS gns3.checkpoint.com.
g01.checkpoint.com. 231 IN NS gns1.checkpoint.com.

;; Query time: 0 msec
;; SERVER: 192.168.0.111#53(192.168.0.111)
;; WHEN: Mon Apr 8 12:01:52 2019
;; MSG SIZE rcvd: 132

[Expert@obscured:0]# dig -t AAAA updates.checkpoint.com

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-25.P1.11.cp991310011 <<>> -t AAAA updates.checkpoint.com
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 38650
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 2, ADDITIONAL: 0

;; QUESTION SECTION:
;updates.checkpoint.com. IN AAAA

;; ANSWER SECTION:
updates.checkpoint.com. 293 IN CNAME updates.g01.checkpoint.com.
updates.g01.checkpoint.com. 24 IN AAAA 2620:0:2a01:3::1a11

;; AUTHORITY SECTION:
g01.checkpoint.com. 230 IN NS gns1.checkpoint.com.
g01.checkpoint.com. 230 IN NS gns3.checkpoint.com.

;; Query time: 1 msec
;; SERVER: 192.168.0.111#53(192.168.0.111)
;; WHEN: Mon Apr 8 12:01:53 2019
;; MSG SIZE rcvd: 132

[Expert@obscured:0]# dig -t AAAA updates.checkpoint.com

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-25.P1.11.cp991310011 <<>> -t AAAA updates.checkpoint.com
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 15410
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 2, ADDITIONAL: 0

;; QUESTION SECTION:
;updates.checkpoint.com. IN AAAA

;; ANSWER SECTION:
updates.checkpoint.com. 292 IN CNAME updates.g01.checkpoint.com.
updates.g01.checkpoint.com. 23 IN AAAA 2620:0:2a01:3::1a11

;; AUTHORITY SECTION:
g01.checkpoint.com. 229 IN NS gns3.checkpoint.com.
g01.checkpoint.com. 229 IN NS gns1.checkpoint.com.

;; Query time: 1 msec
;; SERVER: 192.168.0.111#53(192.168.0.111)
;; WHEN: Mon Apr 8 12:01:54 2019
;; MSG SIZE rcvd: 132

[Expert@obscured:0]# dig -t AAAA updates.checkpoint.com

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-25.P1.11.cp991310011 <<>> -t AAAA updates.checkpoint.com
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 17972
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 2, ADDITIONAL: 0

;; QUESTION SECTION:
;updates.checkpoint.com. IN AAAA

;; ANSWER SECTION:
updates.checkpoint.com. 278 IN CNAME updates.g01.checkpoint.com.
updates.g01.checkpoint.com. 9 IN AAAA 2620:0:2a01:3::1a11

;; AUTHORITY SECTION:
g01.checkpoint.com. 215 IN NS gns3.checkpoint.com.
g01.checkpoint.com. 215 IN NS gns1.checkpoint.com.

;; Query time: 1 msec
;; SERVER: 192.168.0.111#53(192.168.0.111)
;; WHEN: Mon Apr 8 12:02:08 2019
;; MSG SIZE rcvd: 132

[Expert@obscured:0]# dig -t AAAA updates.checkpoint.com

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-25.P1.11.cp991310011 <<>> -t AAAA updates.checkpoint.com
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 12409
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 2, ADDITIONAL: 0

;; QUESTION SECTION:
;updates.checkpoint.com. IN AAAA

;; ANSWER SECTION:
updates.checkpoint.com. 277 IN CNAME updates.g01.checkpoint.com.
updates.g01.checkpoint.com. 8 IN AAAA 2620:0:2a01:3::1a11

;; AUTHORITY SECTION:
g01.checkpoint.com. 214 IN NS gns3.checkpoint.com.
g01.checkpoint.com. 214 IN NS gns1.checkpoint.com.

;; Query time: 1 msec
;; SERVER: 192.168.0.111#53(192.168.0.111)
;; WHEN: Mon Apr 8 12:02:09 2019
;; MSG SIZE rcvd: 132

[Expert@obscured:0]# dig -t AAAA updates.checkpoint.com

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-25.P1.11.cp991310011 <<>> -t AAAA updates.checkpoint.com
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 56923
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 2, ADDITIONAL: 0

;; QUESTION SECTION:
;updates.checkpoint.com. IN AAAA

;; ANSWER SECTION:
updates.checkpoint.com. 275 IN CNAME updates.g01.checkpoint.com.
updates.g01.checkpoint.com. 6 IN AAAA 2620:0:2a01:3::1a11

;; AUTHORITY SECTION:
g01.checkpoint.com. 212 IN NS gns1.checkpoint.com.
g01.checkpoint.com. 212 IN NS gns3.checkpoint.com.

;; Query time: 1 msec
;; SERVER: 192.168.0.111#53(192.168.0.111)
;; WHEN: Mon Apr 8 12:02:11 2019
;; MSG SIZE rcvd: 132

[Expert@obscured:0]# dig -t AAAA updates.checkpoint.com

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-25.P1.11.cp991310011 <<>> -t AAAA updates.checkpoint.com
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 58386
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 2, ADDITIONAL: 0

;; QUESTION SECTION:
;updates.checkpoint.com. IN AAAA

;; ANSWER SECTION:
updates.checkpoint.com. 274 IN CNAME updates.g01.checkpoint.com.
updates.g01.checkpoint.com. 5 IN AAAA 2620:0:2a01:3::1a11

;; AUTHORITY SECTION:
g01.checkpoint.com. 211 IN NS gns3.checkpoint.com.
g01.checkpoint.com. 211 IN NS gns1.checkpoint.com.

;; Query time: 1 msec
;; SERVER: 192.168.0.111#53(192.168.0.111)
;; WHEN: Mon Apr 8 12:02:12 2019
;; MSG SIZE rcvd: 132

[Expert@obscured:0]# dig -t AAAA updates.checkpoint.com

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-25.P1.11.cp991310011 <<>> -t AAAA updates.checkpoint.com
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 49065
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 2, ADDITIONAL: 0

;; QUESTION SECTION:
;updates.checkpoint.com. IN AAAA

;; ANSWER SECTION:
updates.checkpoint.com. 271 IN CNAME updates.g01.checkpoint.com.
updates.g01.checkpoint.com. 2 IN AAAA 2620:0:2a01:3::1a11

;; AUTHORITY SECTION:
g01.checkpoint.com. 208 IN NS gns1.checkpoint.com.
g01.checkpoint.com. 208 IN NS gns3.checkpoint.com.

;; Query time: 0 msec
;; SERVER: 192.168.0.111#53(192.168.0.111)
;; WHEN: Mon Apr 8 12:02:15 2019
;; MSG SIZE rcvd: 132

[Expert@obscured:0]# dig -t AAAA updates.checkpoint.com

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-25.P1.11.cp991310011 <<>> -t AAAA updates.checkpoint.com
;; global options: printcmd
;; connection timed out; no servers could be reached
[Expert@obscured:0]# dig -t AAAA updates.checkpoint.com

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-25.P1.11.cp991310011 <<>> -t AAAA updates.checkpoint.com
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 4935
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 2, ADDITIONAL: 0

;; QUESTION SECTION:
;updates.checkpoint.com. IN AAAA

;; ANSWER SECTION:
updates.checkpoint.com. 205 IN CNAME updates.g01.checkpoint.com.
updates.g01.checkpoint.com. 21 IN AAAA 2620:0:2a01:3::1a11

;; AUTHORITY SECTION:
g01.checkpoint.com. 142 IN NS gns1.checkpoint.com.
g01.checkpoint.com. 142 IN NS gns3.checkpoint.com.

;; Query time: 1 msec
;; SERVER: 192.168.0.111#53(192.168.0.111)
;; WHEN: Mon Apr 8 12:03:21 2019
;; MSG SIZE rcvd: 132

[Expert@obscured:0]# dig -t AAAA updates.checkpoint.com

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-25.P1.11.cp991310011 <<>> -t AAAA updates.checkpoint.com
;; global options: printcmd
;; connection timed out; no servers could be reached
[Expert@obscured:0]# dig @4.2.2.1 -t AAAA updates.checkpoint.com

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-25.P1.11.cp991310011 <<>> @4.2.2.1 -t AAAA updates.checkpoint.com
; (1 server found)
;; global options: printcmd
;; connection timed out; no servers could be reached
[Expert@obscured:0]# dig @8.8.8.8 -t AAAA updates.checkpoint.com

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-25.P1.11.cp991310011 <<>> @8.8.8.8 -t AAAA updates.checkpoint.com
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 29501
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;updates.checkpoint.com. IN AAAA

;; Query time: 2024 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Mon Apr 8 12:23:32 2019
;; MSG SIZE rcvd: 40

[Expert@obscured:0]# dig @4.2.2.1 -t AAAA updates.checkpoint.com

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-25.P1.11.cp991310011 <<>> @4.2.2.1 -t AAAA updates.checkpoint.com
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 4167
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;updates.checkpoint.com. IN AAAA

;; Query time: 1185 msec
;; SERVER: 4.2.2.1#53(4.2.2.1)
;; WHEN: Mon Apr 8 12:23:38 2019
;; MSG SIZE rcvd: 40

[Expert@obscured:0]# dig @8.8.8.8 -t AAAA updates.checkpoint.com

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-25.P1.11.cp991310011 <<>> @8.8.8.8 -t AAAA updates.checkpoint.com
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 54057
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;updates.checkpoint.com. IN AAAA

;; Query time: 2025 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Mon Apr 8 12:23:42 2019
;; MSG SIZE rcvd: 40

[Expert@obscured:0]# dig @4.2.2.1 -t AAAA updates.checkpoint.com

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-25.P1.11.cp991310011 <<>> @4.2.2.1 -t AAAA updates.checkpoint.com
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 19111
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;updates.checkpoint.com. IN AAAA

;; Query time: 14 msec
;; SERVER: 4.2.2.1#53(4.2.2.1)
;; WHEN: Mon Apr 8 12:23:44 2019
;; MSG SIZE rcvd: 40

[Expert@obscured:0]# dig @8.8.8.8 -t AAAA updates.checkpoint.com

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-25.P1.11.cp991310011 <<>> @8.8.8.8 -t AAAA updates.checkpoint.com
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 43974
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;updates.checkpoint.com. IN AAAA

;; Query time: 2027 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Mon Apr 8 12:23:48 2019
;; MSG SIZE rcvd: 40

[Expert@obscured:0]# dig @4.2.2.1 -t AAAA updates.checkpoint.com

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-25.P1.11.cp991310011 <<>> @4.2.2.1 -t AAAA updates.checkpoint.com
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 26597
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;updates.checkpoint.com. IN AAAA

;; Query time: 12 msec
;; SERVER: 4.2.2.1#53(4.2.2.1)
;; WHEN: Mon Apr 8 12:23:51 2019
;; MSG SIZE rcvd: 40

[Expert@obscured:0]# dig @8.8.8.8 -t AAAA updates.checkpoint.com

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-25.P1.11.cp991310011 <<>> @8.8.8.8 -t AAAA updates.checkpoint.com
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 58914
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;updates.checkpoint.com. IN AAAA

;; Query time: 2023 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Mon Apr 8 12:23:55 2019
;; MSG SIZE rcvd: 40

[Expert@obscured:0]# dig @4.2.2.1 -t AAAA updates.checkpoint.com

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-25.P1.11.cp991310011 <<>> @4.2.2.1 -t AAAA updates.checkpoint.com
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 45960
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;updates.checkpoint.com. IN AAAA

;; Query time: 13 msec
;; SERVER: 4.2.2.1#53(4.2.2.1)
;; WHEN: Mon Apr 8 12:24:02 2019
;; MSG SIZE rcvd: 40

[Expert@obscured:0]# dig @8.8.8.8 -t AAAA updates.checkpoint.com

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-25.P1.11.cp991310011 <<>> @8.8.8.8 -t AAAA updates.checkpoint.com
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 36308
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;updates.checkpoint.com. IN AAAA

;; Query time: 2024 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Mon Apr 8 12:24:05 2019
;; MSG SIZE rcvd: 40

[Expert@obscured:0]# dig @4.2.2.1 -t AAAA updates.checkpoint.com

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-25.P1.11.cp991310011 <<>> @4.2.2.1 -t AAAA updates.checkpoint.com
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 18765
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;updates.checkpoint.com. IN AAAA

;; Query time: 12 msec
;; SERVER: 4.2.2.1#53(4.2.2.1)
;; WHEN: Mon Apr 8 12:24:08 2019
;; MSG SIZE rcvd: 40

[Expert@obscured:0]# dig @8.8.8.8 -t AAAA updates.checkpoint.com

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-25.P1.11.cp991310011 <<>> @8.8.8.8 -t AAAA updates.checkpoint.com
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 11314
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;updates.checkpoint.com. IN AAAA

;; Query time: 2024 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Mon Apr 8 12:24:11 2019
;; MSG SIZE rcvd: 40

[Expert@obscured:0]# dig @4.2.2.1 -t AAAA updates.checkpoint.com

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-25.P1.11.cp991310011 <<>> @4.2.2.1 -t AAAA updates.checkpoint.com
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 5069
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;updates.checkpoint.com. IN AAAA

;; Query time: 13 msec
;; SERVER: 4.2.2.1#53(4.2.2.1)
;; WHEN: Mon Apr 8 12:24:13 2019
;; MSG SIZE rcvd: 40

[Expert@obscured:0]# dig @8.8.8.8 -t AAAA updates.checkpoint.com

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-25.P1.11.cp991310011 <<>> @8.8.8.8 -t AAAA updates.checkpoint.com
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 50286
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;updates.checkpoint.com. IN AAAA

;; Query time: 2025 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Mon Apr 8 12:24:16 2019
;; MSG SIZE rcvd: 40

[Expert@obscured:0]# dig -t AAAA updates.checkpoint.com

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-25.P1.11.cp991310011 <<>> -t AAAA updates.checkpoint.com
;; global options: printcmd
;; connection timed out; no servers could be reached
[Expert@obscured:0]# dig @4.2.2.1 -t AAAA updates.checkpoint.com

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-25.P1.11.cp991310011 <<>> @4.2.2.1 -t AAAA updates.checkpoint.com
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 52536
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;updates.checkpoint.com. IN AAAA

;; Query time: 2226 msec
;; SERVER: 4.2.2.1#53(4.2.2.1)
;; WHEN: Mon Apr 8 12:25:12 2019
;; MSG SIZE rcvd: 40

[Expert@obscured:0]# dig @8.8.8.8 -t AAAA updates.checkpoint.com

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-25.P1.11.cp991310011 <<>> @8.8.8.8 -t AAAA updates.checkpoint.com
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 60501
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;updates.checkpoint.com. IN AAAA

;; Query time: 2025 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Mon Apr 8 12:25:17 2019
;; MSG SIZE rcvd: 40

[Expert@obscured:0]# dig @4.2.2.1 -t AAAA updates.checkpoint.com

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-25.P1.11.cp991310011 <<>> @4.2.2.1 -t AAAA updates.checkpoint.com
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 34504
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;updates.checkpoint.com. IN AAAA

;; Query time: 1521 msec
;; SERVER: 4.2.2.1#53(4.2.2.1)
;; WHEN: Mon Apr 8 12:26:37 2019
;; MSG SIZE rcvd: 40

[Expert@obscured:0]# dig @8.8.8.8 -t AAAA updates.checkpoint.com

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-25.P1.11.cp991310011 <<>> @8.8.8.8 -t AAAA updates.checkpoint.com
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 32059
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;updates.checkpoint.com. IN AAAA

;; Query time: 2026 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Mon Apr 8 12:26:41 2019
;; MSG SIZE rcvd: 40

[Expert@obscured:0]# dig @4.2.2.1 -t AAAA updates.checkpoint.com

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-25.P1.11.cp991310011 <<>> @4.2.2.1 -t AAAA updates.checkpoint.com
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 25946
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;updates.checkpoint.com. IN AAAA

;; ANSWER SECTION:
updates.checkpoint.com. 131 IN CNAME updates.g01.checkpoint.com.
updates.g01.checkpoint.com. 30 IN AAAA 2001:67c:2840:5::20

;; Query time: 4913 msec
;; SERVER: 4.2.2.1#53(4.2.2.1)
;; WHEN: Mon Apr 8 13:21:50 2019
;; MSG SIZE rcvd: 94

[Expert@obscured:0]# dig @8.8.8.8 -t AAAA updates.checkpoint.com

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-25.P1.11.cp991310011 <<>> @8.8.8.8 -t AAAA updates.checkpoint.com
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 31060
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;updates.checkpoint.com. IN AAAA

;; ANSWER SECTION:
updates.checkpoint.com. 232 IN CNAME updates.g01.checkpoint.com.
updates.g01.checkpoint.com. 29 IN AAAA 2001:67c:2840:5::20

;; Query time: 178 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Mon Apr 8 13:21:52 2019
;; MSG SIZE rcvd: 94

[Expert@obscured:0]# dig @8.8.8.8 -t A updates.checkpoint.com

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-25.P1.11.cp991310011 <<>> @8.8.8.8 -t A updates.checkpoint.com
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 38550
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;updates.checkpoint.com. IN A

;; ANSWER SECTION:
updates.checkpoint.com. 27 IN CNAME updates.g01.checkpoint.com.
updates.g01.checkpoint.com. 29 IN A 209.87.209.87

;; Query time: 106 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Mon Apr 8 13:26:21 2019
;; MSG SIZE rcvd: 82

[Expert@obscured:0]#

Last year, User Center was not reachable over IPv6 for quite a long time. We created a TAC case and they got it fixed after a few days. We were wondering that they did not detect this thereself. I thought Dual Stack should be quite common these times.

Checkpoint team, are you aware of this new IPv6 DNS problem for your subdomain?

[PhoneBoy]

I've been told this should be fixed now.
If you're still having an issue, let me know.

[Tobias_Moritz]

That was fast, thank you!

I can confirm that the DNS problem is now fixed.

However, I have still problems with updates.checkpoint.com in Dual Stack environments, but this time, its not a DNS problem.

This time, I will not get an answer from updates.checkpoint.com when trying to connect with IPv6. I get answers using IPv4 without problems. I tried to connect to an IPv6-only google server and this is working fine so I'm pretty sure again, that the problem is not on my side.

Please see my tests:

Click to Expand

[Expert@obscured:0]# dig -t AAAA updates.checkpoint.com

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-25.P1.11.cp991310011 <<>> -t AAAA updates.checkpoint.com
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 24702
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:
;updates.checkpoint.com. IN AAAA

;; ANSWER SECTION:
updates.checkpoint.com. 37 IN CNAME updates.g01.checkpoint.com.
updates.g01.checkpoint.com. 28 IN AAAA 2620:0:2a01:3::1a11

;; AUTHORITY SECTION:
g01.checkpoint.com. 298 IN NS gns1.checkpoint.com.
g01.checkpoint.com. 298 IN NS gns3.checkpoint.com.

;; ADDITIONAL SECTION:
gns3.checkpoint.com. 93 IN A 209.87.211.190
gns1.checkpoint.com. 93 IN A 194.29.39.5

;; Query time: 1 msec
;; SERVER: 192.168.0.111#53(192.168.0.111)
;; WHEN: Tue Apr 9 07:59:16 2019
;; MSG SIZE rcvd: 164

[Expert@obscured:0]# dig -t AAAA updates.checkpoint.com

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-25.P1.11.cp991310011 <<>> -t AAAA updates.checkpoint.com
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 54287
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:
;updates.checkpoint.com. IN AAAA

;; ANSWER SECTION:
updates.checkpoint.com. 222 IN CNAME updates.g01.checkpoint.com.
updates.g01.checkpoint.com. 30 IN AAAA 2001:67c:2840:5::20

;; AUTHORITY SECTION:
g01.checkpoint.com. 210 IN NS gns1.checkpoint.com.
g01.checkpoint.com. 210 IN NS gns3.checkpoint.com.

;; ADDITIONAL SECTION:
gns3.checkpoint.com. 5 IN A 209.87.211.190
gns1.checkpoint.com. 5 IN A 194.29.39.5

;; Query time: 74 msec
;; SERVER: 192.168.0.111#53(192.168.0.111)
;; WHEN: Tue Apr 9 08:00:44 2019
;; MSG SIZE rcvd: 164

[Expert@obscured:0]# dig -t AAAA updates.checkpoint.com

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-25.P1.11.cp991310011 <<>> -t AAAA updates.checkpoint.com
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 45824
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:
;updates.checkpoint.com. IN AAAA

;; ANSWER SECTION:
updates.checkpoint.com. 221 IN CNAME updates.g01.checkpoint.com.
updates.g01.checkpoint.com. 29 IN AAAA 2001:67c:2840:5::20

;; AUTHORITY SECTION:
g01.checkpoint.com. 209 IN NS gns3.checkpoint.com.
g01.checkpoint.com. 209 IN NS gns1.checkpoint.com.

;; ADDITIONAL SECTION:
gns3.checkpoint.com. 4 IN A 209.87.211.190
gns1.checkpoint.com. 4 IN A 194.29.39.5

;; Query time: 1 msec
;; SERVER: 192.168.0.111#53(192.168.0.111)
;; WHEN: Tue Apr 9 08:00:45 2019
;; MSG SIZE rcvd: 164

[Expert@obscured:0]# time curl_cli -v --cacert $CPDIR/conf/ca-bundle.crt https://updates.checkpoint.com/WebService/services/DownloadMetaDataService
* Trying 2001:67c:2840:5::20...
* Connected to updates.checkpoint.com (2001:67c:2840:5::20) port 443 (#0)
* Cipher selection: HIGH:!RC4:!LOW:!EXP:!aNULL:!SSLv2:!MD5:!aECDH:!EDH
* successfully set certificate verify locations:
* CAfile: /opt/CPshrd-R80/conf/ca-bundle.crt
CApath: none
* *** Current date is: Tue Apr 9 08:01:14 2019
* TLSv1.2 (OUT), TLS handshake, Client hello (1):
* err is -1, detail is 2
* *** Current date is: Tue Apr 9 08:01:14 2019
* TLSv1.2 (IN), TLS handshake, Server hello (2):
* err is -1, detail is 2
* *** Current date is: Tue Apr 9 08:01:14 2019
* err is -1, detail is 2
* *** Current date is: Tue Apr 9 08:01:14 2019
* TLSv1.2 (IN), TLS handshake, Certificate (11):
* TLSv1.2 (IN), TLS handshake, Server finished (14):
* TLSv1.2 (OUT), TLS handshake, Client key exchange (16):
* TLSv1.2 (OUT), TLS change cipher, Client hello (1):
* TLSv1.2 (OUT), TLS handshake, Finished (20):
* err is -1, detail is 2
* *** Current date is: Tue Apr 9 08:01:14 2019
* TLSv1.2 (IN), TLS change cipher, Client hello (1):
* TLSv1.2 (IN), TLS handshake, Finished (20):
* SSL connection using TLSv1.2 / AES256-SHA256
* servercert: Activated
* servercert: crl_download_timeout: 10
* servercert: crl_weak_validation: 1
* servercert: Calling cp_verify_certificate
* servercert: cp_verify_certificate returned: CURLE_OK
* Server certificate:
* subject: C=US; ST=California; L=San Carlos; O=Check Point Software Technologies Inc.; CN=*.checkpoint.com
* start date: Nov 15 21:53:19 2018 GMT
* expire date: Nov 15 21:53:19 2020 GMT
* subjectAltName: updates.checkpoint.com matched
* issuer: C=US; ST=Arizona; L=Scottsdale; O=GoDaddy.com, Inc.; OU=http://certs.godaddy.com/repository/; CN=Go Daddy Secure Certificate Authority - G2
* SSL certificate verify ok.
* servercert: Finished
< HTTP/1.1 200 OK
< Date: Tue, 09 Apr 2019 06:01:14 GMT
< Content-Type: text/xml;charset=UTF-8
< Content-Length: 410
< Access-Control-Allow-Credentials: true
< Connection: close
< Server: CPWS
<
* Closing connection 0
* TLSv1.2 (OUT), TLS alert, Client hello (1):
<soap:Envelope xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><checkpoint:BusinessFault xmlns:checkpoint="urn:downloadcenter"><checkpoint:BusinessFault><checkpoint:code>002</checkpoint:code><checkpoint:message>Request Invalid</checkpoint:message><checkpoint:details>XML Translation Failed</checkpoint:details></checkpoint:BusinessFault></checkpoint:BusinessFault></soap:Body></soap:Envelope>
real 0m0.612s
user 0m0.105s
sys 0m0.017s
[Expert@obscured:0]# time curl_cli -6 -v --cacert $CPDIR/conf/ca-bundle.crt https://updates.checkpoint.com/WebService/services/DownloadMetaDataService
* Trying 2620:0:2a01:3::1a11...
* Connection failed
* connect to 2620:0:2a01:3::1a11 port 443 failed: Connection timed out
* Failed to connect to updates.checkpoint.com port 443: Connection timed out
* Closing connection 0
curl: (7) Failed to connect to updates.checkpoint.com port 443: Connection timed out

real 0m45.102s
user 0m0.018s
sys 0m0.007s
[Expert@obscured:0]# time curl_cli -6 -v -k https://ipv6.google.com
* Rebuilt URL to: https://ipv6.google.com/
* Trying 2a00:1450:4001:81f::200e...
* Connected to ipv6.google.com (2a00:1450:4001:81f::200e) port 443 (#0)
* Cipher selection: HIGH:!RC4:!LOW:!EXP:!aNULL:!SSLv2:!MD5:!aECDH:!EDH
* *** Current date is: Tue Apr 9 08:03:06 2019
* TLSv1.2 (OUT), TLS handshake, Client hello (1):
* err is -1, detail is 2
* *** Current date is: Tue Apr 9 08:03:06 2019
* TLSv1.2 (IN), TLS handshake, Server hello (2):
* NPN, negotiated HTTP1.1
* err is -1, detail is 2
* *** Current date is: Tue Apr 9 08:03:06 2019
* TLSv1.2 (IN), TLS handshake, Certificate (11):
* TLSv1.2 (IN), TLS handshake, Server key exchange (12):
* TLSv1.2 (IN), TLS handshake, Server finished (14):
* TLSv1.2 (OUT), TLS handshake, Client key exchange (16):
* TLSv1.2 (OUT), TLS change cipher, Client hello (1):
* TLSv1.2 (OUT), TLS handshake, Unknown (67):
* TLSv1.2 (OUT), TLS handshake, Finished (20):
* err is -1, detail is 2
* *** Current date is: Tue Apr 9 08:03:06 2019
* TLSv1.2 (IN), TLS change cipher, Client hello (1):
* TLSv1.2 (IN), TLS handshake, Finished (20):
* SSL connection using TLSv1.2 / ECDHE-ECDSA-AES128-GCM-SHA256
* servercert: Activated
* servercert: CRL validation was disabled
* Server certificate:
* subject: C=US; ST=California; L=Mountain View; O=Google LLC; CN=*.google.com
* start date: Mar 1 09:43:57 2019 GMT
* expire date: May 24 09:25:00 2019 GMT
* issuer: C=US; O=Google Trust Services; CN=Google Internet Authority G3
* SSL certificate verify result: unable to get local issuer certificate (20), continuing anyway.
* servercert: Finished
< HTTP/1.1 200 OK
< Date: Tue, 09 Apr 2019 06:03:06 GMT
< Expires: -1
< Cache-Control: private, max-age=0
< Content-Type: text/html; charset=ISO-8859-1
< P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info."
< Server: gws
< X-XSS-Protection: 0
< X-Frame-Options: SAMEORIGIN
< Set-Cookie: 1P_JAR=2019-04-09-06; expires=Thu, 09-May-2019 06:03:06 GMT; path=/; domain=.google.com
< Set-Cookie: NID=180=FFbNFpoDugWkgMXmCQBsMQrqd1dV709UpeH5VMrpphSs9_Gz70Q_Xs_8_RuD54Zo67vIbl8Q-MoKA9rfilss9XG8YNyEM3jSCIiGzZh10ywo1Uwt2_y34vL8N58aMEhBCyePyb7MABlw3l2bEVAeexPNkgu8I0-H-JB6D2Vd0gk; expires=Wed, 09-Oct-2019 06:03:06 GMT; path=/; domain=.google.com; HttpOnly
< Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"
< Accept-Ranges: none
< Vary: Accept-Encoding
< Transfer-Encoding: chunked
<
<!doctype html><html itemscope="" itemtype="http://schema.org/WebPage" lang="de"><head><meta content="text/html; charset=UTF-8" http-equiv="Content-Type"><meta content="/images/branding/googleg/1x/googleg_standard_color_128dp.png" itemprop="image"><title>Google</title><script nonce="Ha9KEvQi/URDWMvhs/PPXg==">(function(){window.google={kEI:'mjWsXMGrJKGFmwWGt4GQBg',kEXPI:'0,1353746,58,50,1908,2422,697,528,730,224,1575,30,1227,1895,584,351,72,365,229,3,5,69,2333488,329559,1294,12383,4855,32691,15248,867,12163,16521,363,3320,1263,4242,2442,260,1027,2636,1444,575,835,284,2,578,728,2432,1361,3692,631,3696,1237,34,774,2251,3272,1465,6,1151,2,696,4,793,254,218,2595,3601,669,1050,1808,1397,81,7,491,620,29,1395,978,6722,1209,1288,2,4007,796,877,343,38,920,754,119,1217,1364,1611,2692,44,48,245,1265,1506,2,628,1140,1263,159,2,4,2,670,44,3744,404,156,354,124,527,1128,953,632,2228,499,2,46,108,21,89,6,223,234,20,2,526,783,416,142,724,1303,118,248,1317,82,498,28,97,756,98,392,29,400,373,2,513,104,455,54,25,573,10,168,8,85,211,831,83,57,95,78,365,367,115,315,20,174,47,510,7,321,82,612,14,12,53,303,215,84,1002,290,9,474,2,64,8,68,822,76,9,27,212,68,24,153,2,39,5,478,582,105,87,66,475,154,145,499,18,54,10,177,132,350,75,11,63,142,162,23,228,39,18,365,320,1561,125,54,40,603,286,35,89,5946853,1874,680,339,21,8797426,4,1572,549,333,444,1,2,80,1,900,580,10,306,1,8,1,2,2132,1,1,1,1,1,414,1,748,141,59,726,3,7,563,1,1729,6,1,64,10,3338829',authuser:0,kscs:'c9c918f0_mjWsXMGrJKGFmwWGt4GQBg',kGL:'DE'};google.sn='webhp';google.kHL='de';})();(function(){google.lc=[];google.li=0;google.getEI=function(a){for(var b;a&&(!a.getAttribute||!(b=a.getAttribute("eid")));)a=a.parentNode;return b||google.kEI};google.getLEI=function(a){for(var b=null;a&&(!a.getAttribute||!(b=a.getAttribute("leid")));)a=a.parentNode;return b};google.https=function(){return"https:"==window.location.protocol};google.ml=function(){return null};google.time=function(){return(new Date).getTime()};google.log=function(a,b,e,c,g){if(a=google.logUrl(a,b,e,c,g)){b=new Image;var d=google.lc,f=google.li;d[f]=b;b.onerror=b.onload=b.onabort=function(){delete d[f]};google.vel&&google.vel.lu&&google.vel.lu(a);b.src=a;google.li=f+1}};google.logUrl=function(a,b,e,c,g){var d="",f=google.ls||"";e||-1!=b.search("&ei=")||(d="&ei="+google.getEI(c),-1==b.search("&lei=")&&(c=google.getLEI(c))&&(d+="&lei="+c));c="";!e&&google.cshid&&-1==b.search("&cshid=")&&"slh"!=a&&(c="&cshid="+google.cshid);a=e||"/"+(g||"gen_204")+"?atyp=i&ct="+a+"&cad="+b+d+f+"&zx="+google.time()+c;/^http:/i.test(a)&&google.https()&&(google.ml(Error("a"),!1,{src:a,glmm:1}),a="");return a};}).call(this);(function(){google.y={};google.x=function(a,b){if(a)var c=a.id;else{do c=Math.random();while(google.y[c])}google.y[c]=[a,b];return!1};google.lm=[];google.plm=function(a){google.lm.push.apply(google.lm,a)};google.lq=[];google.load=function(a,b,c){google.lq.push([[a],b,c])};google.loadAll=function(a,b){google.lq.push([a,b])};}).call(this);google.f={};var a=window.location,b=a.href.indexOf("#");if(0<=b){var c=a.href.substring(b+1);/(^|&)q=/.test(c)&&-1==c.indexOf("#")&&a.replace("/search?"+c.replace(/(^|&)fp=[^&]*/g,"")+"&cad=h")};</script><style>#gbar,#guser{font-size:13px;padding-top:1px !important;}#gbar{height:22px}#guser{padding-bottom:7px !important;text-align:right}.gbh,.gbd{border-top:1px solid #c9d7f1;font-size:1px}.gbh{height:0;position:absolute;top:24px;width:100%}@media all{.gb1{height:22px;margin-right:.5em;vertical-align:top}#gbar{float:left}}a.gb1,a.gb4{text-decoration:underline !important}a.gb1,a.gb4{color:#00c !important}.gbi .gb4{color:#dd8e27 !important}.gbf .gb4{color:#900 !important}
</style><style>body,td,a,p,.h{font-family:arial,sans-serif}body{margin:0;overflow-y:scroll}#gog{padding:3px 8px 0}td{line-height:.8em}.gac_m td{line-height:17px}form{margin-bottom:20px}.h{color:#36c}.q{color:#00c}.ts td{padding:0}.ts{border-collapse:collapse}em{font-weight:bold;font-style:normal}.lst{height:25px;width:496px}.gsfi,.lst{font:18px arial,sans-serif}.gsfs{font:17px arial,sans-serif}.ds{display:inline-box;display:inline-block;margin:3px 0 4px;margin-left:4px}input{font-family:inherit}a.gb1,a.gb2,a.gb3,a.gb4{color:#11c !important}body{background:#fff;color:black}a{color:#11c;text-decoration:none}a:hover,a:active{text-decoration:underline}.fl a{color:#36c}a:visited{color:#551a8b}a.gb1,a.gb4{text-decoration:underline}a.gb3:hover{text-decoration:none}#ghead a.gb2:hover{color:#fff !important}.sblc{padding-top:5px}.sblc a{display:block;margin:2px 0;margin-left:13px;font-size:11px}.lsbb{background:#eee;border:solid 1px;border-color:#ccc #999 #999 #ccc;height:30px}.lsbb{display:block}.ftl,#fll a{display:inline-block;margin:0 12px}.lsb{background:url(/images/nav_logo229.png) 0 -261px repeat-x;border:none;color:#000;cursor:pointer;height:30px;margin:0;outline:0;font:15px arial,sans-serif;vertical-align:top}.lsb:active{background:#ccc}.lst:focus{outline:none}</style><script nonce="Ha9KEvQi/URDWMvhs/PPXg=="></script></head><body bgcolor="#fff"><script nonce="Ha9KEvQi/URDWMvhs/PPXg==">(function(){var src='/images/nav_logo229.png';var iesg=false;document.body.onload = function(){window.n && window.n();if (document.images){new Image().src=src;}
if (!iesg){document.f&&document.f.q.focus();document.gbqf&&document.gbqf.q.focus();}
}
})();</script><div id="mngb"> <div id=gbar><nobr><b class=gb1>Suche</b> <a class=gb1 href="https://www.google.de/imghp?hl=de&tab=wi">Bilder</a> <a class=gb1 href="https://maps.google.de/maps?hl=de&tab=wl">Maps</a> <a class=gb1 href="https://play.google.com/?hl=de&tab=w8">Play</a> <a class=gb1 href="https://www.youtube.com/?gl=DE&tab=w1">YouTube</a> <a class=gb1 href="https://news.google.de/nwshp?hl=de&tab=wn">News</a> <a class=gb1 href="https://mail.google.com/mail/?tab=wm">Gmail</a> <a class=gb1 href="https://drive.google.com/?tab=wo">Drive</a> <a class=gb1 style="text-decoration:none" href="https://www.google.de/intl/de/about/products?tab=wh"><u>Mehr</u> &raquo;</a></nobr></div><div id=guser width=100%><nobr><span id=gbn class=gbi></span><span id=gbf class=gbf></span><span id=gbe></span><a href="http://www.google.de/history/optout?hl=de" class=gb4>Webprotokoll</a> | <a href="/preferences?hl=de" class=gb4>Einstellungen</a> | <a target=_top id=gb_70 href="https://accounts.google.com/ServiceLogin?hl=de&passive=true&continue=https://ipv6.google.com/" class=gb4>Anmelden</a></nobr></div><div class=gbh style=left:0></div><div class=gbh style=right:0></div> </div><center><br clear="all" id="lgpd"><div id="lga"><img alt="Google" height="92" src="/images/branding/googlelogo/1x/googlelogo_white_background_color_272x92dp.png" style="padding:28px 0 14px" width="272" id="hplogo" onload="window.lol&&lol()"><br><br></div><form action="/search" name="f"><table cellpadding="0" cellspacing="0"><tr valign="top"><td width="25%">&nbsp;</td><td align="center" nowrap=""><input name="ie" value="ISO-8859-1" type="hidden"><input value="de" name="hl" type="hidden"><input name="source" type="hidden" value="hp"><input name="biw" type="hidden"><input name="bih" type="hidden"><div class="ds" style="height:32px;margin:4px 0"><input style="color:#000;margin:0;padding:5px 8px 0 6px;vertical-align:top" autocomplete="off" class="lst" value="" title="Google-Suche" maxlength="2048" name="q" size="57"></div><br style="line-height:0"><span class="ds"><span class="lsbb"><input class="lsb" value="Google-Suche" name="btnG" type="submit"></span></span><span class="ds"><span class="lsbb"><input class="lsb" value="Auf gut Glück!" name="btnI" onclick="if(this.form.q.value)this.checked=1; else top.location='/doodles/'" type="submit"></span></span></td><td class="fl sblc" align="left" nowrap="" width="25%"><a href="/advanced_search?hl=de&amp;authuser=0">Erweiterte Suche</a><a href="/language_tools?hl=de&amp;authuser=0">Sprachoptionen</a></td></tr></table><input id="gbv" name="gbv" type="hidden" value="1"><script nonce="Ha9KEvQi/URDWMvhs/PPXg==">(function(){var a,b="1";if(document&&document.getElementById)if("undefined"!=typeof XMLHttpRequest)b="2";else if("undefined"!=typeof ActiveXObject){var c,d,e=["MSXML2.XMLHTTP.6.0","MSXML2.XMLHTTP.3.0","MSXML2.XMLHTTP","Microsoft.XMLHTTP"];for(c=0;d=e[c++];)try{new ActiveXObject(d),b="2"}catch(h){}}a=b;if("2"==a&&-1==location.search.indexOf("&gbv=2")){var f=google.gbvu,g=document.getElementById("gbv");g&&(g.value=a);f&&window.setTimeout(function(){location.href=f},0)};}).call(this);</script></form><div id="gac_scont"></div><div style="font-size:83%;min-height:3.5em"><br></div><span id="footer"><div style="font-size:10pt"><div style="margin:19px auto;text-align:center" id="fll"><a href="/intl/de/ads/">Werben mit Google</a><a href="/services/">Unternehmensangebote</a><a href="/intl/de/about.html">Über Google</a><a href="https://ipv6.google.com/setprefdomain?prefdom=DE&amp;prev=https://www.google.de/&amp;sig=K_EEbPO3Kuk... style="color:#767676;font-size:8pt">&copy; 2019 - <a href="/intl/de/policies/privacy/">Datenschutzerklärung</a> - <a href="/intl/de/policies/terms/">Nutzungsbedingungen</a></p></span></center><script nonce="Ha9KEvQi/URDWMvhs/PPXg==">(function(){window.google.cdo={height:0,width:0};(function(){var a=window.innerWidth,b=window.innerHeight;if(!a||!b){var c=window.document,d="CSS1Compat"==c.compatMode?c.documentElement:c.body;a=d.clientWidth;b=d.clientHeight}a&&b&&(a!=google.cdo.width||b!=google.cdo.height)&&google.log("","","/client_204?&atyp=i&biw="+a+"&bih="+b+"&ei="+google.kEI);}).call(this);})();(function(){var u='/xjs/_/js/k\x3dxjs.hp.en.EGCpeXAuLfg.O/m\x3dsb_he,d/am\x3dBIOa/rt\x3dj/d\x3d1/rs\x3dACT90oE_qmsLlZnWxeGbfO9gY-PCdO91-Q';setTimeout(function(){var a=document.createElement("script");a.src=u;google.timers&&google.timers.load&&google.tick&&google.tick("load","xjsls");document.body.appendChild(a)},0);})();(function(){window.google.xjsu='/xjs/_/js/k\x3dxjs.hp.en.EGCpeXAuLfg.O/m\x3dsb_he,d/am\x3dBIOa/rt\x3dj/d\x3d1/rs\x3dACT90oE_qmsLlZnWxeGbfO9gY-PCdO91-Q';})();function _DumpException(e){throw e;}
* Connection #0 to host ipv6.google.com left intact
(function(){google.spjs=false;})();(function(){var pmc='{\x22Qnk92g\x22:{},\x22RWGcrA\x22:{},\x22U5B21g\x22:{},\x22YFCs/g\x22:{},\x22ZI/YVQ\x22:{},\x22d\x22:{},\x22sb_he\x22:{\x22agen\x22:true,\x22cgen\x22:true,\x22client\x22:\x22heirloom-hp\x22,\x22dh\x22:true,\x22dhqt\x22:true,\x22ds\x22:\x22\x22,\x22ffql\x22:\x22de\x22,\x22fl\x22:true,\x22host\x22:\x22google.com\x22,\x22isbh\x22:28,\x22jsonp\x22:true,\x22lm\x22:true,\x22msgs\x22:{\x22cibl\x22:\x22Suche löschen\x22,\x22dym\x22:\x22Meintest du:\x22,\x22lcky\x22:\x22Auf gut Glück!\x22,\x22lml\x22:\x22Weitere Informationen\x22,\x22oskt\x22:\x22Eingabetools\x22,\x22psrc\x22:\x22Diese Suchanfrage wurde aus deinem \\u003Ca href\x3d\\\x22/history\\\x22\\u003EWebprotokoll\\u003C/a\\u003E entfernt.\x22,\x22psrl\x22:\x22Entfernen\x22,\x22sbit\x22:\x22Bildersuche\x22,\x22srch\x22:\x22Google-Suche\x22},\x22ovr\x22:{},\x22pq\x22:\x22\x22,\x22refpd\x22:true,\x22rfs\x22:[],\x22sbpl\x22:24,\x22sbpr\x22:24,\x22scd\x22:10,\x22sce\x22:5,\x22stok\x22:\x22t8gQgauPQr7pvkIVyj1jxyX9F0U\x22,\x22uhde\x22:false}}';google.pmc=JSON.parse(pmc);})();</script> </body></html>
real 0m0.222s
user 0m0.037s
sys 0m0.010s
[Expert@obscured:0]#

[Tobias_Moritz]

And today, the DNS problem is there again (tested with own recurser and resolvers from Level 3, Google and Cloudflare :

Click to Expand

[Expert@obscured:0]# time curl_cli -6 -v --cacert $CPDIR/conf/ca-bundle.crt https://updates.checkpoint.com/WebService/services/DownloadMetaDataService
* getaddrinfo(3) failed for updates.checkpoint.com:443
* Couldn't resolve host 'updates.checkpoint.com'
* Closing connection 0
curl: (6) Couldn't resolve host 'updates.checkpoint.com'

real 0m20.026s
user 0m0.020s
sys 0m0.006s
[Expert@obscured:0]# dig -t AAAA updates.checkpoint.com

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-25.P1.11.cp991310011 <<>> -t AAAA updates.checkpoint.com
;; global options: printcmd
;; connection timed out; no servers could be reached
[Expert@obscured:0]# dig @4.2.2.1 -t AAAA updates.checkpoint.com

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-25.P1.11.cp991310011 <<>> @4.2.2.1 -t AAAA updates.checkpoint.com
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 44608
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;updates.checkpoint.com. IN AAAA

;; Query time: 3034 msec
;; SERVER: 4.2.2.1#53(4.2.2.1)
;; WHEN: Wed Apr 10 09:28:31 2019
;; MSG SIZE rcvd: 40

[Expert@obscured:0]# dig @8.8.8.8 -t AAAA updates.checkpoint.com

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-25.P1.11.cp991310011 <<>> @8.8.8.8 -t AAAA updates.checkpoint.com
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 33492
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;updates.checkpoint.com. IN AAAA

;; ANSWER SECTION:
updates.checkpoint.com. 174 IN CNAME updates.g01.checkpoint.com.
updates.g01.checkpoint.com. 29 IN AAAA 2620:0:2a01:3::1a11

;; Query time: 87 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Wed Apr 10 09:28:39 2019
;; MSG SIZE rcvd: 94

[Expert@obscured:0]# dig @4.2.2.1 -t AAAA updates.checkpoint.com

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-25.P1.11.cp991310011 <<>> @4.2.2.1 -t AAAA updates.checkpoint.com
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 48275
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;updates.checkpoint.com. IN AAAA

;; Query time: 3706 msec
;; SERVER: 4.2.2.1#53(4.2.2.1)
;; WHEN: Wed Apr 10 09:28:51 2019
;; MSG SIZE rcvd: 40

[Expert@obscured:0]# dig @1.1.1.1 -t AAAA updates.checkpoint.com

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-25.P1.11.cp991310011 <<>> @1.1.1.1 -t AAAA updates.checkpoint.com
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 22706
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;updates.checkpoint.com. IN AAAA

;; ANSWER SECTION:
updates.checkpoint.com. 209 IN CNAME updates.g01.checkpoint.com.

;; Query time: 4213 msec
;; SERVER: 1.1.1.1#53(1.1.1.1)
;; WHEN: Wed Apr 10 09:30:22 2019
;; MSG SIZE rcvd: 66

[Expert@obscured:0]# dig @1.1.1.1 -t AAAA updates.g01.checkpoint.com.

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-25.P1.11.cp991310011 <<>> @1.1.1.1 -t AAAA updates.g01.checkpoint.com.
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 43238
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;updates.g01.checkpoint.com. IN AAAA

;; Query time: 4214 msec
;; SERVER: 1.1.1.1#53(1.1.1.1)
;; WHEN: Wed Apr 10 09:30:43 2019
;; MSG SIZE rcvd: 44

[Expert@obscured:0]#