IP4 prefixes for.ir TLD name servers are being announced.

[jtk@infosec.exchange]

IP4 prefixes for.ir TLD name servers are being announced. TCP/UDP over IP4 queries are getting responses from most of those name servers.

There are inconsistencies between what is in the root and now in ir. The root zone has IP6 addresses for each .ir name server, but the .ir zone currently does not. c.nic.ir in the root has glue for a name server in NL that is still responding authoritatively on both A and AAAA addresses, but it is surely out of sync.

Oddly, the ir zone has an OVH IP4 for c.nic.ir which is not responding.

#AS57497 (faraso .org), a hosting provider, is one of the few IR associated nets currently visible in routing tables. At least some of these prefixes appear to be originating from IR.