DNS server getting Timeouts (Very Strange)

[Lee M Dobson]

Corey,

Just a simple WHOIS from a linux command prompt revealed that there were
multiple instances of odigo.com registered in root servers.

You can then perform an whois =domain.com to view both instances, you
will notice there is an extra host record which may or may not be
causing the
Resolution problems you describe.  Though I noticed that the host record
Was for 216.33.42.70 so I doubt this is causing the pronlems you are
experiencing.

I did a few dig and nslookup queries to my nameservers, all of which
resolved the domain odigo.com and mail.odigo.com to 216.33.42.70.
Additionally the authorative name servers do appear to be resolving your
Mail alias correctly. Also the name server ns.barak.net.il is also
resolving the alias correctly (I tried 5 or 6 queries to it)  Could this
be a case of bad cache on the servers You tested it on?

Thanks,

Sincerely,
Lee M Dobson,
Jr. System Administrator,
Alabanza Corporation.

-----Original Message-----
From: bind-users-bounce at isc.org [mailto:bind-users-bounce at isc.org] On
Behalf Of Corey Ellis
Sent: Monday, August 26, 2002 9:42 AM
To: comp-protocols-dns-bind at isc.org
Subject: Re: DNS server getting Timeouts (Very Strange)


Lee,

Thanks for the quick response,  what command did you actually perform
to find this duplicate record.

Also SCA02.SEC.DNS.EXODUS.NET and ODIGO.COM are the two nameservers
(Secondary and Primary) respectively

Also what is throwing me off the trail is that all of the nameservers
that I tried (most in US) work fine, and resolve anything I throw at
it.  But this name server in particular ns.barak.net.il
(212.150.48.169) will not resolve "mail.odigo.com" at all, and when
you try odigo.com or www.odigo.com it will resolve sometimes and
sometimes it will time out.

This is what throwing me off.

Maybe this duplicate record issue you mention is the problem, but can
you show me the command that gave you this answer.  Thanks

And one other thing, does your DNS server resolve mail.odigo.com, and
odigo.com, and odigo.org fine. Just curious.

On 26 Aug 2002 16:21:14 -0000, "Lee M Dobson" <ldobson at alabanza.com>
wrote:

>
>
>Corey,
>
>Looks like you have an extra host record registered with network
>solutions with the IP of 216.33.42.70  (You probably want to lose this)
>This would
>Explain why you are getting duplicate "roots" with your dig queries and
>will
>Leave you with only one entry in the root servers which contain the
name
>Servers SCA02.SEC.DNS.EXODUS.NET and ODIGO.COM (is this a nameserver?!)
>IN any case once you have had NSI remove that extra host record, you
>should make sure the remaining root record reflects the correct
>information, and ensure that both nameservers mentioned above have the
>same zone and serial number and respond with an authorative answer for
>ODIGO.Com
>
>Hope that helps,
>
>Sincerely,
>Lee M Dobson,
>Jr. System Administrator,
>Alabanza Corporation.
>
>-----Original Message-----
>From: bind-users-bounce at isc.org [mailto:bind-users-bounce at isc.org] On
>Behalf Of corey.m.ellis at comcast.net
>Sent: Monday, August 26, 2002 8:50 AM
>To: comp-protocols-dns-bind at isc.org
>Subject: DNS server getting Timeouts (Very Strange)
>
>
>Hi everyone,
>
>I have a strange problem.  It seems that a few DNS servers worldwide
>are having a problem resolving mail.odigo.com.  if you try resolving
>odigo.com domain, everything is fine, but when you try to resolve
>mail.odigo.com from this DNS server it times out.
>
>I would like to know if this is a problem with the root servers, a
>problem with the DNS server timing out, or a problem with our servers
>
>when you do a dig @212.150.48.169 odigo.com.  it will provide an
>answer
>
>if you do dig @212.150.48.169 mail.odigo.com it will time out
>
>I have spoke with Network Solutions an they tell me that the root
>servers are ok for our domain, but a strange thing I see when I
>perform an nslookup on the GTLD servers is the following.
>
>when I do the following
>
>type nslookup, then type "root" at the prompt, then type "odigo.com.",
>they type "server J.GTLD-SERVERS.NET", then type "odigo.com." again,
>
>I get a non-authoritative answer (It's correct but non-authoritative)
>when I type odigo.org (I get a Served By: with our Primary and
>Secondary Name Servers.
>
>My provider tells me that I should get a list of my Primary and
>Secondary Nameservers for odigo.com. and not a non-authoritative
>answer.  But the Network Solutions support guy tells me that this is
>normal to give non-authoritative answers.
>
>So my dilemna is why a few name servers are timing out on our
>mail.odigo.com Resource Record, and 2) Is the non-authoritative answer
>from a root server normal behavior, or should I be getting a list of
>my Primary and Secondary nameservers.
>
>Any help is greatly appreciated thanks, I hope someone can point me in
>the right direction, thanks
>