DNS Settings Primary/Secondary

[Barry Margolin]

In article <cftso7$2un7$1 at sf1.isc.org>,
 paul_a_long at hotmail.com (Paul Long) wrote:

> Hi,
> 
> I apologise if this isn't a general enough group but I'd appreciate it
> if anyone could help with with some DNS settings that are causing me
> much grief!
> 
> I host a domain: 'longbrook.net' that has been configured at the
> registrar with the following DNS settings:
> 
>  ns1.totalresourcing.com
>  ns1.twisted4life.com
>  secondary.org
> 
> I have configured the BIND DNS (windows version) with the same
> settings (I host totalresourcing.com as well)
> 
> However, when I use www.dnsreport.com to look up my settings I always
> get the following DNS readings:
> 
>      Your NS records at your nameservers are:
> 
>      longbrook.net. [TTL=3600]
>      dns.consumer.net. [TTL=3600]
>      dns2.consumer.net. [TTL=3600]
> 
> Is 'consumer.net' some sort of default if the DNS are not working
> correctly?

The problem is coming from the secondary.org nameserver:

$ dig longbrook.net ns @secondary.org +norec

; <<>> DiG 9.2.2 <<>> longbrook.net ns @secondary.org +norec
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 25449
;; flags: qr aa; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 2

;; QUESTION SECTION:
;longbrook.net.         IN NS

;; ANSWER SECTION:
longbrook.net.    3600  IN CNAME net.
net.        3600  IN NS dns.consumer.net.
net.        3600  IN NS dns2.consumer.net.

;; ADDITIONAL SECTION:
dns.consumer.net. 3600  IN A  66.98.244.116
dns2.consumer.net.   3600  IN A  68.46.140.152

;; Query time: 44 msec
;; SERVER: 68.46.140.152#53(secondary.org)
;; WHEN: Wed Aug 18 00:18:27 2004
;; MSG SIZE  rcvd: 123


> I also have the same problem with a '.co.uk' domain which ends up
> being mapped to 'dns.consumer.uk'.
> 
> Finally, should I really be including 'secondary.org' within my
> registrar's database?

It doesn't seem like they're set up as a slave for your zones, so 
probably not.  Furthermore, they have themselves set up as a bogus 
authoritative server for a bunch of top-level zones:

$ dig 'com.' any @secondary.org +norec

; <<>> DiG 9.2.2 <<>> com. any @secondary.org +norec
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 54500
;; flags: qr aa; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 2

;; QUESTION SECTION:
;com.          IN ANY

;; ANSWER SECTION:
com.        86400 IN SOA   dns.consumer.net. admin.consumer.net. 
2004072502 86400 3600 777600 3600
com.        3600  IN NS dns.consumer.net.
com.        3600  IN A  66.98.244.118
com.        3600  IN NS dns2.consumer.net.

;; ADDITIONAL SECTION:
dns.consumer.net. 3600  IN A  66.98.244.116
dns2.consumer.net.   3600  IN A  68.46.140.152

;; Query time: 34 msec
;; SERVER: 68.46.140.152#53(secondary.org)
;; WHEN: Wed Aug 18 00:22:34 2004
;; MSG SIZE  rcvd: 172

They have similar configuration for .net, .org, .us, and .uk.  And then 
within these zones, it looks like they have a wildcard alias:

$ dig '*.com.' any @secondary.org +norec

; <<>> DiG 9.2.2 <<>> *.com. any @secondary.org +norec
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 37956
;; flags: qr aa; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;*.com.           IN ANY

;; ANSWER SECTION:
*.com.         3600  IN CNAME com.

;; Query time: 36 msec
;; SERVER: 68.46.140.152#53(secondary.org)
;; WHEN: Wed Aug 18 00:23:55 2004
;; MSG SIZE  rcvd: 37

-- 
Barry Margolin, barmar at alum.mit.edu
Arlington, MA
*** PLEASE post questions in newsgroups, not directly to me ***