strange resolution problem...

[Michael Hale]

Something strange is going on with some of my nameservers...

Basically, a dig +trace will work to resolve the domain, while a plain 
dig times out.  This only seems to happen with a few certain domains 
though...

for instance:

mhale at dfw-nsadmin:/home/mhale {254} ./dig americanief.org 
@resolv1.dllstx09.us.to.verio.net

; <<>> DiG 9.2.1 <<>> americanief.org @resolv1.dllstx09.us.to.verio.net
;; global options:  printcmd
;; connection timed out; no servers could be reached

however:

mhale at dfw-nsadmin:/home/mhale {255} ./dig +trace americanief.org 
@resolv1.dlltx09.us.to.verio.net

; <<>> DiG 9.2.1 <<>> +trace americanief.org 
@resolv1.dllstx09.us.to.verio.net
;; global options:  printcmd
.                       129420  IN      NS      D.ROOT-SERVERS.NET.
.                       129420  IN      NS      A.ROOT-SERVERS.NET.
.                       129420  IN      NS      H.ROOT-SERVERS.NET.
.                       129420  IN      NS      C.ROOT-SERVERS.NET.
.                       129420  IN      NS      G.ROOT-SERVERS.NET.
.                       129420  IN      NS      F.ROOT-SERVERS.NET.
.                       129420  IN      NS      B.ROOT-SERVERS.NET.
.                       129420  IN      NS      J.ROOT-SERVERS.NET.
.                       129420  IN      NS      K.ROOT-SERVERS.NET.
.                       129420  IN      NS      L.ROOT-SERVERS.NET.
.                       129420  IN      NS      M.ROOT-SERVERS.NET.
.                       129420  IN      NS      I.ROOT-SERVERS.NET.
.                       129420  IN      NS      E.ROOT-SERVERS.NET.
;; Received 436 bytes from 
129.250.16.198#53(resolv1.dllstx09.us.to.verio.net) in 6 ms

org.                    172800  IN      NS      TLD1.ULTRADNS.NET.
org.                    172800  IN      NS      TLD2.ULTRADNS.NET.
;; Received 115 bytes from 128.8.10.90#53(D.ROOT-SERVERS.NET) in 48 ms

americanief.org.        86400   IN      NS      ns18.zoneedit.com.
americanief.org.        86400   IN      NS      ns12.zoneedit.com.
;; Received 83 bytes from 204.74.112.1#53(TLD1.ULTRADNS.NET) in 49 ms

americanief.org.        7200    IN      A       209.189.63.111
americanief.org.        7200    IN      NS      ns12.zoneedit.com.
americanief.org.        7200    IN      NS      ns18.zoneedit.com.
;; Received 99 bytes from 65.125.227.35#53(ns18.zoneedit.com) in 294 ms

The domains in question are:

useeducationfair.com
americanief.org
aief-usa.org
americaneducationfair.com

To make matters more strange, a dig +norecurs will work:

dig +norecurs americanief.org @resolv1.dllstx09.us.to.verio.net

; <<>> DiG 8.2 <<>> +norecurs americanief.org 
@resolv1.dllstx09.us.to.verio.net
; (1 server found)
;; res options: init defnam dnsrch
;; got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 16323
;; flags: qr ra; QUERY: 1, ANSWER: 0, AUTHORITY: 2, ADDITIONAL: 2
;; QUERY SECTION:
;;      americanief.org, type = A, class = IN

;; AUTHORITY SECTION:
americanief.org.        23h50m54s IN NS  ns18.zoneedit.com.
americanief.org.        23h50m54s IN NS  ns12.zoneedit.com.

;; ADDITIONAL SECTION:
ns18.zoneedit.com.      1d11h9m51s IN A  65.125.227.35
ns12.zoneedit.com.      1d23h47m8s IN A  64.246.26.64

;; Total query time: 2 msec
;; FROM: dfw-nsadmin to SERVER: resolv1.dllstx09.us.to.verio.net  
129.250.16.198
;; WHEN: Tue Feb 24 11:38:47 2004
;; MSG SIZE  sent: 33  rcvd: 115

Any ideas?  I've never seen this behavior before


--
Michael Hale					<smiley at verio.net
ISS Engineer - DNS			 	NTT/Verio