no authoritative answer from master server
Mark Andrews
Mark_Andrews at isc.org
Thu Nov 17 21:46:18 UTC 2005
> On 11/17/05, Barry Margolin <barmar at alum.mit.edu> wrote:
> > In article <dlghpj$1f60$1 at sf1.isc.org>,
> > Fernando Soria <nandoria at gmail.com> wrote:
> >
> > > My doubt it's wen I do a query of the type ANY I forgot that... dig
> > > when no type is specified perform a lookup of the A record...
> > > like this:
> > > #dig @ns1.dnsdigital.com.ar ANY dnsdigital.com.ar <-- no authoritative an
> swer
> > > #dig @ns17.zoneedit.com.ar ANY dnsdigital.com.ar <-- authoritative answer
> >
> > A BIND server is either authoritative for a zone or not, it shouldn't
> > matter what record type is specified in the query. I've seen
> > type-specific differences with some non-BIND servers, but never with
> > BIND.
> >
> > Anyway, it's authoritative when I try it:
> >
> > ; <<>> DiG 9.2.2 <<>> @ns1.dnsdigital.com.ar any dnsdigital.com.ar +multi
> > ;; global options: printcmd
> > ;; Got answer:
> > ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 18610
> > ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 6, AUTHORITY: 0, ADDITIONAL: 2
> >
> > ;; QUESTION SECTION:
> > ;dnsdigital.com.ar. IN ANY
> >
> > ;; ANSWER SECTION:
> > dnsdigital.com.ar. 259200 IN SOA ns1.dnsdigital.com.ar.
> > soa.dnsdigital.com.ar. (
> > 2005102701 ; serial
> > 28800 ; refresh (8 hours)
> > 7200 ; retry (2 hours)
> > 2419200 ; expire (4 weeks)
> > 86400 ; minimum (1 day)
> > )
> > dnsdigital.com.ar. 259200 IN NS ns17.zoneedit.com.
> > dnsdigital.com.ar. 259200 IN NS ns1.dnsdigital.com.ar.
> > dnsdigital.com.ar. 259200 IN NS ns8.zoneedit.com.
> > dnsdigital.com.ar. 259200 IN MX 1 mail.dnsdigital.com.ar.
> > dnsdigital.com.ar. 259200 IN A 200.59.130.146
> >
> > ;; ADDITIONAL SECTION:
> > ns1.dnsdigital.com.ar. 259200 IN A 200.59.130.146
> > mail.dnsdigital.com.ar. 259200 IN A 200.59.130.146
> >
> > ;; Query time: 189 msec
> > ;; SERVER: 200.59.130.146#53(ns1.dnsdigital.com.ar)
> > ;; WHEN: Thu Nov 17 01:12:12 2005
> > ;; MSG SIZE rcvd: 211
> >
> > --
> > Barry Margolin, barmar at alum.mit.edu
> > Arlington, MA
> > *** PLEASE post questions in newsgroups, not directly to me ***
> >
>
> OK it see the problem now...
> The problem is me apparently, I'm confusing the output of dig the
> "->>HEADER<<-" part there is a AUTHORITY:0 when I query
> ns1.dnsdigital.com.ar but if I query ns17.zoneedit.com it prints
> AUTHORITY:3 why is that?
Different nameserver implementations. The answer section
is authoritative so the NS records in the authority are
redundant.
Mark
--
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742 INTERNET: Mark_Andrews at isc.org
More information about the bind-users
mailing list