Issue with MX lookups - recursion disabled
Chris Buxton
cbuxton at menandmice.com
Fri Aug 25 16:49:01 UTC 2006
Have you turned off application of the search list in nslookup? It's
on by default, and with Windows (and the Windows version of
nslookup), I'm not sure whether it's smart enough to query for the
original name first.
If that's not it, try sending a non-recursive query, or better yet,
using dig to send a non-recursive query - it's hard to tell what's
going on without using 'dig +norec' to see the entire response (and
to know exactly what the query was without having nslookup mangle it).
Chris Buxton
Men & Mice
On Aug 24, 2006, at 1:30 PM, Jack Ridgway wrote:
> I am running bind 9.2.6 on Windows 2003.
>
> I am trying to setup an authoritative only name server, so I have
> disabled recursion.
>
> However, when I do this, the server seems to have a problem
> resolving MX
> records for the domains it is authoritative for. When recursion is
> enabled, MX records resolve fine.
>
> Here is my named.conf:
>
> acl mynameservers {
> 216.79.144.2;
> 216.79.144.5;
> 216.79.144.6;
> 130.18.80.12;
> 130.18.80.13; };
>
> logging {
> category lame-servers {null; };
> category security {null; };
> category update {null; }; };
>
> options {
> directory "c:\winnt\system32\dns\etc";
> allow-transfer { mynameservers; };
> recursion no; };
>
> zone "0.0.127.in-addr.arpa" {
> type master;
> file "db.local";
> notify no; };
>
> zone "sbcjc.cc.ms.us" {
> type master;
> file "db.sbcjc.cc.ms.us";
> };
> Here is my zone file:
> $TTL 12h
> ;
> @ IN SOA webcache.sbcjc.cc.ms.us. hostmaster.sbcjc.cc.ms.us. (
> 2006022001
> 10800
> 3600
> 604800
> 38400 )
> ;
> IN NS webcache
> IN NS ons1
> IN NS ons2
> ;
> IN MX 5 ironport
> ;
> localhost IN A 127.0.0.1
> webcache IN A 216.79.144.2
> ironport IN A 216.79.144.3
> ons2 IN A 216.79.144.5
> ons1 IN A 216.79.144.6
> ;
>
> nslookup, recursion disabled:
>> set type=a
>> ironport.sbcjc.cc.ms.us
> Server: ons1.sbcjc.cc.ms.us
> Address: 216.79.144.6
>
> Name: ironport.sbcjc.cc.ms.us
> Address: 216.79.144.3
>
>> set type=mx
>> sbcjc.cc.ms.us
> Server: ons1.sbcjc.cc.ms.us
> Address: 216.79.144.6
>
> (root) nameserver = G.ROOT-SERVERS.NET
> (root) nameserver = H.ROOT-SERVERS.NET
> (root) nameserver = I.ROOT-SERVERS.NET
> (root) nameserver = J.ROOT-SERVERS.NET
> (root) nameserver = K.ROOT-SERVERS.NET
> (root) nameserver = L.ROOT-SERVERS.NET
> (root) nameserver = M.ROOT-SERVERS.NET
> (root) nameserver = A.ROOT-SERVERS.NET
> (root) nameserver = B.ROOT-SERVERS.NET
> (root) nameserver = C.ROOT-SERVERS.NET
> (root) nameserver = D.ROOT-SERVERS.NET
> (root) nameserver = E.ROOT-SERVERS.NET
> (root) nameserver = F.ROOT-SERVERS.NET
> A.ROOT-SERVERS.NET internet address = 198.41.0.4
> B.ROOT-SERVERS.NET internet address = 192.228.79.201
> C.ROOT-SERVERS.NET internet address = 192.33.4.12
> D.ROOT-SERVERS.NET internet address = 128.8.10.90
> E.ROOT-SERVERS.NET internet address = 192.203.230.10
> F.ROOT-SERVERS.NET internet address = 192.5.5.241
> G.ROOT-SERVERS.NET internet address = 192.112.36.4
> H.ROOT-SERVERS.NET internet address = 128.63.2.53
> I.ROOT-SERVERS.NET internet address = 192.36.148.17
> J.ROOT-SERVERS.NET internet address = 192.58.128.30
> K.ROOT-SERVERS.NET internet address = 193.0.14.129
> L.ROOT-SERVERS.NET internet address = 198.32.64.12
> M.ROOT-SERVERS.NET internet address = 202.12.27.33
>>
>
> nslookup with recursion enabled:
>> set type=a
>> ironport.sbcjc.cc.ms.us
> Server: ons1.sbcjc.cc.ms.us
> Address: 216.79.144.6
>
> Name: ironport.sbcjc.cc.ms.us
> Address: 216.79.144.3
>
>> set type=mx
>> sbcjc.cc.ms.us
> Server: ons1.sbcjc.cc.ms.us
> Address: 216.79.144.6
>
> sbcjc.cc.ms.us MX preference = 5, mail exchanger
> ironport.sbcjc.cc.ms.us
> sbcjc.cc.ms.us nameserver = webcache.sbcjc.cc.ms.us
> sbcjc.cc.ms.us nameserver = ons1.sbcjc.cc.ms.us
> sbcjc.cc.ms.us nameserver = ons2.sbcjc.cc.ms.us
> ironport.sbcjc.cc.ms.us internet address = 216.79.144.3
> ons1.sbcjc.cc.ms.us internet address = 216.79.144.6
> ons2.sbcjc.cc.ms.us internet address = 216.79.144.5
> webcache.sbcjc.cc.ms.us internet address = 216.79.144.2
>>
>
> Any ideas what I am missing?
>
>
>
>
More information about the bind-users
mailing list