Weird results....

Mon Jun 9 17:57:28 UTC 2008

Here is the dig from a desktop that has 10.129.177.18 as the primary
server. 

; <<>> DiG 9.4.2 <<>> google.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: REFUSED, id: 15009
;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
;; WARNING: recursion requested but not available

;; QUESTION SECTION:
;google.com.			IN	A

;; Query time: 2 msec
;; SERVER: 10.129.177.18#53(10.129.177.18)
;; WHEN: Mon Jun  9 12:54:43 2008
;; MSG SIZE  rcvd: 28

root at UNIX-TEAM-LACAYO:/etc# 

Here is the did from with in the 10.129.177.18[root at co-wan03 sbin]# dig
google.com

; <<>> DiG 9.4.2 <<>> google.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 24523
;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 4, ADDITIONAL: 0

;; QUESTION SECTION:
;google.com.			IN	A

;; ANSWER SECTION:
google.com.		300	IN	A	64.233.187.99
google.com.		300	IN	A	64.233.167.99
google.com.		300	IN	A	72.14.207.99

;; AUTHORITY SECTION:
google.com.		342599	IN	NS	ns1.google.com.
google.com.		342599	IN	NS	ns2.google.com.
google.com.		342599	IN	NS	ns4.google.com.
google.com.		342599	IN	NS	ns3.google.com.

;; Query time: 57 msec
;; SERVER: 10.129.177.18#53(10.129.177.18)
;; WHEN: Mon Jun  9 12:57:11 2008
;; MSG SIZE  rcvd: 148

On Mon, 2008-06-09 at 12:39 -0500, Jeremy C. Reed wrote:
> > from the slaves I can do lookups to my local domains (8000+ including
> > reverse zones) with no problem, going out from a slave to resolve a zone
> > that I am not the Authority I get a message "** server can't find
> > google.com: NXDOMAIN", however when I do it from within the master
> > server it resolves just fine. 
> > 
> > I have checked and recursive is set to yes on all 4 of the servers. 
> 
> 
> We may need more information. What does "dig +trace google.com" tell you?
-- 
Luis Fernando Lacayo
Chicago Public Schools
Senior Unix Administrator
ITS/ UNIX Infrastructure
Office: 773-553-3835
Cell: 773-203-4493