bad horizontal referral ?

[Kevin Darcy]

What version of dig are you using? I don't seem to be having a problem:

$ dig tice.ac-orleans-tours.fr @dns1.ac-orleans-tours.fr. +nssearch +trace
SOA dns2.tice.ac-orleans-tours.fr. root.tice.ac-orleans-tours.fr. 
2008031103 28800 7200 604800 86400 from server 
dns4.tice.ac-orleans-tours.fr in 121 ms.
SOA dns2.tice.ac-orleans-tours.fr. root.tice.ac-orleans-tours.fr. 
2008031103 28800 7200 604800 86400 from server dns1.ac-orleans-tours.fr 
in 123 ms.
SOA dns2.tice.ac-orleans-tours.fr. root.tice.ac-orleans-tours.fr. 
2008031103 28800 7200 604800 86400 from server 
dns2.tice.ac-orleans-tours.fr in 125 ms.
SOA dns2.tice.ac-orleans-tours.fr. root.tice.ac-orleans-tours.fr. 
2008031103 28800 7200 604800 86400 from server dns1.ac-orleans-tours.fr 
in 123 ms.
SOA dns2.tice.ac-orleans-tours.fr. root.tice.ac-orleans-tours.fr. 
2008031103 28800 7200 604800 86400 from server 
dns2.tice.ac-orleans-tours.fr in 164 ms.
SOA dns2.tice.ac-orleans-tours.fr. root.tice.ac-orleans-tours.fr. 
2008031103 28800 7200 604800 86400 from server 
dns4.tice.ac-orleans-tours.fr in 164 ms.
SOA dns2.tice.ac-orleans-tours.fr. root.tice.ac-orleans-tours.fr. 
2008031103 28800 7200 604800 86400 from server dns1.ac-orleans-tours.fr 
in 122 ms.
SOA dns2.tice.ac-orleans-tours.fr. root.tice.ac-orleans-tours.fr. 
2008031103 28800 7200 604800 86400 from server 
dns4.tice.ac-orleans-tours.fr in 123 ms.
SOA dns2.tice.ac-orleans-tours.fr. root.tice.ac-orleans-tours.fr. 
2008031103 28800 7200 604800 86400 from server 
dns2.tice.ac-orleans-tours.fr in 123 ms.
$

                                                                         
               - Kevin

Jean-François Leroux wrote:
> Oh, sorry, both of you. I had misunderstood the question. Thanks for
> offering help :-)
>
> Here it is : tice.ac-orleans-tours.fr
>
> 2008/3/13, Kevin Darcy <kcd at chrysler.com>:
>   
>> Examples work perfectly, assuming they're constructed properly.
>>
>>  If you want help on a real zone, you'll need to give the real zone name,
>>  not an example name.
>>
>>  FYI, myzone.com is delegated to ns1.netnation.com and ns2.netnation.com,
>>  neither of which appear to be giving horizontal referrals.
>>
>>
>>
>>                   - Kevin
>>
>>
>>
>>  Jean-François Leroux wrote:
>>  > The zone, in my example, is called myzone.com. Private zone is
>>  > private.myzone.com.
>>  >
>>  > 2008/3/13, Barry Margolin <barmar at alum.mit.edu>:
>>  >
>>  >> In article <fr96i6$1bt6$1 at sf1.isc.org>,
>>  >>
>>  >>  "Jean-Francois Leroux" <leroux.jeanfrancois at gmail.com> wrote:
>>  >>
>>  >>  > Ok, I understand. Thanks for the explanation.
>>  >>  >
>>  >>  > Now, here's my problem. I have two dns servers in a public zone (which
>>  >>  > I'm testing), and when I issue a dig myzone.com @myserver1.myzone.com
>>  >>  > (or myserver2) +nsserach +trace, I always get this message. Could it
>>  >>  > be that there's a problem with my setup? As far as I understand bind,
>>  >>  > it should be ok, the second one being slave of the first one. They're
>>  >>  > on the same level though, since both are slaves of a single master in
>>  >>  > the private zone. Is this a problem?
>>  >>
>>  >>
>>  >> What's the zone?
>>  >>
>>  >>
>>  >>  >
>>  >>  >
>>  >>  > 2008/3/12, Kevin Darcy <kcd at chrysler.com>:
>>  >>
>>  >>
>>  >>>> Jean-Francois Leroux wrote:
>>  >>>>
>>  >>  > >  > Thanks for the explanation, Kevin. If I may ask, what means
>>  >>  > >  > 'horizontal' in the message? I've had a look in my DNS & Bind book but
>>  >>  > >  > couldn't find anything about it...
>>  >>  > >  > And while I'm thinking of it, how can I know which server refers me to
>>  >>  > >  > a wrong address? Is this possible ?
>>  >>  > >  >
>>  >>  > >  >
>>  >>  > >  > 2008/3/12, Kevin Darcy <kcd at chrysler.com>:
>>  >>  > >  >
>>  >>
>>  >>
>>  >>>>  >> Jean-Francois Leroux wrote:
>>  >>>>
>>  >>  > >  >>  > Hi,
>>  >>  > >  >>  > doing a trace with dig today I got a 'BAD (HORIZONTAL) REFERRAL'
>>  >>  > >  >>  > message, with the correct answer though.
>>  >>  > >  >>  >  What does this mean ?
>>  >>  > >  >>  >
>>  >>  > >  >>  >
>>  >>  > >  >>  >
>>  >>  > >  >>
>>  >>  > >  >> Referrals should be "down" not "across". If you're resolving www.foo.com
>>  >>  > >  >>  iteratively and along the way a delegated nameserver for foo.com refers
>>  >>  > >  >>  you to blah.com, that's a useless referral because it doesn't get you
>>  >>  > >  >>  any closer to resolving the name.
>>  >>  > >  >>
>>  >>  > >  >>  Dig probably got the correct answer because it gave up on the broken
>>  >>  > >  >>  nameserver and tried a different one.
>>  >>  > >  >>
>>  >>  > >
>>  >>  > > "Horizontal" means at the same level of the hierarchy. The DNS namespace
>>  >>  > >  is often viewed as being tree-like, with the "root" at the top and each
>>  >>  > >  level of subdomain extending downwards. If a referral is "across" rather
>>  >>  > >  than "down", it's "horizontal" instead of "vertical".
>>  >>  > >
>>  >>  > >  So many prepositions, so little time...
>>  >>  > >
>>  >>  > >
>>  >>  > >
>>  >>  > >       - Kevin
>>  >>  > >
>>  >>  > >
>>  >>  > >
>>  >>
>>  >>
>>  >> --
>>  >>  Barry Margolin, barmar at alum.mit.edu
>>  >>  Arlington, MA
>>  >>  *** PLEASE don't copy me on replies, I'll read them in the group ***
>>  >>
>>  >>
>>  >>
>>  >
>>  >
>>  >
>>  >
>>
>>
>>
>>     
>
>
>
>