Dig ANY gives SERVFAIL / FORMERR
Mark Andrews
marka at isc.org
Wed Sep 23 21:16:35 UTC 2009
In message <alpine.NEB.2.01.0909231442321.415 at t1.m.reedmedia.net>, "Jeremy C. Re
ed" writes:
> > It looks like that the authoritative name server for youbei.cc
> > actually did return some answers, but somehow bind gave a FORMERR for
> > some unknown reasons, which I think it caused a SERVFAIL to be
> > reported in turn. Interestingly, dig any youbei.cc +trace ran
> > successfully and did not report any error.
> >
> > Does anyone know what might have caused this problem?
>
> My custom named logs:
>
> 23-Sep-2009 15:00:29.749 resolver: notice: FORMERR: Type didn't match (ANY !=
> A)
> 23-Sep-2009 15:00:29.770 resolver: notice: FORMERR: Reply has no answer.
>
> named wants to know "Is the question the same as the one we asked?"
>
> I think 72dns.com has a broken DNS server.
More modern versions of dig will also report the mismatch. The
servers also answers AAAA queries with A records.
It's a pity registries are not required to verify correct operation
of the nameservers they are delegating to before accepting the
delegation. If they were then a lot of this garbage would cease.
It really isn't hard for a registry (or the registrar on behalf of
the registry) to check that servers answer queries correctly. Just
the almighty dollar has got in front of having a working system.
Mark
% dig any youbei.cc @ns1.72dns.com
;; Question section mismatch: got youbei.cc/A/IN
;; Question section mismatch: got youbei.cc/A/IN
;; Question section mismatch: got youbei.cc/A/IN
; <<>> DiG 9.7.0a2 <<>> any youbei.cc @ns1.72dns.com
;; global options: +cmd
;; connection timed out; no servers could be reached
%
% dig aaaa youbei.cc @ns1.72dns.com
; <<>> DiG 9.3.6-P1 <<>> aaaa youbei.cc @ns1.72dns.com
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 5189
;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION:
;youbei.cc. IN AAAA
;; ANSWER SECTION:
youbei.cc. 3600 IN A 211.155.230.241
;; Query time: 436 msec
;; SERVER: 121.12.173.174#53(121.12.173.174)
;; WHEN: Thu Sep 24 07:07:46 2009
;; MSG SIZE rcvd: 52
%
> _______________________________________________
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
--
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742 INTERNET: marka at isc.org
More information about the bind-users
mailing list