Strange issue - please enlighten me
Mark Andrews
marka at isc.org
Sat Feb 20 22:52:32 UTC 2010
In message <20100220192646.GB14801 at fantomas.sk>, Matus UHLAR - fantomas writes:
> > Marco Davids (SIDN) wrote:
> >
> > > Anyone any clue? I am trying to understand why some resolvers handle
> > > this query well, while BIND 9.7.x returns a SERVFAIL.
>
> On 19.02.10 13:21, Alan Clegg wrote:
> > aclegg at Yellow:~$ dig +short airfrance.fr ns
> > webaf1.airfrance.fr.
> > lasvegas.airfrance.fr.
> > proof.rain.fr.
> >
> > aclegg at Yellow:~$ dig +short @webaf1.airfrance.fr. www.airfrance.fr
> > aclegg at Yellow:~$ dig +short @lasvegas.airfrance.fr. www.airfrance.fr
> > aclegg at Yellow:~$ dig +short @proof.rain.fr. www.airfrance.fr
> >
> > All three of these servers, however, provide NS responses:
> >
> > www.airfrance.fr. 87600 IN NS ns2isp2.airfrance.fr.
> > www.airfrance.fr. 87600 IN NS ns2isp1.airfrance.fr.
> >
> > That's not right... all three of the servers are "lame" (as you noted
> > from your logfile).
> >
> > airfrance.fr needs to fix their delegations.
>
> like other domains I have seen before, they delegated the "www.airfrance.fr"
> record to broken nameservers that can not return proper answers for ANY or
> NS requests. ryanair.com is one of those, ccs.cz/ccs.sk are another.
>
> I have no idea what kind of nameservers are they, but they're either broken o
> r
> their admins do not know how to properly configure zone delegation.
> No, NS delegations ni parent zones are NOT enough.
Yet another misconfigured load balancer. When will DNS admins learn
that the net has not been just A queries and you actually need to
test that the load balancer can answer queries other that A queries.
Mark
; <<>> DiG 9.3.6-P1 <<>> www.airfrance.fr @ns2isp2.airfrance.fr +norec +dnssec
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 56821
;; flags: qr aa; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 2048
;; QUESTION SECTION:
;www.airfrance.fr. IN A
;; ANSWER SECTION:
www.airfrance.fr. 60 IN A 193.57.244.36
;; Query time: 351 msec
;; SERVER: 193.57.219.253#53(193.57.219.253)
;; WHEN: Sun Feb 21 09:46:07 2010
;; MSG SIZE rcvd: 61
; <<>> DiG 9.3.6-P1 <<>> www.airfrance.fr @ns2isp2.airfrance.fr +norec +dnssec aaaa
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 48998
;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 13, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 4096
;; QUESTION SECTION:
;www.airfrance.fr. IN AAAA
;; AUTHORITY SECTION:
. 518400 IN NS G.ROOT-SERVERS.NET.
. 518400 IN NS H.ROOT-SERVERS.NET.
. 518400 IN NS I.ROOT-SERVERS.NET.
. 518400 IN NS J.ROOT-SERVERS.NET.
. 518400 IN NS K.ROOT-SERVERS.NET.
. 518400 IN NS L.ROOT-SERVERS.NET.
. 518400 IN NS M.ROOT-SERVERS.NET.
. 518400 IN NS A.ROOT-SERVERS.NET.
. 518400 IN NS B.ROOT-SERVERS.NET.
. 518400 IN NS C.ROOT-SERVERS.NET.
. 518400 IN NS D.ROOT-SERVERS.NET.
. 518400 IN NS E.ROOT-SERVERS.NET.
. 518400 IN NS F.ROOT-SERVERS.NET.
;; Query time: 353 msec
;; SERVER: 193.57.219.253#53(193.57.219.253)
;; WHEN: Sun Feb 21 09:46:12 2010
;; MSG SIZE rcvd: 256
> --
> Matus UHLAR - fantomas, uhlar at fantomas.sk ; http://www.fantomas.sk/
> Warning: I wish NOT to receive e-mail advertising to this address.
> Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
> Spam = (S)tupid (P)eople's (A)dvertising (M)ethod
> _______________________________________________
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
--
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742 INTERNET: marka at isc.org
More information about the bind-users
mailing list