DNS format error

[Lightner, Jeff]

http://www.vip.icann.org/DS?

The http:// and /DS wouldn't be part of DNS name itself so you can't dig for that.   You'd have to point a browser (or command line tool like wget or curl) to get that web page.

The vip IS part of the DNS name.  Did you try "dig www.vip.icann.org"?   It works for me.

Also nmap confirms port 80 is open for the above so http traffic should work assuming the web page is up.


-----Original Message-----
From: bind-users-bounces at lists.isc.org [mailto:bind-users-bounces at lists.isc.org] On Behalf Of Yang Yu
Sent: Tuesday, July 28, 2015 12:10 PM
To: bind-users at lists.isc.org
Subject: DNS format error

I spotted DNS format error in bind 9.9.5 log

queries
28-Jul-2015 23:19:27.198 client client_IP #50270 (www.icann.org):
query: www.icann.org IN AAAA + (client_IP)
28-Jul-2015 23:19:29.872 client client_IP #46483 (www.icann.org):
query: www.icann.org IN A + (client_IP)


resolver
28-Jul-2015 23:19:35.621 DNS format error from 192.0.32.252#53 resolving www.vip.icann.org/DS: inval id response
28-Jul-2015 23:19:35.789 DNS format error from 192.0.36.252#53 resolving www.vip.icann.org/DS: inval id response
28-Jul-2015 23:19:36.022 DNS format error from 192.0.47.252#53 resolving www.vip.icann.org/DS: inval id response

I am unable to replicate this issue with dig www.icann.org. What could have bind received that resulted in DNS format error in this particular case?

Yang
_______________________________________________
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list

bind-users mailing list
bind-users at lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users