odd MX entry error in zone file

Thu Feb 3 20:18:55 UTC 2022

Your chroot directory is not fully populated and getaddrinfo is failing as a result. named-checkzone tries to perform address lookups for MX targets by calling getaddrinfo for out of zone names and that uses getaddrinfo.  You need to add /etc/resolv.conf and/or whatever your OS requires for getaddrinfo to work.

Whether lookup failures are fatal or not is controlled by command line options. See the man page.

-- 
Mark Andrews

> On 4 Feb 2022, at 04:56, Bruce Johnson via bind-users <bind-users at lists.isc.org> wrote:
> 
> I added a new zone to our domain today and ran named-checkzone and got the following when it ran:
> 
> named-checkzone -t /var/named/chroot Pharmacy.Arizona.EDU /etc/Pharmacy.Hosts
> zone Pharmacy.Arizona.EDU/IN: getaddrinfo(xxxxxxx1.barracudanetworks.com) failed: System error
> zone Pharmacy.Arizona.EDU/IN: getaddrinfo(xxxxxxx2.barracudanetworks.com) failed: System error
> zone Pharmacy.Arizona.EDU/IN: loaded serial 1762233835
> OK
> 
> These are our Barracuda cloud service addresses set as MX entries in the zone:
> 
> ;MX records
> ;pharmacy.arizona.edu. 3600    IN    MX    99    barracuda.pharmacy.arizona.edu. ;message exchangeer
> pharmacy.arizona.edu.    3600    IN    MX    10    xxxxxxx1.barracudanetworks.com.
> pharmacy.arizona.edu.    3600    IN    MX    10    xxxxxxx1.barracudanetworks.com.
> 
> Mail is working and the OK at the end of the named-checkzone output indicates that it thinks the zone file passes ok. 
> 
> I can resolve the actual addresses without an issue :
> 
> dig d256777b.ess.barracudanetworks.com @elixir.pharmacy.arizona.edu
> 
> ; <<>> DiG 9.10.6 <<>> d256777b.ess.barracudanetworks.com @elixir.pharmacy.arizona.edu
> ;; global options: +cmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 3699
> ;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 13, ADDITIONAL: 27
> 
> ;; OPT PSEUDOSECTION:
> ; EDNS: version: 0, flags:; udp: 4096
> ;; QUESTION SECTION:
> ;d256777b.ess.barracudanetworks.com. IN    A
> 
> ;; ANSWER SECTION:
> d256777b.ess.barracudanetworks.com. 60 IN A    209.222.82.252
> d256777b.ess.barracudanetworks.com. 60 IN A    209.222.82.253
> d256777b.ess.barracudanetworks.com. 60 IN A    209.222.82.255
> 
> ;; AUTHORITY SECTION:
> com.            8416    IN    NS    k.gtld-servers.net.
> com.            8416    IN    NS    i.gtld-servers.net.
> com.            8416    IN    NS    b.gtld-servers.net.
> com.            8416    IN    NS    a.gtld-servers.net.
> com.            8416    IN    NS    l.gtld-servers.net.
> com.            8416    IN    NS    d.gtld-servers.net.
> com.            8416    IN    NS    g.gtld-servers.net.
> com.            8416    IN    NS    h.gtld-servers.net.
> com.            8416    IN    NS    m.gtld-servers.net.
> com.            8416    IN    NS    f.gtld-servers.net.
> com.            8416    IN    NS    e.gtld-servers.net.
> com.            8416    IN    NS    j.gtld-servers.net.
> com.            8416    IN    NS    c.gtld-servers.net.
> 
> ;; ADDITIONAL SECTION:
> e.gtld-servers.net.    149240    IN    A    192.12.94.30
> m.gtld-servers.net.    10936    IN    A    192.55.83.30
> d.gtld-servers.net.    10936    IN    A    192.31.80.30
> b.gtld-servers.net.    53266    IN    A    192.33.14.30
> j.gtld-servers.net.    53266    IN    A    192.48.79.30
> i.gtld-servers.net.    53266    IN    A    192.43.172.30
> c.gtld-servers.net.    10936    IN    A    192.26.92.30
> g.gtld-servers.net.    53266    IN    A    192.42.93.30
> h.gtld-servers.net.    169371    IN    A    192.54.112.30
> f.gtld-servers.net.    10936    IN    A    192.35.51.30
> a.gtld-servers.net.    82539    IN    A    192.5.6.30
> k.gtld-servers.net.    10936    IN    A    192.52.178.30
> l.gtld-servers.net.    10936    IN    A    192.41.162.30
> e.gtld-servers.net.    53266    IN    AAAA    2001:502:1ca1::30
> m.gtld-servers.net.    169371    IN    AAAA    2001:501:b1f9::30
> d.gtld-servers.net.    53266    IN    AAAA    2001:500:856e::30
> b.gtld-servers.net.    169371    IN    AAAA    2001:503:231d::2:30
> j.gtld-servers.net.    149240    IN    AAAA    2001:502:7094::30
> i.gtld-servers.net.    64023    IN    AAAA    2001:503:39c1::30
> c.gtld-servers.net.    169371    IN    AAAA    2001:503:83eb::30
> g.gtld-servers.net.    169371    IN    AAAA    2001:503:eea3::30
> h.gtld-servers.net.    10936    IN    AAAA    2001:502:8cc::30
> f.gtld-servers.net.    169371    IN    AAAA    2001:503:d414::30
> a.gtld-servers.net.    20333    IN    AAAA    2001:503:a83e::2:30
> k.gtld-servers.net.    53266    IN    AAAA    2001:503:d2d::30
> l.gtld-servers.net.    53266    IN    AAAA    2001:500:d937::30
> 
> ;; Query time: 15 msec
> ;; SERVER: 128.196.116.5#53(128.196.116.5)
> ;; WHEN: Thu Feb 03 10:26:49 MST 2022
> ;; MSG SIZE  rcvd: 907
> 
> 
> And I don’t see anything in the logs about this.
> 
> 
> -- 
> Bruce Johnson
> University of Arizona
> College of Pharmacy
> Information Technology Group
> 
> Institutions do not have opinions, merely customs
> 
> -- 
> Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list
> 
> ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information.
> 
> 
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users