9.18 BIND not resolving .gov.bd site
Mosharaf Hossain
mosharaf.hossain at bol-online.com
Tue Oct 31 04:53:34 UTC 2023
Hello All
The problem of the .gov.bd domain resolution has been successfully
resolved.
In the zone file configuration, there was a forward entry for .gov.bd, and
after commenting out those lines, all .gov.bd domains are now functioning
correctly.
Thank you all for providing the right guidance that helped us pinpoint the
issue."
root at ns1:/# dig mofa.gov.bd +trace
\
; <<>> DiG 9.18.19-1~deb12u1-Debian <<>> mofa.gov.bd +trace
;; global options: +cmd
. 452497 IN NS m.root-servers.net.
. 452497 IN NS i.root-servers.net.
. 452497 IN NS e.root-servers.net.
. 452497 IN NS g.root-servers.net.
. 452497 IN NS l.root-servers.net.
. 452497 IN NS a.root-servers.net.
. 452497 IN NS j.root-servers.net.
. 452497 IN NS b.root-servers.net.
. 452497 IN NS c.root-servers.net.
. 452497 IN NS f.root-servers.net.
. 452497 IN NS h.root-servers.net.
. 452497 IN NS d.root-servers.net.
. 452497 IN NS k.root-servers.net.
. 452497 IN RRSIG NS 8 0 518400
20231112050000 20231030040000 46780 .
KOSvh8dmDkcY070FSYz+vAkH6BC+ZR4nGbEu0plshkZZX47oFXFpsHTJ
/LiU7G7KXp6gE+g+QDcHk/HPEljGFNY5RwvzQaCjHGG063ypr+Huj1vJ
0SR03fSwm1FALKZ0EFNI2aIfpxY/1S8xc2HzZmHuneQcp7mTY7i+KtOY
z8ljk2jQbdCjHYPg/AgIPtF2+507LnFScSCTw+zOVFYFktoPHyy/wDIk
3G0VQQIQG5+1kjn7YZl1yuyxiSqJhq1+7tSkrL3AKhA4fJtynJcBbZsw
dq3mVHPfARjUjby2WNt/M2clERoo+W/zYsZpkKamUpvTNm6gYnnt2xUV 8F5/Ow==
;; Received 1137 bytes from 202.84.32.22#53(202.84.32.22) in 0 ms
bd. 172800 IN NS surma.btcl.net.bd.
bd. 172800 IN NS dns.bd.
bd. 172800 IN NS bd-ns.anycast.pch.net.
bd. 172800 IN NS jamuna.btcl.net.bd.
bd. 86400 IN DS 26044 8 2
BD01C4B4345D21FC38AA88129F7BC00FDD7B422799CC6703736E3B38 1F37DD5B
bd. 86400 IN DS 26044 8 1
2DAD1B7F8CA778464F536FDDD15EFD24CCCB62EF
bd. 86400 IN RRSIG DS 8 1 86400 20231112170000
20231030160000 46780 .
IFF4dDc0UEceikw9rf2bEaz/4LZtyCHeKAxX+gD8okseRzK1EcheFZ53
m8ZJtUa/ptVRIm6Hvwc8HTq7KeRKoCULw2isoqB/gNJDc+PasE0/2Uq8
vEY0CCPJad/zKRAjSXxkI6tmvOt3a3Mk6soTIOFCiK0eITwx2sJsdIGZ
/wL3cfaqSHh1735dWtg0kWFstyesSida7YHjNyOsJ/X/mUMEInhFdHzR
mg3Sa64FUy8BamA/yTUazNb3VG3yRS9ZUFJXeMib7qjSspDEqb2dTKzy
RvFxiNKOD5rDoCN3/Da6hi/dBhCLL9Zh+6mhsV0KHLahoKI2Bl2xw2v3 F9hFyA==
;; Received 722 bytes from 192.36.148.17#53(i.root-servers.net) in 51 ms
mofa.gov.bd. 86400 IN NS ns1.bcc.gov.bd.
mofa.gov.bd. 86400 IN NS ns2.bcc.gov.bd.
;; Received 146 bytes from 204.61.216.108#53(bd-ns.anycast.pch.net) in 0 ms
mofa.gov.bd. 38400 IN A 103.163.210.117
mofa.gov.bd. 38400 IN A 103.163.210.121
mofa.gov.bd. 38400 IN NS ns1.bcc.gov.bd.
mofa.gov.bd. 38400 IN NS ns2.bcc.gov.bd.
;; Received 146 bytes from 114.130.54.124#53(ns2.bcc.gov.bd) in 0 ms
Regards
Mosharaf Hossain
Manager, Product Development
IT Division
Bangladesh Export Import Company Ltd.
Level-8, SAM Tower, Plot #4, Road #22, Gulshan-1, Dhaka-1212,Bangladesh
Tel: +880 9609 000 999, +880 2 5881 5559, Ext: 14191, Fax: +880 2 9895757
Cell: +8801787680828, Email: mosharaf.hossain at bol-online.com, Web:
www.bol-online.com
<https://www.google.com/url?q=http://www.bol-online.com&sa=D&source=hangouts&ust=1557908951423000&usg=AFQjCNGMxIuHSHsD3qO6y5JddpEZ0S592A>
On Tue, Oct 31, 2023 at 7:15 AM Mark Andrews <marka at isc.org> wrote:
>
>
> > On 30 Oct 2023, at 17:25, Mosharaf Hossain <
> mosharaf.hossain at bol-online.com> wrote:
> >
> > mofa.gov.bd. 86400 IN NS ns1.bcc.gov.bd.
> > mofa.gov.bd. 86400 IN NS ns2.bcc.gov.bd.
> > couldn't get address for 'ns1.bcc.gov.bd': not found
> > couldn't get address for 'ns2.bcc.gov.bd': not found
> > dig: couldn't get address for 'ns1.bcc.gov.bd': no more
> > root at ns1:/etc/bind#
>
> So you got this this point and that is saying that the lookup of
> the addresses of the nameservers is failing. The next step would to
> do a 'dig +trace' or a 'dig +trace +all' of those names.
>
> % dig +trace ns1.bcc.gov.bd. +all -4
> ;; BADCOOKIE, retrying.
>
> ; <<>> DiG 9.19.18-dev <<>> +trace ns1.bcc.gov.bd. +all -4
> ;; global options: +cmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 11927
> ;; flags: qr rd ra ad; QUERY: 1, ANSWER: 14, AUTHORITY: 0, ADDITIONAL: 27
>
> ;; OPT PSEUDOSECTION:
> ; EDNS: version: 0, flags: do; udp: 1232
> ; COOKIE: 69a562ec1c50e22801000000654052b51e141922bd619839 (good)
> ;; QUESTION SECTION:
> ;. IN NS
>
> ;; ANSWER SECTION:
> . 193742 IN NS b.root-servers.net.
> . 193742 IN NS c.root-servers.net.
> . 193742 IN NS d.root-servers.net.
> . 193742 IN NS g.root-servers.net.
> . 193742 IN NS j.root-servers.net.
> . 193742 IN NS l.root-servers.net.
> . 193742 IN NS i.root-servers.net.
> . 193742 IN NS h.root-servers.net.
> . 193742 IN NS k.root-servers.net.
> . 193742 IN NS a.root-servers.net.
> . 193742 IN NS f.root-servers.net.
> . 193742 IN NS e.root-servers.net.
> . 193742 IN NS m.root-servers.net.
> . 193742 IN RRSIG NS 8 0 518400 20231109050000 20231027040000 46780 .
> CkAeB9x0RdrjpMfUJWlZS8F8YwnNj8KY7CYkukIncgzX1eve21wHBkgF
> kXrIEQP7Atkq4/KYqsgs4fKnFwIkxtEqqDDvkU/635/cYgOFaBKiU5Di
> 4sPC5Q/q8jORU4WPM7vg+j7bY48qEaoTImPuT+EQpI4HF5uHekYm9F35
> tJENhmLryMv8K4+072w2eaOTc45wirnVNxhxZ2QK8aZylubq2ELQ43aJ
> GgRmrFhujt8jzi20OvySAq1MNCd3Dy0Xqh99DSu6YkhflypgZXeUEiRV
> 8/HB33V9yQBs/GNXjajxSw/NwxLAxMDNv8kdkE08YBWTZLQfPmY/+ZDU FEchxA==
>
> ;; ADDITIONAL SECTION:
> l.root-servers.net. 135488 IN A 199.7.83.42
> g.root-servers.net. 135488 IN A 192.112.36.4
> i.root-servers.net. 135488 IN A 192.36.148.17
> h.root-servers.net. 135488 IN A 198.97.190.53
> k.root-servers.net. 135488 IN A 193.0.14.129
> j.root-servers.net. 135488 IN A 192.58.128.30
> d.root-servers.net. 135488 IN A 199.7.91.13
> b.root-servers.net. 135488 IN A 199.9.14.201
> a.root-servers.net. 135488 IN A 198.41.0.4
> f.root-servers.net. 135488 IN A 192.5.5.241
> e.root-servers.net. 135488 IN A 192.203.230.10
> c.root-servers.net. 135488 IN A 192.33.4.12
> m.root-servers.net. 135488 IN A 202.12.27.33
> l.root-servers.net. 135488 IN AAAA 2001:500:9f::42
> g.root-servers.net. 135488 IN AAAA 2001:500:12::d0d
> i.root-servers.net. 135488 IN AAAA 2001:7fe::53
> h.root-servers.net. 135488 IN AAAA 2001:500:1::53
> k.root-servers.net. 135488 IN AAAA 2001:7fd::1
> j.root-servers.net. 135488 IN AAAA 2001:503:c27::2:30
> d.root-servers.net. 135488 IN AAAA 2001:500:2d::d
> b.root-servers.net. 135488 IN AAAA 2001:500:200::b
> a.root-servers.net. 135488 IN AAAA 2001:503:ba3e::2:30
> f.root-servers.net. 135488 IN AAAA 2001:500:2f::f
> e.root-servers.net. 135488 IN AAAA 2001:500:a8::e
> c.root-servers.net. 135488 IN AAAA 2001:500:2::c
> m.root-servers.net. 135488 IN AAAA 2001:dc3::35
>
> ;; Query time: 0 msec
> ;; SERVER: 127.0.0.1#53(127.0.0.1) (UDP)
> ;; WHEN: Tue Oct 31 12:04:53 AEDT 2023
> ;; MSG SIZE rcvd: 1125
>
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 38819
> ;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 7, ADDITIONAL: 9
>
> ;; OPT PSEUDOSECTION:
> ; EDNS: version: 0, flags: do; udp: 1232
> ; COOKIE: 69a562ec1c50e22801000000654052b5f101b47fe1d10f06 (good)
> ;; QUESTION SECTION:
> ;ns1.bcc.gov.bd. IN A
>
> ;; AUTHORITY SECTION:
> bd. 172800 IN NS dns.bd.
> bd. 172800 IN NS surma.btcl.net.bd.
> bd. 172800 IN NS bd-ns.anycast.pch.net.
> bd. 172800 IN NS jamuna.btcl.net.bd.
> bd. 86400 IN DS 26044 8 1 2DAD1B7F8CA778464F536FDDD15EFD24CCCB62EF
> bd. 86400 IN DS 26044 8 2
> BD01C4B4345D21FC38AA88129F7BC00FDD7B422799CC6703736E3B38 1F37DD5B
> bd. 86400 IN RRSIG DS 8 1 86400 20231112170000 20231030160000 46780 .
> IFF4dDc0UEceikw9rf2bEaz/4LZtyCHeKAxX+gD8okseRzK1EcheFZ53
> m8ZJtUa/ptVRIm6Hvwc8HTq7KeRKoCULw2isoqB/gNJDc+PasE0/2Uq8
> vEY0CCPJad/zKRAjSXxkI6tmvOt3a3Mk6soTIOFCiK0eITwx2sJsdIGZ
> /wL3cfaqSHh1735dWtg0kWFstyesSida7YHjNyOsJ/X/mUMEInhFdHzR
> mg3Sa64FUy8BamA/yTUazNb3VG3yRS9ZUFJXeMib7qjSspDEqb2dTKzy
> RvFxiNKOD5rDoCN3/Da6hi/dBhCLL9Zh+6mhsV0KHLahoKI2Bl2xw2v3 F9hFyA==
>
> ;; ADDITIONAL SECTION:
> jamuna.btcl.net.bd. 172800 IN A 203.112.194.231
> surma.btcl.net.bd. 172800 IN A 203.112.194.232
> bd-ns.anycast.pch.net. 172800 IN A 204.61.216.108
> dns.bd. 172800 IN A 123.49.12.112
> jamuna.btcl.net.bd. 172800 IN AAAA 2407:5000:88:4::231
> surma.btcl.net.bd. 172800 IN AAAA 2407:5000:88:4::232
> bd-ns.anycast.pch.net. 172800 IN AAAA 2001:500:14:6108:ad::1
> dns.bd. 172800 IN AAAA 2407:5000:88:5::3
>
> ;; Query time: 19 msec
> ;; SERVER: 192.33.4.12#53(c.root-servers.net) (UDP)
> ;; WHEN: Tue Oct 31 12:04:53 AEDT 2023
> ;; MSG SIZE rcvd: 725
>
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 54270
> ;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 2, ADDITIONAL: 3
>
> ;; OPT PSEUDOSECTION:
> ; EDNS: version: 0, flags: do; udp: 4096
> ;; QUESTION SECTION:
> ;ns1.bcc.gov.bd. IN A
>
> ;; AUTHORITY SECTION:
> bcc.gov.bd. 86400 IN NS ns1.bcc.gov.bd.
> bcc.gov.bd. 86400 IN NS ns2.bcc.gov.bd.
>
> ;; ADDITIONAL SECTION:
> ns1.bcc.gov.bd. 86400 IN A 114.130.54.123
> ns2.bcc.gov.bd. 86400 IN A 114.130.54.124
>
> ;; Query time: 210 msec
> ;; SERVER: 123.49.12.112#53(dns.bd) (UDP)
> ;; WHEN: Tue Oct 31 12:04:54 AEDT 2023
> ;; MSG SIZE rcvd: 107
>
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 11259
> ;; flags: qr aa; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2
>
> ;; OPT PSEUDOSECTION:
> ; EDNS: version: 0, flags: do; udp: 1232
> ; COOKIE: 69a562ec1c50e22801000000654052b6abe0594cf8b9b688 (good)
> ;; QUESTION SECTION:
> ;ns1.bcc.gov.bd. IN A
>
> ;; ANSWER SECTION:
> ns1.bcc.gov.bd. 38400 IN A 114.130.54.123
>
> ;; AUTHORITY SECTION:
> bcc.gov.bd. 38400 IN NS ns1.bcc.gov.bd.
> bcc.gov.bd. 38400 IN NS ns2.bcc.gov.bd.
>
> ;; ADDITIONAL SECTION:
> ns2.bcc.gov.bd. 38400 IN A 114.130.54.124
>
> ;; Query time: 212 msec
> ;; SERVER: 114.130.54.123#53(ns1.bcc.gov.bd) (UDP)
> ;; WHEN: Tue Oct 31 12:04:54 AEDT 2023
> ;; MSG SIZE rcvd: 135
>
> %
>
> That succeeded but you will note that that address of both of the
> nameservers
> for bcc.gov.bd are in the same /24 which means there is a single point of
> failure at the routing level. At this point I’d test if you could reach
> the nameservers with direct queries as you have their addresses in the glue
> returned from the .bd nameservers assuming that if fails for you.
>
> % dig ns1.bcc.gov.bd @114.130.54.123
>
> ; <<>> DiG 9.19.18-dev <<>> ns1.bcc.gov.bd @114.130.54.123
> ;; global options: +cmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 2139
> ;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
> ;; WARNING: recursion requested but not available
>
> ;; OPT PSEUDOSECTION:
> ; EDNS: version: 0, flags:; udp: 1232
> ; COOKIE: 8a8e9d7bfc1abdb2010000006540536a724fdb04112462bb (good)
> ;; QUESTION SECTION:
> ;ns1.bcc.gov.bd. IN A
>
> ;; ANSWER SECTION:
> ns1.bcc.gov.bd. 38400 IN A 114.130.54.123
>
> ;; Query time: 215 msec
> ;; SERVER: 114.130.54.123#53(114.130.54.123) (UDP)
> ;; WHEN: Tue Oct 31 12:07:54 AEDT 2023
> ;; MSG SIZE rcvd: 87
>
> % dig ns2.bcc.gov.bd @114.130.54.124
>
> ; <<>> DiG 9.19.18-dev <<>> ns2.bcc.gov.bd @114.130.54.124
> ;; global options: +cmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 44727
> ;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
> ;; WARNING: recursion requested but not available
>
> ;; OPT PSEUDOSECTION:
> ; EDNS: version: 0, flags:; udp: 1232
> ; COOKIE: 181d91ea2ecc46ce01000000654054883752dba5d1912e6e (good)
> ;; QUESTION SECTION:
> ;ns2.bcc.gov.bd. IN A
>
> ;; ANSWER SECTION:
> ns2.bcc.gov.bd. 38400 IN A 114.130.54.124
>
> ;; Query time: 212 msec
> ;; SERVER: 114.130.54.124#53(114.130.54.124) (UDP)
> ;; WHEN: Tue Oct 31 12:12:40 AEDT 2023
> ;; MSG SIZE rcvd: 87
>
> %
>
> --
> Mark Andrews, ISC
> 1 Seymour St., Dundas Valley, NSW 2117, Australia
> PHONE: +61 2 9871 4742 INTERNET: marka at isc.org
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20231031/c182c97c/attachment-0001.htm>
More information about the bind-users
mailing list