Domain non-existent
Mathias Koerber
mathias at koerber.org
Thu Aug 12 13:21:57 UTC 1999
John,
I can't confirm Marks findings, as I see the gov.sg zone having
sgnews.gov.sg:
# dig @pridns.gov.sg gov.sg axfr | grep sgnews
sgnews.gov.sg. 21600 NS pridns.gov.sg.
sgnews.gov.sg. 21600 NS secdns.gov.sg.
But then, gov.sg has been updated today (see the serial number) , and this
may have been fixed just now:
gov.sg. 21600 SOA pridns.gov.sg. root.pridns.gov.sg. (
1999081207 ; serial
14400 ; refresh (4 hours)
3100 ; retry (51 mins 40 secs)
302400 ; expire (3 days 12 hours)
21600 ) ; minimum (6 hours)
However:
pridns.cyberway.com.sg is authoritative for the gov.sg zone, but seems not
to have
received any update for some time (see the serial number (old) and the 'aa'
flag).
# dig @pridns.cyberway.com.sg sgnews.gov.sg any
; <<>> DiG 2.2 <<>> @pridns.cyberway.com.sg sgnews.gov.sg any
; (1 server found)
;; res options: init recurs defnam dnsrch
;; got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10
;; flags: qr aa rd ra; Ques: 1, Ans: 0, Auth: 1, Addit: 0
;; QUESTIONS:
;; sgnews.gov.sg, type = ANY, class = IN
;; AUTHORITY RECORDS:
gov.sg. 21600 SOA pridns.gov.sg. root.pridns.gov.sg. (
1999080207 ; serial
14400 ; refresh (4 hours)
3100 ; retry (51 mins 40 secs)
302400 ; expire (3 days 12 hours)
21600 ) ; minimum (6 hours)
;; Total query time: 6 msec
;; FROM: dnspri to SERVER: pridns.cyberway.com.sg 203.116.1.78
;; WHEN: Thu Aug 12 21:15:01 1999
;; MSG SIZE sent: 31 rcvd: 85
secdns.cyberway.com.sg (which is listed as official NS for gov.sg) seems to
have the correct data:
# dig @secdns.cyberway.com.sg sgnews.gov.sg any
; <<>> DiG 2.2 <<>> @secdns.cyberway.com.sg sgnews.gov.sg any
; (1 server found)
;; res options: init recurs defnam dnsrch
;; got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 10
;; flags: qr rd ra; Ques: 1, Ans: 2, Auth: 2, Addit: 2
;; QUESTIONS:
;; sgnews.gov.sg, type = ANY, class = IN
;; ANSWERS:
sgnews.gov.sg. 21600 NS pridns.gov.sg.
sgnews.gov.sg. 21600 NS secdns.gov.sg.
;; AUTHORITY RECORDS:
sgnews.gov.sg. 21600 NS pridns.gov.sg.
sgnews.gov.sg. 21600 NS secdns.gov.sg.
;; ADDITIONAL RECORDS:
pridns.gov.sg. 21600 A 160.96.179.4
secdns.gov.sg. 21600 A 160.96.128.4
;; Total query time: 7 msec
;; FROM: dnspri to SERVER: secdns.cyberway.com.sg 203.116.1.94
;; WHEN: Thu Aug 12 21:17:12 1999
;; MSG SIZE sent: 31 rcvd: 139
Solution:
Either the gov.sg admins should allow pridns.cyberway.com.sg to perform the
zonetransfer
for gov.sg, so that its old information can be updated, or cyberway should
stop pridns
from being authoritative for gov.sg.
In any case, as it is not listed as nameserver for .gov.sg, only clients
resolving by use of pridns.cyberway.com.sg
will be affected. Not sure whether cyberway has clients resolving off their
authoritative
nameservers though.
regards
-----Original Message-----
From: John Tan <d_name at hotmail.com>
To: Mark_Andrews at isc.org <Mark_Andrews at isc.org>; d_name at hotmail.com
<d_name at hotmail.com>
Cc: bind-users at isc.org <bind-users at isc.org>; phil46 at pacific.net.sg
<phil46 at pacific.net.sg>
Date: Thursday, August 12, 1999 9:05 PM
Subject: Re: Domain non-existent
|Thanks again Mark. Your very helpful. But one question though :
|If that were the case, then why is pridns.ncs.com.sg able to successfully
|query my DNS for the info while the others were not ?
|
|
|>From: marka at isc.org
|>To: "John Tan" <d_name at hotmail.com>
|>CC: bind-users at isc.org, phil46 at pacific.net.sg
|>Subject: Re: Domain non-existent
|>Date: Thu, 12 Aug 1999 22:42:38 +1000
|>
|> The problem is that the parent domain (gov.sg) has not been
|> updated. While both pridns.gov.sg and secdns.gov.sg know about
|> sgnews.gov.sg as they are also servers for sgnews.gov.sg the
|> rest of the servers for gov.sg do not and hence the NXDOMAINs.
|>
|> The zone gov.sg zone needs to be updated and pushed to the
|> secondaries.
|>
|> Mark
|> >
|> > Hi all
|> >
|> > I have a problem. From the dns server pridns.gov.sg, I am able to query
|> > sgnews.gov.sg domain. from pridns.ncs.com.sg it is also ok.
|> > but from other dns servers eg. pridns.cyberway.com.sg it does not work.
|>The
|> > ttl is 6 hours and I have already incremented the serial no.
|> > and it is long after 6 hours. Am I paranoid or should I wait longer ?
|> > Previosuly I had already incremented the s/no but just did it again
|>today..
|> > MY DNS logs show no errors on both primary and sec.
|> >
|> > below is the output :
|> >
|> > >sgnews.gov.sg.
|> > Server: pridns.cyberway.com.sg
|> > Address: 203.116.1.78
|> >
|> > *** pridns.cyberway.com.sg can't find sgnews.gov.sg.:Non-existent
|> > host/domain
|> > >server pridns.ncs.com.sg.
|> > Default Server: pridns.ncs.com.sg
|> > Address: 203.116.16.16
|> >
|> > >sgnews.gov.sg.
|> > Server: pridns.ncs.com.sg
|> > Address: 203.116.16.16
|> >
|> > Non-authoritative answer:
|> > sgnews.gov.sg
|> > origin = pridns.gov.sg
|> > mail address = root.pridns.gov.sg
|> > serial = 1999081201
|> > refresh = 14400 (4H)
|> > retry = 7200 (2H)
|> > expire = 604800 (1W)
|> > minimum ttl = 21600 (6H)
|> > sgnews.gov.sg nameserver = pridns.gov.sg
|> > sgnews.gov.sg nameserver = secdns.gov.sg
|> > sgnews.gov.sg preference = 10, mail exchanger = hydra.gov.sg
|> > sgnews.gov.sg preference = 20, mail exchanger =
medusa.internet.gov.sg
|> >
|> > Authoritative answers can be found from:
|> > sgnews.gov.sg nameserver = pridns.gov.sg
|> > sgnews.gov.sg nameserver = secdns.gov.sg
|> > pridns.gov.sg internet address = 160.96.179.4
|> > secdns.gov.sg internet address = 160.96.128.4
|> > hydra.gov.sg internet address = 160.96.179.6
|> > medusa.internet.gov.sg internet address = 160.96.179.7
|> > >
|> >
|> >
|> > ______________________________________________________
|> > Get Your Private, Free Email at http://www.hotmail.com
|> >
|> >
|>--
|>Mark Andrews, Internet Software Consortium
|>1 Seymour St., Dundas Valley, NSW 2117, Australia
|>PHONE: +61 2 9871 4742 INTERNET: marka at isc.org
|
|
|______________________________________________________
|Get Your Private, Free Email at http://www.hotmail.com
|
More information about the bind-users
mailing list