8.2.2-P5 from 4.9.3 strange debug output

[Mark.Andrews at nominum.com]

	1. This behaviour is in the clients not the server.  The client is
	   applying a search list.  The search list used can be controled
	   via resolv.conf.

	2. Do you have a firewall in place?  BIND 8 named, by default, uses
	   a random source port for queries it makes.  BIND 4 used port 53
	   for these queries. See query-source for how to control this.

	I hope you upgraded to 8.2.2-P5 and not straight 8.2.2, there are
	security fixes between 8.2.2 and 8.2.2-P5.

	Mark

> Hi, I'm trying to upgrade our secondary name server from 4.9.4 to 8.2.2 on a
> Solaris 2.6 SS20.
> I made a named.conf from the named-bootconf.pl script.  All the db files get
> transferred from the primary.
> >From my browser, I can get to all URL's internally, but if I try to go to
> something like www.ci.imperial-beach.ca.us I get an error.
> Here's the output in the named.run from using /usr/local/sbin/named -d4 &:
> 
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 2
> ;; flags: rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
> ;;      www.ci.imperial-beach.ca.us.sandag.cog.ca.us, type = A, class = IN
> req: nlookup(www.ci.imperial-beach.ca.us.sandag.cog.ca.us) id 2 type=1
> class=1
> req: found 'www.ci.imperial-beach.ca.us.sandag.cog.ca.us' as
> 'sandag.cog.ca.us' (cname=0)
> findns: SOA found
> req: leaving (www.ci.imperial-beach.ca.us.sandag.cog.ca.us, rcode 3)
> free_nsp: pavo.sandag.cog.ca.us rcnt 1
> doaddinfo() addcount = 1
> do additional "sandag.cog.ca.us" (from "sandag.cog.ca.us")
> found it
> ns_req: answer -> [192.82.118.51].1414 fd=22 id=2 size=132 rc=3
> pselect(24, 0xf00060, 0x0, 0x0, 0.039185000)
> select() returns 1 (err: none)
> datagram from [192.82.118.51].1415, fd 22, len 55
> ns_req(from [192.82.118.51].1415)
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 3
> ;; flags: rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
> ;;      www.ci.imperial-beach.ca.us.cog.ca.us, type = A, class = IN
> req: nlookup(www.ci.imperial-beach.ca.us.cog.ca.us) id 3 type=1 class=1
> req: found 'www.ci.imperial-beach.ca.us.cog.ca.us' as 'cog.ca.us' (cname=0)
> findns: 13 NS's added for ''
> ns_forw()
> find_zone(www.ci.imperial-beach.ca.us.cog.ca.us, 1)
> find_zone: unknown zone
> find_zone(ci.imperial-beach.ca.us.cog.ca.us, 1)
> find_zone: unknown zone
> find_zone(imperial-beach.ca.us.cog.ca.us, 1)
> find_zone: unknown zone
> find_zone(ca.us.cog.ca.us, 1)
> find_zone: unknown zone
> find_zone(us.cog.ca.us, 1)
> find_zone: unknown zone
> find_zone(cog.ca.us, 1)
> find_zone: unknown zone
> find_zone(ca.us, 1)
> find_zone: unknown zone
> find_zone(us, 1)
> find_zone: unknown zone
> find_zone(., 1)
> find_zone: existing zone 6
> nslookup(nsp=0xefffe420, qp=0xe86e0,
> "www.ci.imperial-beach.ca.us.cog.ca.us")
> 
> Why is it trying to resolve www.ci.imperial-beach.ca.us.cog.ca.us and not
> www.ci.imperial-beach.ca.us
> It's appending our domain with the one I'm trying to lookup.
> Any help is greatly appreciated!  :-)
> Don
--
Mark Andrews, Nominum Inc. / Internet Software Consortium
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark.Andrews at nominum.com