FW: Authoritative answer "no data" 50% of the time
admjcd
admjcd at VOLPE.DOT.GOV
Thu Jun 7 13:16:23 UTC 2001
Guys,
Is this causing my problems with name resolution. and mail failing to be delivered? I can send to these domains from anywhere else. I suspect a problem with my DNS because it will stop resolving for these domains while others still resolve. Here are some queries to my DNS throughout the day. Early on it resolves then it stops resolving while the other DNS servers on the internet continue to resolve correctly.
\
\
Query:All records (ALL):lee.army.mil
lee.army.mil MX 10 lee-imc-100.lee.army.mil
NS gatekeeper.volpe.dot.gov
lee-imc-100.lee.army.mil A 132.159.126.52
gatekeeper.volpe.dot.gov A 152.122.40.1
Complete: lee.army.mil
Query:All records (ALL):lee.army.mil
lee.army.mil MX 10 lee-imc-100.lee.army.mil
NS gatekeeper.volpe.dot.gov
lee-imc-100.lee.army.mil A 132.159.126.52
gatekeeper.volpe.dot.gov A 152.122.40.1
Complete: lee.army.mil
Query:Name Server (NS):lee.army.mil
Server has no data for this query
Complete:NO_DATA lee.army.mil
Query:Name Server (NS):lee.army.mil
Server has no data for this query
Complete:NO_DATA lee.army.mil
Query:Name Server (NS):lee.army.mil
Server has no data for this query
Complete:NO_DATA lee.army.mil
Query:All records (ALL):lee.army.mil
Authoritative Answer
Server has no data for this query
Complete:NO_DATA lee.army.mil
Query:All records (ALL):lee.army.mil
Authoritative Answer
Server has no data for this query
Complete:NO_DATA lee.army.mil
-----Original Message-----
From: James A Griffin [mailto:agriffin at cpcug.org]
Sent: Wednesday, June 06, 2001 6:48 PM
To: Mark.Andrews at nominum.com
Cc: admjcd; 'bind-users at isc.org'
Subject: Re: FW: Authoritative answer "no data" 50% of the time
So, what is the MX record doing in the middle of the Authority Section?
This make me wonder what version of BIND was being used (us army
restricted). We know Mark was using dig 8.3. Here is what I get. One
fewer NS, but the MX and a SOA to boot!
Jim
; <<>> DiG 9.2.0a1 <<>> any lee.army.mil. @ns01.army.mil.
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 20903
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 6, ADDITIONAL: 4
;; QUESTION SECTION:
;lee.army.mil. IN ANY
;; ANSWER SECTION:
lee.army.mil. 3600 IN NS ns01.army.mil.
lee.army.mil. 3600 IN NS ns03.army.mil.
;; AUTHORITY SECTION:
lee.army.mil. 3600 IN NS ns02.army.mil.
lee.army.mil. 1366 IN MX 10
lee-imc-100.lee.army.mil.
lee.army.mil. 3600 IN SOA ns01.army.mil.
DOMAIN-REQUEST.AIMS7.army.mil. 10000 600 1 600 3600
lee.army.mil. 3600 IN NS ns01.army.mil.
lee.army.mil. 3600 IN NS ns03.army.mil.
lee.army.mil. 3600 IN NS ns02.army.mil.
;; ADDITIONAL SECTION:
ns01.army.mil. 1051 IN A 140.153.43.44
ns03.army.mil. 1039 IN A 130.114.200.6
ns02.army.mil. 1036 IN A 192.82.113.7
lee-imc-100.lee.army.mil. 3367 IN A 132.159.126.52
;; Query time: 327 msec
;; SERVER: 140.153.43.44#53(ns01.army.mil.)
;; WHEN: Wed Jun 6 18:44:20 2001
;; MSG SIZE rcvd: 286
Mark.Andrews at nominum.com wrote:
>
> >
> >
> > hi all,
> >
> > I am a messaging administrator having a intermittent (50% of every day for
> > a few hour intervals) problem sending to a few sub domains at army.mil. On
> > e of which is lee.army.mil. Our DNS server is the only DNS server we can que
> > ry behind our firewall. It some-times gives the correct response when lookin
> > g up the mx records for these domains. and the other 50% of the time it retu
> > rns this response:
> >
> > Query:All records (ALL):lee.army.mil
> > Authoritative Answer
> > Server has no data for this query
> >
> > However; if I direct dial the Internet and query any other DNS server I alway
> > s (99.8%) get the correct response. especially if I query all the NS servers
> > listed for these domains. ns01.army.mil ns02.army.mil and ns03.army.mil.
> >
>
> The nameservers are returning the wrong counts for the number of
> records in the answer and authority sections. The answer section
> below should be 5 and the authority section should be 3.
>
> Mark
>
> ; <<>> DiG 8.3 <<>> any lee.army.mil @ns01.army.mil
> ; (1 server found)
> ;; res options: init recurs defnam dnsrch
> ;; got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 6
> ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 6, ADDITIONAL: 4
> ;; QUERY SECTION:
> ;; lee.army.mil, type = ANY, class = IN
>
> ;; ANSWER SECTION:
> lee.army.mil. 1H IN SOA ns01.army.mil. DOMAIN-REQUEST.AIMS7.army.mil. (
> 10000 ; serial
> 10M ; refresh
> 1S ; retry
> 10M ; expiry
> 1H ) ; minimum
>
> lee.army.mil. 1H IN NS ns01.army.mil.
>
> ;; AUTHORITY SECTION:
> lee.army.mil. 1H IN NS ns03.army.mil.
> lee.army.mil. 1H IN NS ns02.army.mil.
> lee.army.mil. 57m59s IN MX 10 lee-imc-100.lee.army.mil.
> lee.army.mil. 1H IN NS ns01.army.mil.
> lee.army.mil. 1H IN NS ns03.army.mil.
> lee.army.mil. 1H IN NS ns02.army.mil.
>
> ;; ADDITIONAL SECTION:
> ns01.army.mil. 52m44s IN A 140.153.43.44
> ns03.army.mil. 52m32s IN A 130.114.200.6
> ns02.army.mil. 52m29s IN A 192.82.113.7
> lee-imc-100.lee.army.mil. 30m53s IN A 132.159.126.52
>
> ;; Total query time: 324 msec
> ;; FROM: drugs.dv.isc.org to SERVER: ns01.army.mil 140.153.43.44
> ;; WHEN: Thu Jun 7 08:07:19 2001
> ;; MSG SIZE sent: 30 rcvd: 286
> [snip]
> --
> Mark Andrews, Nominum Inc.
> 1 Seymour St., Dundas Valley, NSW 2117, Australia
> PHONE: +61 2 9871 4742 INTERNET: Mark.Andrews at nominum.com
More information about the bind-users
mailing list