Help w/specific site after upgrade

[Simon Waters]

Dawn Lovell wrote:
> 
> After upgrading from 8.2.3 to 8.3.3 a few weeks ago, we've started
> having problems resolving software.sonicwall.com, which is a cname
> to software.global.sonicwall.com. 

Serial number 22, any bets they "upgraded" to NT DNS when you
upgraded BIND, or is that cynical ;)

> The problem we're having actually
> appears to be with the global.sonicwall.com subdomain.  We can only
> rarely resolve its authoritative nameservers, and that success only
> lasts for a few minutes.

The delegated servers vary between the parent and child<tsck
tsck>, and the child zones authoritative name server is
unreachable (on colo.sonicwall.com which appears to be private
address space). This typically manifests as domains that resolve
first time but not again, and other intermittent problems.

The delegation of both the global and colo subdomains appear to
be completely wrong, in that they both point directly or
indirectly to servers on private address space, and leak private
address replies to the global Internet <tsck>.

Oh well looks like the mail address will resolve, even if
www.sonicwall.com is unreachable - so if your lucky the
postmaster might check it out.

Do you want to buy a firewall from a company that understands
DNS, because I might be able to help you there ;)

 Simon