wrong ans. name

[Barry Margolin]

In article <bigfkj$20ki$1 at sf1.isc.org>,
Kevin Darcy  <kcd at daimlerchrysler.com> wrote:
>"Duane J. Von Lanken" wrote:
>
>> Several of my caching servers are getting this consistently in their
>> syslogs.  I am running 8.3.4 on HPUX 11.00.  Do I need to do something
>> to clean this up?  How?  Thanx
>>
>> Aug 26 15:45:37 ns1 named[724]: wrong ans. name (. !=
>> 323136.323339.3531.313034.80hd8ef3368.webcfs00.com)
>> Aug 26 15:45:43 ns1 named[724]: wrong ans. name (. !=
>> 64.77656268616e636572.636f6d.80hc7f3a36c.webcfs00.com)
>> Aug 26 15:45:39 ns1 named[724]: wrong ans. name (. !=
>> 68.6d736e.636f6d.80hcf44b17c.webcfs00.com)
>> Aug 26 15:45:46 ns1 named[724]: wrong ans. name (. !=
>> 68.6d736e.636f6d.80hcf44b17c.webcfs00.com)
>
>No, it's a problem with the nameservers for webcfs00.com. They are
>answering *every* query they get authoritatively with a 10.*.*.* (i.e.

It looks like they have a wildcard A record with that address.

>private, non-routable) address, and failing to copy the RD (Recursion
>Desired) flag into their responses. Bad, bad, bad...

While true, I don't see how either of the things they're doing would result
in the log messages above.  When I query the server, the name in the Answer
Section matches the name in the Question Section:

; <<>> DiG 9.2.0 <<>> barmar.foo.com a @ns01.webcfs00.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 47486
;; flags: qr aa; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;barmar.foo.com.			IN	A

;; ANSWER SECTION:
barmar.foo.com.		84600	IN	A	10.0.15.201

-- 
Barry Margolin, barry.margolin at level3.com
Level(3), Woburn, MA
*** DON'T SEND TECHNICAL QUESTIONS DIRECTLY TO ME, post them to newsgroups.
Please DON'T copy followups to me -- I'll assume it wasn't posted to the group.