Bind 9.1.3 problem

[phn at icke-reklam.ipsec.nu]

Sebastian Araya <araya.s at numisys.com.ar> wrote:

> Hello,


>   I've configured service named running on RH 7.2, it works fine for
> domains:

>         pcram.com.ar
>         numisys.com.ar

>   but, since last month, I've been experiencing resolve problems from
> other netblocks. For example, I've tried to query a few name servers,
> and when I make:

> dig @200.49.90.11 www.pcram.com.ar

>   it resolves the address 200.69.252.147 which is fine. But when I
> make:

> $ dig @200.49.90.11 www.numisys.com.ar

>   I recieve:

> ; <<>> DiG 9.2.0 <<>> @200.49.90.11 www.numisys.com.ar
> ;; global options:  printcmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 61508
> ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0

> ;; QUESTION SECTION:
> ;www.numisys.com.ar.            IN      A

> ;; Query time: 2651 msec
> ;; SERVER: 200.49.90.11#53(200.49.90.11)
> ;; WHEN: Tue Jan 14 10:29:17 2003
> ;; MSG SIZE  rcvd: 36

>   The same problem spreads in other nameservers, which can answer
> pcram.com.ar, but they can't do it for numisys.com.ar, similary with
> MX, NS or NX query types.

>   Any ideas ?? Besides, everything works fine when you issue:

> $ dig @200.49.90.11 www.numisys.com.ar +trace

>   Thanks,

All your nameservers seems to be located at the end
of the same serial link. Thus any disturbances/congestions=20
will affect dns services

In addition, the nameservers for numisys.com.ar :
ns1.pcram.com.ar (200.69.252.145)=20
ns2.pcram.com.ar (200.69.252.149)=20

are in error :=20
;; ANSWERS:
ns1.pcram.com.ar.       28626   CNAME   bilbo.pcram.com.ar.

It's an error to have a CNAME as RHS of a NS record, needless to,
just make "bilbo.pcram.com.ar." and "frodo.pcram.com.ar." ( which=20
is what the cname points to ) RHS of your NS.





> Sebasti=E1n Araya
> Numisys Consulting Group
> http://www.numisys.com.ar/


--=20
Peter H=E5kanson=20=20=20=20=20=20=20=20=20
        IPSec  Sverige      ( At Gothenburg Riverside )
           Sorry about my e-mail address, but i'm trying to keep spam out,
	   remove "icke-reklam" if you feel for mailing me. Thanx.