Delegation question

[Mark_Andrews at isc.org]

> When I do the following "dig dns.navipath.net" on a server without the
> "delegation only patch" I get:
> 
> % dig any dns.navipath.net
> ;; global options:  printcmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 32435
> ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 13, ADDITIONAL: 0
> 
> ;; QUESTION SECTION:
> ;dns.navipath.net.              IN      ANY
> 
> ;; ANSWER SECTION:
> dns.navipath.net.       96226   IN      A       216.67.14.5
> 
> ;; AUTHORITY SECTION:
> net.                    172686  IN      NS      j.gtld-servers.net.
> net.                    172686  IN      NS      k.gtld-servers.net.
> net.                    172686  IN      NS      l.gtld-servers.net.
> net.                    172686  IN      NS      m.gtld-servers.net.
> net.                    172686  IN      NS      a.gtld-servers.net.
> net.                    172686  IN      NS      b.gtld-servers.net.
> net.                    172686  IN      NS      c.gtld-servers.net.
> net.                    172686  IN      NS      d.gtld-servers.net.
> net.                    172686  IN      NS      e.gtld-servers.net.
> net.                    172686  IN      NS      f.gtld-servers.net.
> net.                    172686  IN      NS      g.gtld-servers.net.
> net.                    172686  IN      NS      h.gtld-servers.net.
> net.                    172686  IN      NS      i.gtld-servers.net.
> 
> Against a server running the delegation-only patch, it (as expected)
> returns NXDOMAIN and logs a "delegation only enforced" message.
> What exactly is going on with "dns.navipath.net"? In other words, what
> does it mean that I am getting an A record, but no NS records for that
> domain? This is not the infamous "sitefinder" wildcard.
> 

	Looks like a registry/registar stuff up. 

	dns.navipath.net looks like a glue record that should have been
	pulled when the nameservers for navipath.net were removed.

	Note 216.67.14.5 doesn't repond to DNS queries UDP or TCP
	it also doesn't respond to ICMP ECHO.

	Mark

Whois Server Version 1.3

Domain names in the .com and .net domains can now be registered
with many different competing registrars. Go to http://www.internic.net
for detailed information.

   Domain Name: NAVIPATH.NET
   Registrar: REGISTER.COM, INC.
   Whois Server: whois.register.com
   Referral URL: http://www.register.com
   Name Server: No nameserver
   Status: ACTIVE
   Updated Date: 20-mar-2003
   Creation Date: 11-feb-2000
   Expiration Date: 11-feb-2004


>>> Last update of whois database: Tue, 14 Oct 2003 18:27:04 EDT <<<

NOTICE: The expiration date displayed in this record is the date the
registrar's sponsorship of the domain name registration in the registry is
currently set to expire. This date does not necessarily reflect the expiration
date of the domain name registrant's agreement with the sponsoring
registrar.  Users may consult the sponsoring registrar's Whois database to
view the registrar's reported date of expiration for this registration.

TERMS OF USE: You are not authorized to access or query our Whois
database through the use of electronic processes that are high-volume and
automated except as reasonably necessary to register domain names or
modify existing registrations; the Data in VeriSign Global Registry
Services' ("VeriSign") Whois database is provided by VeriSign for
information purposes only, and to assist persons in obtaining information
about or related to a domain name registration record. VeriSign does not
guarantee its accuracy. By submitting a Whois query, you agree to abide
by the following terms of use: You agree that you may use this Data only
for lawful purposes and that under no circumstances will you use this Data
to: (1) allow, enable, or otherwise support the transmission of mass
unsolicited, commercial advertising or solicitations via e-mail, telephone,
or facsimile; or (2) enable high volume, automated, electronic processes
that apply to VeriSign (or its computer systems). The compilation,
repackaging, dissemination or other use of this Data is expressly
prohibited without the prior written consent of VeriSign. You agree not to
use electronic processes that are automated and high-volume to access or
query the Whois database except as reasonably necessary to register
domain names or modify existing registrations. VeriSign reserves the right
to restrict your access to the Whois database in its sole discretion to ensure
operational stability.  VeriSign may restrict or terminate your access to the
Whois database for failure to abide by these terms of use. VeriSign
reserves the right to modify these terms at any time.

The Registry database contains ONLY .COM, .NET, .EDU domains and
Registrars.

No match for "navipath.net".

Register your domain name at http://www.register.com


--
Mark Andrews, Internet Software Consortium
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark.Andrews at isc.org