DNS servers wont resolve certain DNS names

Tue Oct 21 16:35:21 UTC 2003

Thanks for the help so far. I'm still working through this problem
without much success. The results you got below are typical of what I'm
getting here except for what I mention below. Just this one site times
out resolving through our servers. Other sites resolve just fine. I'd
like to chaulk it up to what Peter Hkanson said about www.hardocp.com
having errors but others servers seem to be able to resolve it.

I do notice one problem that has cropped up. DNS servers are incorrectly
reporting an old IP address that should no longer be used for our
primary name server. I checked our registrar a few days ago after
noticing this but it only accepts FQDN not Ips and it is reporting the
FQDN as the incorrect IP. So, I changed it to a CNAME for the primary
name server hoping that the change would have propagated by now, but it
doesn't seem to have worked. Our name servers are correctly resolving
the FQDNs as the correct IPs. Where is our registrar getting the
information for resolving our primary name server? Is it cached
somewhere. How could our primary name server still be reporting an old
ip address? Could this be related in some bizarre way to not being able
to resolve a name through our servers?

Dig output from below:
;; ADDITIONAL SECTION:
NS1.toua.net.           20h45m6s IN A   216.64.154.21

Should be reported as 64.25.64.21. Our secondary name server is
resolving correctly. Hmm.

Michael Hale
Tohono O'odham Utility Authority (TOUA)
Network Engineer
phone: 1.520.383.5849
email: mhale at toua.net
web: http://www.toua.net/

-----Original Message-----
From: Barry Finkel [mailto:b19141 at achilles.ctd.anl.gov]=20
Sent: Tuesday, October 21, 2003 6:09 AM
To: bind-users at isc.org
Cc: Mike Hale
Subject: Re: DNS servers wont resolve certain DNS names

"Mike Hale" <mhale at TOUA.net> wrote:

>I run the DNS servers for toua.net. I have a user that complained that=20
>he can't resolve www.hardocp.com through our name servers. He was=20
>right. For some reason dig times out when resolving that address=20
>through our name servers but I can resolve it through the root servers.

>I checked my root server list and it's up-to-date. I don't do any=20
>request forwards through another server, so I'm not sure why this may=20
>be happening. Any hints on where to look?

I tried to use your two DNS servers to test, but I could not access
either one.  I am not sure what is happening, as I can successfully
traceroute to the NS2 and query the BIND version there.

=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
britaine% dig toua.net ns

; <<>> DiG 8.3 <<>> toua.net ns=20
;; res options: init recurs defnam dnsrch
;; got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 4
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1 ;;
QUERY SECTION:
;;      toua.net, type =3D NS, class =3D IN

;; ANSWER SECTION:
toua.net.               4H IN NS        NS1.toua.net.
toua.net.               4H IN NS        NS2.toua.net.

;; ADDITIONAL SECTION:
NS1.toua.net.           20h45m6s IN A   216.64.154.21

;; Total query time: 91 msec
;; FROM: britaine.ctd.anl.gov to SERVER: default -- 146.139.254.5 ;;
WHEN: Tue Oct 21 08:01:15 2003 ;; MSG SIZE  sent: 26  rcvd: 78

britaine% =
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
britaine% dig www.hardocp.com @NS1.toua.net.

; <<>> DiG 8.3 <<>> www.hardocp.com @NS1.toua.net.=20
; (1 server found)
;; res options: init recurs defnam dnsrch
;; res_nsend to server NS1.toua.net.  216.64.154.21: Connection timed
out britaine%
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
britaine% dig www.hardocp.com @NS2.toua.net.

; <<>> DiG 8.3 <<>> www.hardocp.com @NS2.toua.net.=20
; (1 server found)
;; res options: init recurs defnam dnsrch
;; res_nsend to server NS2.toua.net.  64.25.64.32: Connection timed out
britaine% =
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
britaine% version.exec ns2.toua.net
; <<>> DiG 8.3 <<>> txt chaos version.bind +norec @ns2.toua.net=20
;;      version.bind, type =3D TXT, class =3D CHAOS
version.bind.           0S CHAOS TXT    "9.2.1"
britaine% =
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
britaine% dig www.hardocp.com @NS2.toua.net

; <<>> DiG 8.3 <<>> www.hardocp.com @NS2.toua.net=20
; (1 server found)
;; res options: init recurs defnam dnsrch
;; res_nsend to server NS2.toua.net  64.25.64.32: Connection timed out
britaine% =
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
britaine% dig +debug www.hardocp.com @NS2.toua.net

; <<>> DiG 8.3 <<>> +debug www.hardocp.com @NS2.toua.net=20
; (1 server found)
;; res_nmkquery(QUERY, www.hardocp.com, IN, A)
;; res options: init debug recurs defnam dnsrch
;; res_send()
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 61870
;; flags: rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0 ;; QUERY
SECTION:
;;      www.hardocp.com, type =3D A, class =3D IN

;; Querying server (# 1) address =3D 64.25.64.32
;; new DG socket
;; timeout
;; Querying server (# 1) address =3D 64.25.64.32
;; timeout
;; res_nsend to server NS2.toua.net  64.25.64.32: Connection timed out
britaine% =
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
----------------------------------------------------------------------
Barry S. Finkel
Computing and Instrumentation Solutions Division
Argonne National Laboratory          Phone:    +1 (630) 252-7277
9700 South Cass Avenue               Facsimile:+1 (630) 252-4601
Building 222, Room D209              Internet: BSFinkel at anl.gov
Argonne, IL   60439-4828             IBMMAIL:  I1004994