Unexpected "REFUSED" response.

[Kevin Darcy]

Neil W Rickert wrote:

>-----BEGIN PGP SIGNED MESSAGE-----
>Hash: SHA1
>
>Kevin Darcy <kcd at daimlerchrysler.com> writes:
>  
>
>>Neil W Rickert wrote:
>>    
>>
>
>  
>
>>>A query from off-campus resulted in the unexpected:
>>>      
>>>
>
>  
>
>>>;; ->>HEADER<<- opcode: QUERY, status: REFUSED, id: 65093
>>>;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
>>>      
>>>
>
>  
>
>>>;; QUESTION SECTION:
>>>;max.niu.edu.                   IN      A
>>>      
>>>
>
>[lots of snippage]
>
>  
>
>>I'd speculate that the authoritative servers for forlangs.net are 
>>blocking (or, to put it another way, not permitting) queries from the 
>>mp.cs.niu.edu server, or whatever forwarders it's using, if applicable. 
>>    
>>
>
>No.  The logs on mp.cs.niu.edu indicate show that the request was
>denied there.
>
>  
>
>>                                      When you queried from "on-campus" 
>>the queries were coming from some other nameserver which presumably is 
>>    
>>
>
>No, this query was also to mp.cs.niu.edu, demonstrating that the
>servers for forlangs.net are not blocking access.
>
Well, I guess I'm kinda stumped then. You're not using "view"s, are you? 
If so, maybe there's some other zone definition for niu.edu in a 
different view that you overlooked. Also, were you reloading the zone at 
the time of the bad query? Maybe the internal data structures were in an 
inconsistent state and it gave a REFUSED response just to be on the safe 
side. I'm just grasping at straws...

One thing that confuses me, though, is that that nameserver's response 
for the name is completely different now:

% dig max.niu.edu @mp.cs.niu.edu

; <<>> DiG 9.2.2rc1 <<>> max.niu.edu @mp.cs.niu.edu
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 20478
;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 4

;; QUESTION SECTION:
;max.niu.edu.                   IN      A

;; ANSWER SECTION:
max.niu.edu.            86400   IN      A       131.156.124.238

;; AUTHORITY SECTION:
niu.edu.                86400   IN      NS      mp.cs.niu.edu.
niu.edu.                86400   IN      NS      dns1.cso.uiuc.edu.
niu.edu.                86400   IN      NS      netmgr.cso.niu.edu.
niu.edu.                86400   IN      NS      netmgrts.cso.niu.edu.

;; ADDITIONAL SECTION:
mp.cs.niu.edu.          86400   IN      A       131.156.68.41
mp.cs.niu.edu.          86400   IN      A       131.156.145.41
netmgr.cso.niu.edu.     86400   IN      A       131.156.1.11
netmgrts.cso.niu.edu.   86400   IN      A       131.156.126.2

;; Query time: 23 msec
;; SERVER: 131.156.68.41#53(mp.cs.niu.edu)
;; WHEN: Mon May 17 20:09:42 2004
;; MSG SIZE  rcvd: 205

%

What happened to the max.forlangs.net CNAME?

                                                                         
            - Kevin