Resolving MX problem
Mark Andrews
Mark_Andrews at isc.org
Wed Nov 24 22:01:45 UTC 2004
> Need help!
> We use use bind-8.3.1 on Solaris 8 as a resolver (no security problems becaus
> e this DNS doesn't face the internet).
Why do people think that the only bugs worth paying attention
to are the ones labeled "security". We fix bugs so that
the nameserver performs correctly.
> We have problem to resolv hotmail.com
> (MX).
> Could someone to help us?
> We need help!
> Thank you very much!
>
> Here the request and answer:
> # dig hotmail.com. mx
>
> ; <<>> DiG 8.3 <<>> hotmail.com. mx
> ;; res options: init recurs defnam dnsrch
> ;; res_nsend to server default -- 192.168.250.71: Connection timed out
> #
>
> Here the debug log level 1:
>
> 23-Nov-2004 14:36:11.116 default: notice: Ready to answer queries.
> 23-Nov-2004 14:36:31.668 default: debug 1: datagram from [192.168.250.71].392
> 71, fd 22, len 29
> 23-Nov-2004 14:36:31.668 default: debug 1: req: nlookup(hotmail.com) id 4 typ
> e=15 class=1
> 23-Nov-2004 14:36:31.668 default: debug 1: req: found 'hotmail.com' as 'hotma
> il.com' (cname=0)
> 23-Nov-2004 14:36:31.683 default: debug 1: sysquery: send -> [192.36.148.17].
> 53 dfd=4 nsid=24198
> id=0 retry=1101238596
> 23-Nov-2004 14:36:31.695 default: debug 1: sysquery: send -> [192.36.148.17].
> 53 dfd=4 nsid=2449
> id=0 retry=1101238596
> 23-Nov-2004 14:36:31.707 default: debug 1: sysquery: send -> [192.36.148.17].
> 53 dfd=4 nsid=50256
> id=0 retry=1101238596
> 23-Nov-2004 14:36:31.719 default: debug 1: sysquery: send -> [192.36.148.17].
> 53 dfd=4 nsid=60531
> id=0 retry=1101238596
> 23-Nov-2004 14:36:31.731 default: debug 1: sysquery: send -> [192.36.148.17].
> 53 dfd=4 nsid=18154
> id=0 retry=1101238596
> 23-Nov-2004 14:36:31.745 default: debug 1: sysquery: send -> [192.36.148.17].
> 53 dfd=4 nsid=43749
> id=0 retry=1101238596
> 23-Nov-2004 14:36:31.752 default: debug 1: forw: forw -> [192.26.92.30].53 ds
> =4 nsid=57556 id=4
> 8ms retry 4sec
> 23-Nov-2004 14:36:31.802 default: debug 1: datagram from [192.26.92.30].53, f
> d 4, len 12
> 23-Nov-2004 14:36:31.803 default: debug 1: resend(addr=0 n=1) -> [192.26.92.3
> 0].53 ds=4 nsid=575
> 56 id=4 8ms
> 23-Nov-2004 14:36:31.854 default: debug 1: datagram from [192.26.92.30].53, f
> d 4, len 207
> 23-Nov-2004 14:36:31.858 default: debug 1: resp: nlookup(hotmail.com) qtype=1
> 5
> 23-Nov-2004 14:36:31.858 default: debug 1: resp: found 'hotmail.com' as 'hotm
> ail.com' (cname=0)
> 23-Nov-2004 14:36:31.859 default: debug 1: finddata(): buflen=4067
> 23-Nov-2004 14:36:36.008 default: debug 1: resend(addr=1 n=0) -> [192.5.5.241
> ].53 ds=4 nsid=2419
> 8 id=0 13883ms
> 23-Nov-2004 14:36:36.009 default: debug 1: resend(addr=1 n=0) -> [192.5.5.241
> ].53 ds=4 nsid=4374
> 9 id=0 13883ms
> 23-Nov-2004 14:36:36.010 default: debug 1: resend(addr=1 n=0) -> [192.5.5.241
> ].53 ds=4 nsid=1815
> 4 id=0 13883ms
> 23-Nov-2004 14:36:36.011 default: debug 1: resend(addr=1 n=0) -> [192.5.5.241
> ].53 ds=4 nsid=6053
> 1 id=0 13883ms
> 23-Nov-2004 14:36:36.013 default: debug 1: resend(addr=1 n=0) -> [192.5.5.241
> ].53 ds=4 nsid=5025
> 6 id=0 13883ms
> 23-Nov-2004 14:36:36.014 default: debug 1: resend(addr=1 n=0) -> [192.5.5.241
> ].53 ds=4 nsid=2449
> id=0 13883ms
> 23-Nov-2004 14:36:45.698 default: debug 1: datagram from [192.168.250.71].392
> 71, fd 22, len 29
> 23-Nov-2004 14:36:45.698 default: debug 1: req: nlookup(hotmail.com) id 4 typ
> e=15 class=1
> 23-Nov-2004 14:36:45.699 default: debug 1: req: found 'hotmail.com' as 'hotma
> il.com' (cname=0)
> 23-Nov-2004 14:36:45.713 default: debug 1: sysquery: send -> [192.36.148.17].
> 53 dfd=4 nsid=236 i
> d=0 retry=1101238610
> 23-Nov-2004 14:36:45.725 default: debug 1: sysquery: send -> [192.36.148.17].
> 53 dfd=4 nsid=64543
> id=0 retry=1101238610
> 23-Nov-2004 14:36:45.738 default: debug 1: sysquery: send -> [192.36.148.17].
> 53 dfd=4 nsid=35566
> id=0 retry=1101238610
> 23-Nov-2004 14:36:45.750 default: debug 1: sysquery: send -> [192.36.148.17].
> 53 dfd=4 nsid=56665
> id=0 retry=1101238610
> 23-Nov-2004 14:36:45.762 default: debug 1: sysquery: send -> [192.36.148.17].
> 53 dfd=4 nsid=56824
> id=0 retry=1101238610
> 23-Nov-2004 14:36:45.776 default: debug 1: sysquery: send -> [192.36.148.17].
> 53 dfd=4 nsid=123 i
> d=0 retry=1101238610
> 23-Nov-2004 14:36:45.783 default: debug 1: forw: forw -> [192.48.79.30].53 ds
> =4 nsid=34770 id=4
> 12ms retry 4sec
> 23-Nov-2004 14:36:45.997 default: debug 1: datagram from [192.48.79.30].53, f
> d 4, len 12
> 23-Nov-2004 14:36:45.998 default: debug 1: resend(addr=0 n=1) -> [192.48.79.3
> 0].53 ds=4 nsid=347
> 70 id=4 12ms
> 23-Nov-2004 14:36:46.217 default: debug 1: datagram from [192.48.79.30].53, f
> d 4, len 207
> 23-Nov-2004 14:36:46.221 default: debug 1: resp: nlookup(hotmail.com) qtype=1
> 5
> 23-Nov-2004 14:36:46.221 default: debug 1: resp: found 'hotmail.com' as 'hotm
> ail.com' (cname=0)
> 23-Nov-2004 14:36:46.221 default: debug 1: finddata(): buflen=4067
> 23-Nov-2004 14:36:50.007 default: debug 1: resend(addr=1 n=0) -> [192.5.5.241
> ].53 ds=4 nsid=236
> id=0 13883ms
> 23-Nov-2004 14:36:50.009 default: debug 1: resend(addr=1 n=0) -> [192.5.5.241
> ].53 ds=4 nsid=123
> id=0 13883ms
> 23-Nov-2004 14:36:50.010 default: debug 1: resend(addr=1 n=0) -> [192.5.5.241
> ].53 ds=4 nsid=5682
> 4 id=0 13883ms
> 23-Nov-2004 14:36:50.011 default: debug 1: resend(addr=1 n=0) -> [192.5.5.241
> ].53 ds=4 nsid=5666
> 5 id=0 13883ms
> 23-Nov-2004 14:36:50.012 default: debug 1: resend(addr=1 n=0) -> [192.5.5.241
> ].53 ds=4 nsid=3556
> 6 id=0 13883ms
> 23-Nov-2004 14:36:50.014 default: debug 1: resend(addr=1 n=0) -> [192.5.5.241
> ].53 ds=4 nsid=6454
> 3 id=0 13883ms
> 23-Nov-2004 14:37:03.007 default: debug 1: resend(addr=2 n=0) -> [202.12.27.3
> 3].53 ds=4 nsid=502
> 56 id=0 13884ms
> 23-Nov-2004 14:37:03.009 default: debug 1: resend(addr=2 n=0) -> [202.12.27.3
> 3].53 ds=4 nsid=244
> 9 id=0 13884ms
> 23-Nov-2004 14:37:03.010 default: debug 1: resend(addr=2 n=0) -> [202.12.27.3
> 3].53 ds=4 nsid=605
> 31 id=0 13884ms
> 23-Nov-2004 14:37:03.011 default: debug 1: resend(addr=2 n=0) -> [202.12.27.3
> 3].53 ds=4 nsid=181
> 54 id=0 13884ms
> 23-Nov-2004 14:37:03.013 default: debug 1: resend(addr=2 n=0) -> [202.12.27.3
> 3].53 ds=4 nsid=437
> 49 id=0 13884ms
> 23-Nov-2004 14:37:03.014 default: debug 1: resend(addr=2 n=0) -> [202.12.27.3
> 3].53 ds=4 nsid=241
> 98 id=0 13884ms
> 23-Nov-2004 14:37:17.007 default: debug 1: resend(addr=2 n=0) -> [202.12.27.3
> 3].53 ds=4 nsid=645
> 43 id=0 13884ms
> 23-Nov-2004 14:37:17.009 default: debug 1: resend(addr=2 n=0) -> [202.12.27.3
> 3].53 ds=4 nsid=355
> 66 id=0 13884ms
> 23-Nov-2004 14:37:17.010 default: debug 1: resend(addr=2 n=0) -> [202.12.27.3
> 3].53 ds=4 nsid=566
> 65 id=0 13884ms
> 23-Nov-2004 14:37:17.011 default: debug 1: resend(addr=2 n=0) -> [202.12.27.3
> 3].53 ds=4 nsid=568
> 24 id=0 13884ms
> 23-Nov-2004 14:37:17.012 default: debug 1: resend(addr=2 n=0) -> [202.12.27.3
> 3].53 ds=4 nsid=123
> id=0 13884ms
> 23-Nov-2004 14:37:17.013 default: debug 1: resend(addr=2 n=0) -> [202.12.27.3
> 3].53 ds=4 nsid=236
> id=0 13884ms
> 23-Nov-2004 14:37:21.583 default: debug 1: Debug off
Fix / configure your firewall to handle EDNS queries. Your
firewall is blocking the EDNS replies from the root servers
as well as servers lower down. EDNS is a standards track
extention which means all firewalls should handle it.
Network Working Group P. Vixie
Request for Comments: 2671 ISC
Category: Standards Track August 1999
You can work around the issue by setting "edns-udp-size
512;". This is a stop gap measure until you get your
firewall fixed as the extra answer space provided by using
EDNS is required to get all the glue records from the parent
servers.
Mark
--
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742 INTERNET: Mark_Andrews at isc.org
More information about the bind-users
mailing list