does not try second NS

[Paul C]

Looking at the output of your first 'dig' I think the problem is your 
name server is not responding to the 'dig', the same result is obtained 
if a dig is done on a server with no named daemon running, not that 
there is a problem with how BIND is handling further transactions. Why 
it is not responding is another question.....:-)

Quote from 'man dig'
Unless it is told to query a specific name server, dig will try each of
the servers listed in /etc/resolv.conf.

So I guess it comes down to why it cannot connect to the local 
nameserver on attempt 1 and can on attempt 2.

Disallowing recursion and queries from the local system does not result 
in the output of your first dig. I have to say it looks as though the 
nameserver was not running at that time. However I haven't tried every 
option so I may be wrong.

Regards

Paul Cuttriss

Roberto João Lopes Garcia wrote:
> Hi
> 
> Please someone could help
> 
> Domanin ghostscrip.com has 3 ns: ns1.ghostscript.com, ns2.ghostscript.com and ns1.levien.com
> 
> It appears that ns1.ghostscript.com is down.
> 
> My DNS can not resolve ghostscript.com. It is like BIND does not try second or third NS.
> 
> Using dig gives:  ;; connection timed out; no servers could be reached
> 
> but using dig +trace works well.
> 
> Please see data bellow
> 
> Thank you 
> 
> Roberto
> 
> OS: Fedora Core 3
> Bind: RPM  bind-9.2.4-8_FC3
> 
> [root at dns ~]# dig @localhost ghostscript.com
> 
> ; <<>> DiG 9.2.4 <<>> @localhost ghostscript.com
> ;; global options: printcmd
> ;; connection timed out; no servers could be reached
> 
> 
> [root at dns ~]# dig +trace @localhost ghostscript.com
> 
> ; <<>> DiG 9.2.4 <<>> +trace @localhost ghostscript.com
> ;; global options: printcmd
> . 516874 IN NS D.ROOT-SERVERS.NET.
> . 516874 IN NS E.ROOT-SERVERS.NET.
> . 516874 IN NS F.ROOT-SERVERS.NET.
> . 516874 IN NS G.ROOT-SERVERS.NET.
> . 516874 IN NS H.ROOT-SERVERS.NET.
> . 516874 IN NS I.ROOT-SERVERS.NET.
> . 516874 IN NS J.ROOT-SERVERS.NET.
> . 516874 IN NS K.ROOT-SERVERS.NET.
> . 516874 IN NS L.ROOT-SERVERS.NET.
> . 516874 IN NS M.ROOT-SERVERS.NET.
> . 516874 IN NS A.ROOT-SERVERS.NET.
> . 516874 IN NS B.ROOT-SERVERS.NET.
> . 516874 IN NS C.ROOT-SERVERS.NET.
> ;; Received 372 bytes from 127.0.0.1#53(localhost) in 2 ms
> 
> com. 172800 IN NS A.GTLD-SERVERS.NET.
> com. 172800 IN NS G.GTLD-SERVERS.NET.
> com. 172800 IN NS H.GTLD-SERVERS.NET.
> com. 172800 IN NS C.GTLD-SERVERS.NET.
> com. 172800 IN NS I.GTLD-SERVERS.NET.
> com. 172800 IN NS B.GTLD-SERVERS.NET.
> com. 172800 IN NS D.GTLD-SERVERS.NET.
> com. 172800 IN NS L.GTLD-SERVERS.NET.
> com. 172800 IN NS F.GTLD-SERVERS.NET.
> com. 172800 IN NS J.GTLD-SERVERS.NET.
> com. 172800 IN NS K.GTLD-SERVERS.NET.
> com. 172800 IN NS E.GTLD-SERVERS.NET.
> com. 172800 IN NS M.GTLD-SERVERS.NET.
> ;; Received 493 bytes from 128.8.10.90#53(D.ROOT-SERVERS.NET) in 380 ms
> 
> ghostscript.com. 172800 IN NS ns1.ghostscript.com.
> ghostscript.com. 172800 IN NS ns1.levien.com.
> ;; Received 108 bytes from 192.5.6.30#53(A.GTLD-SERVERS.NET) in 202 ms
> 
> ghostscript.com. 7200 IN A 209.133.53.61
> ghostscript.com. 7200 IN NS ns2.ghostscript.com.
> ghostscript.com. 7200 IN NS ns1.levien.com.
> ghostscript.com. 7200 IN NS ns1.ghostscript.com.
> ;; Received 158 bytes from 63.196.208.218#53(ns1.levien.com) in 428 ms
> 
> [root at dns ~]#
> 
>