Possible Zone settings issues

[Mark Andrews]

> Hey All,
> 
> I have an interesting problem.
> 
> We have a bind 9 installation on dns.integrant.ca.  It holds several zones
> for clients, two of which are chownequipment.com and njohnsonequipment.com. 
> The chownequipment.com domain has been moved over to different DNS servers
> due to the following problem...
> 
> There are several DNS servers that can not resolve the domain name, and
> several that CAN resolve the domain.  We're quite confused over the whole
> thing, and makes things difficult (obviously), like when I attempted to
> validate a clients page with the W3C validators, and it couldn't find the
> host, yet I was looking at it in my browser, and the domain has been active
> for a few months.
> 
> Here is the output from digging the domain from the dns server
> 
> ; <<>> DiG 9.3.0 <<>> @dns.integrant.ca -t any njohnsonequipment.com
> ;; global options:  printcmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 19408
> ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 5, AUTHORITY: 0, ADDITIONAL: 1
> 
> ;; QUESTION SECTION:
> ;njohnsonequipment.com.         IN      ANY
> 
> ;; ANSWER SECTION:
> njohnsonequipment.com.  86400   IN      SOA     integrant.ca.
> hostmaster.integrant.ca. 2004111201 18000 3600 259200 10800
> njohnsonequipment.com.  86400   IN      NS      dns.integrant.ca.
> njohnsonequipment.com.  86400   IN      MX      10 integrant.ca.
> njohnsonequipment.com.  86400   IN      TXT     "N. Johnson Equipment Ltd."
> njohnsonequipment.com.  86400   IN      A       156.34.135.82
> 
> ;; ADDITIONAL SECTION:
> integrant.ca.           86400   IN      A       156.34.135.82
> 
> ;; Query time: 149 msec
> ;; SERVER: 156.34.135.82#53(dns.integrant.ca)
> ;; WHEN: Thu Mar  3 16:16:04 2005
> ;; MSG SIZE  rcvd: 202
> 
> Thanks
> 
> Terry Soucy

	Nameservers cannot be CNAMES.

	This is a perfect example of why not as:
	* the parent would have to hold a CNAME for dns.integrant.ca as glue
	* the parent would have to hold a A record for integrant.ca as glue
	* the additional section processing rules would have to be
	  changed to follow CNAMES in the additional section.

	Make dns.integrant.ca a A record.

	Mark

drugs:marka 08:10 {283} % dig dns.integrant.ca @156.34.135.82

; <<>> DiG 8.3 <<>> dns.integrant.ca @156.34.135.82 
; (1 server found)
;; res options: init recurs defnam dnsrch
;; got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 53320
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 1, ADDITIONAL: 0
;; QUERY SECTION:
;;      dns.integrant.ca, type = A, class = IN

;; ANSWER SECTION:
dns.integrant.ca.       1D IN CNAME     integrant.ca.
integrant.ca.           1D IN A         156.34.135.82

;; AUTHORITY SECTION:
integrant.ca.           1D IN NS        dns.integrant.ca.

;; Total query time: 311 msec
;; FROM: drugs.dv.isc.org to SERVER: 156.34.135.82
;; WHEN: Fri Mar  4 08:10:45 2005
;; MSG SIZE  sent: 34  rcvd: 78

--
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark_Andrews at isc.org