no authoritative answer from master server

Mark Andrews Mark_Andrews at isc.org
Thu Nov 17 21:46:18 UTC 2005


> On 11/17/05, Barry Margolin <barmar at alum.mit.edu> wrote:
> > In article <dlghpj$1f60$1 at sf1.isc.org>,
> >  Fernando Soria <nandoria at gmail.com> wrote:
> >
> > > My doubt it's wen I do a query of the type ANY I forgot that... dig
> > > when no type is specified perform a lookup of the A record...
> > > like this:
> > > #dig @ns1.dnsdigital.com.ar ANY dnsdigital.com.ar <-- no authoritative an
> swer
> > > #dig @ns17.zoneedit.com.ar ANY dnsdigital.com.ar <-- authoritative answer
> >
> > A BIND server is either authoritative for a zone or not, it shouldn't
> > matter what record type is specified in the query.  I've seen
> > type-specific differences with some non-BIND servers, but never with
> > BIND.
> >
> > Anyway, it's authoritative when I try it:
> >
> > ; <<>> DiG 9.2.2 <<>> @ns1.dnsdigital.com.ar any dnsdigital.com.ar +multi
> > ;; global options:  printcmd
> > ;; Got answer:
> > ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 18610
> > ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 6, AUTHORITY: 0, ADDITIONAL: 2
> >
> > ;; QUESTION SECTION:
> > ;dnsdigital.com.ar.  IN ANY
> >
> > ;; ANSWER SECTION:
> > dnsdigital.com.ar.   259200 IN SOA ns1.dnsdigital.com.ar.
> > soa.dnsdigital.com.ar. (
> >             2005102701 ; serial
> >             28800      ; refresh (8 hours)
> >             7200       ; retry (2 hours)
> >             2419200    ; expire (4 weeks)
> >             86400      ; minimum (1 day)
> >             )
> > dnsdigital.com.ar.   259200 IN NS ns17.zoneedit.com.
> > dnsdigital.com.ar.   259200 IN NS ns1.dnsdigital.com.ar.
> > dnsdigital.com.ar.   259200 IN NS ns8.zoneedit.com.
> > dnsdigital.com.ar.   259200 IN MX 1 mail.dnsdigital.com.ar.
> > dnsdigital.com.ar.   259200 IN A 200.59.130.146
> >
> > ;; ADDITIONAL SECTION:
> > ns1.dnsdigital.com.ar.  259200 IN A 200.59.130.146
> > mail.dnsdigital.com.ar. 259200 IN A 200.59.130.146
> >
> > ;; Query time: 189 msec
> > ;; SERVER: 200.59.130.146#53(ns1.dnsdigital.com.ar)
> > ;; WHEN: Thu Nov 17 01:12:12 2005
> > ;; MSG SIZE  rcvd: 211
> >
> > --
> > Barry Margolin, barmar at alum.mit.edu
> > Arlington, MA
> > *** PLEASE post questions in newsgroups, not directly to me ***
> >
> 
> OK it see the problem now...
> The problem is me apparently, I'm confusing the output of dig the
> "->>HEADER<<-" part there is a AUTHORITY:0 when I query
> ns1.dnsdigital.com.ar but if I query ns17.zoneedit.com it prints
> AUTHORITY:3 why is that?
 
	Different nameserver implementations.  The answer section
	is authoritative so the NS records in the authority are
	redundant.

	Mark
--
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark_Andrews at isc.org



More information about the bind-users mailing list