Lame Server

[Mark Andrews]

> Akaash T wrote:
> > Dear all
> >   My dns server is showing as lame server in dnsreport.com.Iam using isc
> > bind software.can u
> > please tellme how to solve it. my domain name is soft.net
> > <http://soft.net>and ip address is
> > 164.164.4.5.The following erro
> > am getting when am checking in dnsreport site.
> >  ERROR: You have one or more lame nameservers. These are nameservers that d
> o
> > NOT answer authoritatively for your domain. This is bad; for example, these
> > nameservers may never get updated. The following nameservers are lame:
> >  Regards
> > akash.t
> > 
> 
> I have checked with dig. Here is what l.GTLD-SERVERS.net says:
> 
> 
> ; <<>> DiG 9.1.3 <<>> -t any soft.net @l.GTLD-SERVERS.net
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 58700
> ;; flags: qr rd; QUERY: 1, ANSWER: 2, AUTHORITY: 2, ADDITIONAL: 2
> 
> ;; QUESTION SECTION:
> ;soft.net.                      IN      ANY
> 
> ;; ANSWER SECTION:
> soft.net.               172800  IN      NS      stpb.soft.net.
> soft.net.               172800  IN      NS      taurus.soft.net.
> 
> ;; AUTHORITY SECTION:
> soft.net.               172800  IN      NS      stpb.soft.net.
> soft.net.               172800  IN      NS      taurus.soft.net.
> 
> ;; ADDITIONAL SECTION:
> stpb.soft.net.          172800  IN      A       164.164.4.5
> taurus.soft.net.        172800  IN      A       164.164.128.16
> 
> ;; Query time: 182 msec
> ;; SERVER: 192.41.162.30#53(l.GTLD-SERVERS.net)
> ;; WHEN: Thu Oct 20 10:46:56 2005
> ;; MSG SIZE  rcvd: 126
> 
> 
> And here is what your servers say:
> 
> ; <<>> DiG 9.1.3 <<>> -t any soft.net @stpb.soft.net
> ;; global options:  printcmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 51390
> ;; flags: qr rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 2
> 
> ;; QUESTION SECTION:
> ;soft.net.                      IN      ANY
> 
> ;; ANSWER SECTION:
> soft.net.               86400   IN      A       164.164.128.29
> soft.net.               86400   IN      NS      stpb.soft.net.
> soft.net.               86400   IN      SOA     stpb.soft.net. root.stpb.soft
> .net.\
>                                                  2005101904 7200 3600 604800 
> 86400
> soft.net.               86400   IN      NS      taurus.soft.net.
> 
> ;; ADDITIONAL SECTION:
> stpb.soft.net.          86400   IN      A       164.164.4.5
> taurus.soft.net.        86400   IN      A       164.164.128.16
> 
> ;; Query time: 460 msec
> ;; SERVER: 164.164.4.5#53(stpb.soft.net)
> ;; WHEN: Thu Oct 20 10:47:56 2005
> ;; MSG SIZE  rcvd: 155
> 
> 
> 
> ; <<>> DiG 9.1.3 <<>> -t any soft.net @taurus.soft.net.
> ;; global options:  printcmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 31117
> ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 2
> 
> ;; QUESTION SECTION:
> ;soft.net.                      IN      ANY
> 
> ;; ANSWER SECTION:
> soft.net.               86400   IN      SOA     stpb.soft.net. root.stpb.soft
> .net.\
>                                                  999 7200 3600 604800 86400
> soft.net.               86400   IN      NS      stpb.soft.net.
> soft.net.               86400   IN      NS      taurus.soft.net.
> soft.net.               86400   IN      A       164.164.128.29
> 
> ;; ADDITIONAL SECTION:
> stpb.soft.net.          86400   IN      A       164.164.4.5
> taurus.soft.net.        86400   IN      A       164.164.128.16
> 
> ;; Query time: 467 msec
> ;; SERVER: 164.164.128.16#53(taurus.soft.net.)
> ;; WHEN: Thu Oct 20 10:49:19 2005
> ;; MSG SIZE  rcvd: 155
> 
> 
> 
> Both servers are answering correctly. But stpb did take 2.5 seconds to answer
> at least once. Taurus was always answering fast. I guess stpb has a lot of
> work to do. And here are the serial numbers:

	No they are NOT both answering correctly.  Note that "aa" was not
	set in the flags for both servers.  This indicates that there is
	probably have a error in the zone file.  This should have been
	logged when the zone was loaded.

	Now I would suggest that stpb.soft.net is upgraded as it is a
	running a extremely old version of named.  A more recent version
	will also just refuse to load the zone making it harder to
	ignore the logged errors.

	VERSION.BIND.		0S CHAOS TXT	"BIND 8.1.2"

	I would also upgrade taurus.soft.net as well because it is getting
	long in the tooth as well.

 	version.bind.           0S CHAOS TXT    "9.2.2"

	Mark

> check_soa soft.net
> taurus.soft.net has serial number 999
> stpb.soft.net is not authoritative for soft.net
> 
> Here is the problem. The zone file seems to be correct. Both servers are
> answering. But the serial numbers are different. And something is in the
> bits.
> 
> 
> Kind regards,
> Peter and Karin Dambier
> 
> -- 
> Peter and Karin Dambier
> Public-Root
> Graeffstrasse 14
> D-64646 Heppenheim
> +49-6252-671788 (Telekom)
> +49-179-108-3978 (O2 Genion)
> +49-6252-750308 (VoIP: sipgate.de)
> mail: peter at peter-dambier.de
> mail: peter at echnaton.serveftp.com
> http://iason.site.voila.fr
> http://www.kokoom.com/iason
> 
> 
--
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark_Andrews at isc.org