Queries to a positively cached zone are failing (phila.gov)

[Ronan Flood]

Stephane Bortzmeyer <bortzmeyer at nic.fr> wrote:

> >  So the question is, what distinguishes a dig-fashioned query from a
> > BIND-fashioned query?
> 
> A few wild guesses:
> 
> * dig sets "rd" (recursion requested) by default ("dig +norec" to test
> it)
> 
> * BIND may have been configured with a source address which is not the
> default address of the machine (check the query-source option)

Also BIND will be using EDNS, so try dig +dnssec or dig +bufsiz=2048 or so.
BIND should spot if the remote server doesn't support EDNS and turn it off.

-- 
                      Ronan Flood <R.Flood at noc.ulcc.ac.uk>
                        working for but not speaking for
             Network Services, University of London Computer Centre
     (which means: don't bother ULCC if I've said something you don't like)