Dig ANY gives SERVFAIL / FORMERR

[Mark Andrews]

In message <alpine.NEB.2.01.0909231442321.415 at t1.m.reedmedia.net>, "Jeremy C. Re
ed" writes:
> > It looks like that the authoritative name server for youbei.cc
> > actually did return some answers, but somehow bind gave a FORMERR for
> > some unknown reasons, which I think it caused a SERVFAIL to be
> > reported in turn. Interestingly, dig any youbei.cc +trace ran
> > successfully and did not report any error.
> >
> > Does anyone know what might have caused this problem?
> 
> My custom named logs:
> 
> 23-Sep-2009 15:00:29.749 resolver: notice: FORMERR: Type didn't match (ANY != 
> A)
> 23-Sep-2009 15:00:29.770 resolver: notice: FORMERR: Reply has no answer.
> 
> named wants to know "Is the question the same as the one we asked?"
> 
> I think 72dns.com has a broken DNS server.
 
More modern versions of dig will also report the mismatch.  The
servers also answers AAAA queries with A records.

It's a pity registries are not required to verify correct operation
of the nameservers they are delegating to before accepting the
delegation.  If they were then a lot of this garbage would cease.
It really isn't hard for a registry (or the registrar on behalf of
the registry) to check that servers answer queries correctly.  Just
the almighty dollar has got in front of having a working system.

Mark

% dig any youbei.cc @ns1.72dns.com
;; Question section mismatch: got youbei.cc/A/IN
;; Question section mismatch: got youbei.cc/A/IN
;; Question section mismatch: got youbei.cc/A/IN

; <<>> DiG 9.7.0a2 <<>> any youbei.cc @ns1.72dns.com
;; global options: +cmd
;; connection timed out; no servers could be reached
% 

% dig aaaa youbei.cc @ns1.72dns.com

; <<>> DiG 9.3.6-P1 <<>> aaaa youbei.cc @ns1.72dns.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 5189
;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;youbei.cc.                     IN      AAAA

;; ANSWER SECTION:
youbei.cc.              3600    IN      A       211.155.230.241

;; Query time: 436 msec
;; SERVER: 121.12.173.174#53(121.12.173.174)
;; WHEN: Thu Sep 24 07:07:46 2009
;; MSG SIZE  rcvd: 52
%



> _______________________________________________
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: marka at isc.org