Bind not returning A record

Wed Dec 22 14:24:55 UTC 2010

The A records for ns1.yu.kwsp.gov.my and ns2.yu.kwsp.gov.my is missing at the authoritative servers for the subdomain yu.kwsp.gov.my, ie :

ns1.yu.kwsp.gov.my.     43200   IN      A       202.162.21.163
ns2.yu.kwsp.gov.my.     43200   IN      A       211.25.56.211

# dig @202.162.21.163 ns1.yu.kwsp.gov.my

;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 52796
;; flags: qr aa rd; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; WARNING: recursion requested but not available

;; QUESTION SECTION:
;ns1.yu.kwsp.gov.my.            IN      A

;; AUTHORITY SECTION:
yu.kwsp.gov.my.         60      IN      SOA     rjgtm.kwsp.gov.my. hostmaster.rjgtm.kwsp.gov.my. 12 10800 3600 604800 60

;; Query time: 4 msec
;; SERVER: 202.162.21.163#53(202.162.21.163)
;; WHEN: Wed Dec 22 22:13:25 2010
;; MSG SIZE  rcvd: 89

This is probably causing the lookup failures

----- Original Message ----- 
From: "Paul Ooi Cong Jen" <paulooi at takizo.com>
To: "Lyle Giese" <lyle at lcrcomputer.net>
Cc: <bind-users at lists.isc.org>
Sent: Wednesday, December 22, 2010 9:53 PM
Subject: Re: Bind not returning A record

> 
> On 22-Dec-2010, at 9:41 PM, Lyle Giese wrote:
> 
>> Paul Ooi Cong Jen wrote:
>>> kwsp.gov.my.            86400   IN      NS      ns3.pttcdc.com.my.
>>> ;; Received 109 bytes from 137.189.6.21#53(ns2.cuhk.edu.hk) in 52 ms
>>> 
>>> www.kwsp.gov.my.        43200   IN      CNAME   www.yu.kwsp.gov.my.
>>> ;; Received 54 bytes from 202.184.117.10#53(ns3.pttcdc.com.my) in 21 ms
>>> -----------------------------------------------
>>> 
>>> If I tried to rndc flush, dig again the record return the result 
>>> ------------------------------
>>> 
>>> dig @localhost www.kwsp.gov.my
>>> 
>>> ; <<>> DiG 9.7.0-P3 <<>> @localhost www.kwsp.gov.my
>>> ; (2 servers found)
>>> ;; global options: +cmd
>>> ;; Got answer:
>>> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 20092
>>> ;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 2, ADDITIONAL: 0
>>> 
>>> ;; QUESTION SECTION:
>>> ;www.kwsp.gov.my.               IN      A
>>> 
>>> ;; ANSWER SECTION:
>>> www.kwsp.gov.my.        43186   IN      CNAME   www.yu.kwsp.gov.my.
>>> www.yu.kwsp.gov.my.     30      IN      A       202.162.21.166
>>> 
>>> ;; AUTHORITY SECTION:
>>> yu.kwsp.gov.my.         43200   IN      NS      ns2.yu.kwsp.gov.my.
>>> yu.kwsp.gov.my.         43200   IN      NS      ns1.yu.kwsp.gov.my.
>>> 
>>> ;; Query time: 829 msec
>>> ;; SERVER: 127.0.0.1#53(127.0.0.1)
>>> ;; WHEN: Wed Dec 22 15:04:55 2010
>>> ;; MSG SIZE  rcvd: 106
>>> 
>>> ------------------------
>>> 
>>> 
>>>> From the debug logs, we see the error message as below
>>> 
>>> gov.my/IN/A at query.c:4650
>>> 22-Dec-2010 14:38:52.845 query-errors: client 211.24.220.233#54055: query failed (SERVFAIL) for www.kwsp.gov.my/IN/A at query.c:4650
>>> 22-Dec-2010 14:38:52.845 query-errors: client 211.24.220.233#54023: query failed (SERVFAIL) for www.kwsp.gov.my/IN/A at query.c:4650
>>> 22-Dec-2010 14:40:27.940 query-errors: client 203.121.30.35#52679: query failed (SERVFAIL) for www.kwsp.gov.my/IN/A at query.c:4650
>>> 22-Dec-2010 14:40:27.940 query-errors: client 211.24.220.233#54143: query failed (SERVFAIL) for www.kwsp.gov.my/IN/A at query.c:4650
>>> 22-Dec-2010 14:43:48.202 query-errors: client 211.24.177.146#62297: query failed (SERVFAIL) for www.kwsp.gov.my/IN/A at query.c:4650
>>> 22-Dec-2010 14:43:48.202 query-errors: client 211.24.220.233#54459: query failed (SERVFAIL) for www.kwsp.gov.my/IN/A at query.c:4650
>>> 22-Dec-2010 14:43:48.202 query-errors: client 211.24.220.233#54473: query failed (SERVFAIL) for www.kwsp.gov.my/IN/A at query.c:4650
>>> 22-Dec-2010 14:43:48.202 query-errors: client 211.24.177.146#62297: query failed (SERVFAIL) for www.kwsp.gov.my/IN/A at query.c:4650
>>> 22-Dec-2010 14:44:48.290 query-errors: client 211.24.220.233#54530: query failed (SERVFAIL) for www.kwsp.gov.my/IN/A at query.c:4650
>>> 22-Dec-2010 14:44:48.290 query-errors: client 127.0.0.1#19009: query failed (SERVFAIL) for www.kwsp.gov.my/IN/A at query.c:4650
>>> 22-Dec-2010 14:44:48.290 query-errors: client 211.24.220.233#54547: query failed (SERVFAIL) for www.kwsp.gov.my/IN/A at query.c:4650
>>> 
>>> On the other hand, we notice that the NS record seem like no DNS service running, could it be client side or server side problem?
>>> 
>> Bind is returning the proper answer.  There is no A record for www.kwsp.gov.my.  It's been setup as a CNAME to www.yu.kwsp.gov.my and you have received that answer.
>> 
>> As far as those errors go, those are probably errors in their setup.
> 
> Hi Lyle, 
> 
> I guess the same too, because the NS record for the CNAME seems not available.
> 
>> 
>> Lyle Giese
>> LCR Computer Services, Inc.
>> 
>> _______________________________________________
>> bind-users mailing list
>> bind-users at lists.isc.org
>> https://lists.isc.org/mailman/listinfo/bind-users
> 
> _______________________________________________
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20101222/0134e933/attachment.html>