Problem resolving domains with valid GLUE records but misconfigured NS records

[Mark Andrews]

In message <4B9FAD0C.1090605 at um.edu.mt>, Gilbert Cassar writes:
> Hi,
> 
> We have a recurring problem with recursive domain resolution using a 
> bind 9.6 caching server.  An example of such a zone is ecb.eu. The 
> problem seems due to a misconfiguration on their side where all the 
> (supposedly authorative) NS records listed in their zone file do not 
> answer requests to resolve ecb.eu hosts. This prevents us from resolving 
> anything under the domain after that the NS records are cached (the 
> first query goes through as the GLUE record seems to work). The 
> interesting thing is that it works fine if we try to resolve the domain 
> using either Windows DNS or using Google open DNS service.
> 
> Since a number of sites seem to have this type of problems we would like 
> to be able to resolve them as well. Any idea of how can we configure to 
> be able to circumvent this problem?

The best thing is to complain to the administrator of the zone,
hostmaster at ecb.int, info at key-systems.net, jan.pflugradt at ecb.int.

Then complain to the "EU" administrators as they are *also* responsible
for keeping delegations up to date (RFC 1034) and this one clearly
isn't up to date.

Mark

> Please find below some digs I did to diagnose the problem.
> 
> Regards and Thanks
> Gilbert
> University of Malta
> 
> ----
> Asking the EU servers
> root at wenzu:~/bind-9.7.0# dig ns ecb.eu @a.nic.eu
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 58355
> ;; AUTHORITY SECTION:
> ecb.eu.            86400    IN    NS    ns1.ecb.int.
> 
> Checking for the NS records ...
> root at wenzu:~/bind-9.7.0# dig ns ecb.eu @ns1.ecb.int.
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 3891
> ;; ANSWER SECTION:
> ecb.eu.            86400    IN    NS    ns1.de.colt.net.
> ecb.eu.            86400    IN    NS    ns0.de.colt.net.
> ecb.eu.            86400    IN    NS    auth02.ns.de.uu.net.
> ecb.eu.            86400    IN    NS    auth52.ns.de.uu.net.
> 
> Asking their NS Servers:
> root at wenzu:~/bind-9.7.0# dig ns ecb.eu @auth02.ns.de.uu.net
> ;; ->>HEADER<<- opcode: QUERY, status: REFUSED, id: 27397
> ----
> 
> 
> 
> _______________________________________________
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: marka at isc.org