BIND9 SERVFAIL on some .gov addresses

[Chuck Swiger]

On Feb 10, 2011, at 11:26 AM, Ryan Novosielski wrote:
> dig: isc_socket_create: address family not supported
> 
> I've read that I shouldn't let this error message lead me anywhere in
> particular. Does anyone have some advice for where to start
> troubleshooting?

The error message you mention is likely an attempt to do something with IPv6 addresses; perhaps your machine or your network is explicitly configured to do IPv4 only?  Does a dig against a well-known working nameserver return valid results like below?

% dig -t mx health.nyc.gov @4.2.2.2

; <<>> DiG 9.6.3 <<>> -t mx health.nyc.gov @4.2.2.2
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 12326
;; flags: qr rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;health.nyc.gov.			IN	MX

;; ANSWER SECTION:
health.nyc.gov.		900	IN	MX	10 vwall4.nyc.gov.
health.nyc.gov.		900	IN	MX	10 vwall1.nyc.gov.
health.nyc.gov.		900	IN	MX	10 vwall2.nyc.gov.
health.nyc.gov.		900	IN	MX	10 vwall3.nyc.gov.

;; Query time: 29 msec
;; SERVER: 4.2.2.2#53(4.2.2.2)
;; WHEN: Thu Feb 10 14:42:15 2011
;; MSG SIZE  rcvd: 124

Regards,
-- 
-Chuck