Delegation check failed

[Kevin Oberman]

On Wed, Sep 21, 2011 at 2:25 AM, Niall O'Reilly <Niall.oReilly at ucd.ie> wrote:
>
> On 21 Sep 2011, at 02:08, Kevin Oberman wrote:
>
>> dig confirms that .com had the glue for water.com.
>
>        As does dnscheck.iis.se.
>        Indeed, none of the test history (5 tests, today and yasterday)
>        archived for water.com at this site shows any delegation problem.
>        Only a warning is shown against the SOA:
>
>                Failed to connect to smtpbh1.water.com (12.44.84.193).
>
>        I guess that this means that an MX host is protected in some way.
>
>        Is there some other "dnscheck" that people are using, and which
>        is causing confusion?

Matt,

Are you running the "Undelegated domain test" or just the default
"Domain test"? Only the
"Undelegated domain test" is showing the error. It is still reporting it now.
    Nameserver dswadns1.water.com is listed for zone water.com without
address information.

    Nameserver dswadns2.water.com is listed for zone water.com without
address information.

The SOA issue is sort of real. The preferred MX for the SOA contact is
smtpbh1.water.com
and attempts to connect to port 25 on that system time out, as does an
attempt to smtpbh2.
But smtp.water.com is fine so I don't this this an appropriate report, either.

Again, the gtld servers do have the required glue.
; <<>> DiG 9.8.1 <<>> ns +norecurse water.com. @f.gtld-servers.net.
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 55373
;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:
;water.com.			IN	NS

;; AUTHORITY SECTION:
water.com.		172800	IN	NS	dswadns1.water.com.
water.com.		172800	IN	NS	dswadns2.water.com.

;; ADDITIONAL SECTION:
dswadns1.water.com.	172800	IN	A	12.44.84.213
dswadns2.water.com.	172800	IN	A	12.44.84.214

;; Query time: 39 msec
;; SERVER: 192.35.51.30#53(192.35.51.30)
;; WHEN: Wed Sep 21 09:28:37 2011
;; MSG SIZE  rcvd: 105

Still looks like a bug in dnscheck to me.
-- 
R. Kevin Oberman, Network Engineer - Retired
E-mail: kob6558 at gmail.com