Delegation check failed

[Lightner, Jeff]

I was the one asking about water.com.  I'd started a separate thread hoping not to tromp on the OP of the earlier thread but apparently didn't succeed.

I know the reason for the SOA/MX report so never asked about that.

I did ask about the delegation messages but at this point as noted earlier I'm fairly convinced it is a bug in the way they do the test at iis.se rather than an actual issue.   (Believe me - I'd HEAR VERY QUICKLY if water.com became inaccessible from the internet.)   I was asking the question to see if there was a tweak I needed but based responses I don't think so.





-----Original Message-----
From: bind-users-bounces+jlightner=water.com at lists.isc.org [mailto:bind-users-bounces+jlightner=water.com at lists.isc.org] On Behalf Of Kevin Oberman
Sent: Wednesday, September 21, 2011 12:30 PM
To: Niall O'Reilly
Cc: bind-users
Subject: Re: Delegation check failed

On Wed, Sep 21, 2011 at 2:25 AM, Niall O'Reilly <Niall.oReilly at ucd.ie> wrote:
>
> On 21 Sep 2011, at 02:08, Kevin Oberman wrote:
>
>> dig confirms that .com had the glue for water.com.
>
>        As does dnscheck.iis.se.
>        Indeed, none of the test history (5 tests, today and yasterday)
>        archived for water.com at this site shows any delegation problem.
>        Only a warning is shown against the SOA:
>
>                Failed to connect to smtpbh1.water.com (12.44.84.193).
>
>        I guess that this means that an MX host is protected in some way.
>
>        Is there some other "dnscheck" that people are using, and which
>        is causing confusion?

Matt,

Are you running the "Undelegated domain test" or just the default
"Domain test"? Only the
"Undelegated domain test" is showing the error. It is still reporting it now.
    Nameserver dswadns1.water.com is listed for zone water.com without
address information.

    Nameserver dswadns2.water.com is listed for zone water.com without
address information.

The SOA issue is sort of real. The preferred MX for the SOA contact is
smtpbh1.water.com
and attempts to connect to port 25 on that system time out, as does an
attempt to smtpbh2.
But smtp.water.com is fine so I don't this this an appropriate report, either.

Again, the gtld servers do have the required glue.
; <<>> DiG 9.8.1 <<>> ns +norecurse water.com. @f.gtld-servers.net.
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 55373
;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:
;water.com.                     IN      NS

;; AUTHORITY SECTION:
water.com.              172800  IN      NS      dswadns1.water.com.
water.com.              172800  IN      NS      dswadns2.water.com.

;; ADDITIONAL SECTION:
dswadns1.water.com.     172800  IN      A       12.44.84.213
dswadns2.water.com.     172800  IN      A       12.44.84.214

;; Query time: 39 msec
;; SERVER: 192.35.51.30#53(192.35.51.30)
;; WHEN: Wed Sep 21 09:28:37 2011
;; MSG SIZE  rcvd: 105

Still looks like a bug in dnscheck to me.
--
R. Kevin Oberman, Network Engineer - Retired
E-mail: kob6558 at gmail.com
_______________________________________________
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list

bind-users mailing list
bind-users at lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users



Proud partner. Susan G. Komen for the Cure.


Please consider our environment before printing this e-mail or attachments.

----------------------------------
CONFIDENTIALITY NOTICE: This e-mail may contain privileged or confidential information and is for the sole use of the intended recipient(s). If you are not the intended recipient, any disclosure, copying, distribution, or use of the contents of this information is prohibited and may be unlawful. If you have received this electronic transmission in error, please reply immediately to the sender that you have received the message in error, and delete it. Thank you.
----------------------------------