lame-servers: error (FORMERR) resolving [something]

Daniele d.imbrogino at gmail.com
Tue Jan 22 10:18:48 UTC 2013


Ok! Thank you all!

My router doesn't maintain a DNS cache, so it must be my IPS's fault.

The last questions, if it's possible: what happens when my 'named' starts
an iterative query? Does it arrive to the real root-server (first of all),
or is it processed by some other cache-server on the path? And why 'named'
doesn't "understand" the responses from these cache-servers?


2013/1/18 Mark Andrews <marka at isc.org>

>
> In message <
> CAL_2sc1sZsTUMPMfCeUqrF87nqWE+5N30qVGudS7q-4g6vaLvA at mail.gmail.com>,
> Daniele writes:
> > These are the outputs. I also attach the file containing them.
> >
> >
> > ; <<>> DiG 9.8.1-P1 <<>> ns . +norec +noedns @198.41.0.4
> > ;; global options: +cmd
> > ;; Got answer:
> > ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 25625
> > ;; flags: qr ra; QUERY: 1, ANSWER: 13, AUTHORITY: 0, ADDITIONAL: 14
> >
> > ;; QUESTION SECTION:
> > ;.                IN    NS
> >
> > ;; ANSWER SECTION:
> > .            243196    IN    NS    l.root-servers.net.
> > .            243196    IN    NS    g.root-servers.net.
> > .            243196    IN    NS    k.root-servers.net.
> > .            243196    IN    NS    a.root-servers.net.
> > .            243196    IN    NS    e.root-servers.net.
> > .            243196    IN    NS    d.root-servers.net.
> > .            243196    IN    NS    c.root-servers.net.
> > .            243196    IN    NS    i.root-servers.net.
> > .            243196    IN    NS    f.root-servers.net.
> > .            243196    IN    NS    h.root-servers.net.
> > .            243196    IN    NS    j.root-servers.net.
> > .            243196    IN    NS    b.root-servers.net.
> > .            243196    IN    NS    m.root-servers.net.
> >
> > ;; ADDITIONAL SECTION:
> > a.root-servers.net.    502389    IN    A    198.41.0.4
> > a.root-servers.net.    508720    IN    AAAA    2001:503:ba3e::2:30
> > b.root-servers.net.    502640    IN    A    192.228.79.201
> > c.root-servers.net.    502640    IN    A    192.33.4.12
> > d.root-servers.net.    523851    IN    A    199.7.91.13
> > e.root-servers.net.    502640    IN    A    192.203.230.10
> > f.root-servers.net.    581030    IN    A    192.5.5.241
> > f.root-servers.net.    236384    IN    AAAA    2001:500:2f::f
> > g.root-servers.net.    502640    IN    A    192.112.36.4
> > i.root-servers.net.    502640    IN    A    192.36.148.17
> > i.root-servers.net.    555890    IN    AAAA    2001:7fe::53
> > j.root-servers.net.    537043    IN    A    192.58.128.30
> > j.root-servers.net.    236384    IN    AAAA    2001:503:c27::2:30
> > k.root-servers.net.    502394    IN    A    193.0.14.129
> >
> > ;; Query time: 62 msec
> > ;; SERVER: 198.41.0.4#53(198.41.0.4)
> > ;; WHEN: Fri Jan 18 15:38:42 2013
> > ;; MSG SIZE  rcvd: 500
>
> Below is what the answer should look like.  The TTLs should be these
> values shown below (6 days and 1000 hours) and "aa" should be set
> in the flags and "ra" should NOT be set in the flags.  You have a
> "transparent" DNS caching proxy between you and the Internet as a
> whole.
>
> Some routers try to be "helpful" by maintaining a DNS cache.  You
> need to turn the "feature" off.  Otherwise it is your ISP doing it
> and you need to get them to stop mucking with your DNS queries.
>
> Named issues non-recursive queries and sticking a normal recursive
> server in the path that pays attention to the setting of "rd" doesn't
> result in getting the required answers back.
>
> Mark
>
> ; <<>> DiG 9.10.0pre-alpha <<>> ns . +norec +noedns @198.41.0.4
> ;; global options: +cmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 18118
> ;; flags: qr aa; QUERY: 1, ANSWER: 13, AUTHORITY: 0, ADDITIONAL: 14
>
> ;; QUESTION SECTION:
> ;.                              IN      NS
>
> ;; ANSWER SECTION:
> .                       518400  IN      NS      c.root-servers.net.
> .                       518400  IN      NS      m.root-servers.net.
> .                       518400  IN      NS      b.root-servers.net.
> .                       518400  IN      NS      f.root-servers.net.
> .                       518400  IN      NS      j.root-servers.net.
> .                       518400  IN      NS      g.root-servers.net.
> .                       518400  IN      NS      i.root-servers.net.
> .                       518400  IN      NS      h.root-servers.net.
> .                       518400  IN      NS      d.root-servers.net.
> .                       518400  IN      NS      l.root-servers.net.
> .                       518400  IN      NS      a.root-servers.net.
> .                       518400  IN      NS      e.root-servers.net.
> .                       518400  IN      NS      k.root-servers.net.
>
> ;; ADDITIONAL SECTION:
> a.root-servers.net.     3600000 IN      A       198.41.0.4
> a.root-servers.net.     3600000 IN      AAAA    2001:503:ba3e::2:30
> b.root-servers.net.     3600000 IN      A       192.228.79.201
> c.root-servers.net.     3600000 IN      A       192.33.4.12
> d.root-servers.net.     3600000 IN      A       199.7.91.13
> d.root-servers.net.     3600000 IN      AAAA    2001:500:2d::d
> e.root-servers.net.     3600000 IN      A       192.203.230.10
> f.root-servers.net.     3600000 IN      A       192.5.5.241
> f.root-servers.net.     3600000 IN      AAAA    2001:500:2f::f
> g.root-servers.net.     3600000 IN      A       192.112.36.4
> h.root-servers.net.     3600000 IN      A       128.63.2.53
> h.root-servers.net.     3600000 IN      AAAA    2001:500:1::803f:235
> i.root-servers.net.     3600000 IN      A       192.36.148.17
> i.root-servers.net.     3600000 IN      AAAA    2001:7fe::53
>
> ;; Query time: 182 msec
> ;; SERVER: 198.41.0.4#53(198.41.0.4)
> ;; WHEN: Sat Jan 19 08:06:22 EST 2013
> ;; MSG SIZE  rcvd: 512
>
> --
> Mark Andrews, ISC
> 1 Seymour St., Dundas Valley, NSW 2117, Australia
> PHONE: +61 2 9871 4742                 INTERNET: marka at isc.org
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20130122/3ac6a8cc/attachment.html>


More information about the bind-users mailing list