Secondary DNS question...

[SH Development]

No, the box is hanging right off the internet on a static IP.

Jeff


On Jun 26, 2013, at 12:38 AM, Frank Bulk <frnkblk at iname.com> wrote:

> Do you have a box such as a firewall or load-balancer sitting in front of
> ns1?
> 
> Frank
> 
> -----Original Message-----
> From: bind-users-bounces+frnkblk=iname.com at lists.isc.org
> [mailto:bind-users-bounces+frnkblk=iname.com at lists.isc.org] On Behalf Of SH
> Development
> Sent: Tuesday, June 25, 2013 8:35 PM
> To: bind-users at lists.isc.org
> Subject: Re: Secondary DNS question...
> 
> All very interesting, but I'm afraid at my level of expertise on DNS, I'm
> not following.  If I'm broken, how do I attempt to fix?  Someone mentioned
> that our ns1.starionhost.net was not authoritative.  How does one even
> decide that?  As far as I know I haven't had any issues until now...
> 
> Jeff
> 
> 
> On Jun 25, 2013, at 6:26 AM, Matus UHLAR - fantomas <uhlar at fantomas.sk>
> wrote:
> 
>>> On 24.06.13 07:41, Frank Bulk wrote:
>>>> Interesting to note that querying for ANY does return an SOA.  I can't
>>>> explain that behavior.
>> 
>> On 24.06.13 14:54, Matus UHLAR - fantomas wrote:
>>> I can guess a kind of DNS filter/firewall. Some l3 switches or load
>>> balancers tend to produce strange results too...
>> 
>> aa! I am getting response packets  but they are somehoe not accepted by
> dig:
>> 
>> % dig +norec +bufsize=4096 -t soa starionline.com @ns1.starionhost.net
>> 
>> ; <<>> DiG 9.8.4-rpz2+rl005.12-P1 <<>> +norec +bufsize=4096 -t soa
> starionline.com @ns1.starionhost.net
>> ;; global options: +cmd
>> ;; connection timed out; no servers could be reached
>> 
>> ... in the meantime:
>> 
>> 13:21:38.837415 IP (tos 0x0, ttl 64, id 9452, offset 0, flags [none],
> proto UDP (17), length 72)
>>  62.168.95.114.39172 > 74.87.108.83.53: [udp sum ok] 51735 [1au] SOA?
> starionline.com. ar: . OPT UDPsize=4096 (44)
>> 13:21:39.009098 IP (tos 0x10, ttl 50, id 15611, offset 0, flags [none],
> proto UDP (17), length 196)
>>  74.87.108.83.53 > 62.168.95.114.39172: [bad udp cksum 0x5586 -> 0xe731!]
> 51735*- q: SOA? starionline.com. 1/2/3 starionline.com. [1d] SOA
> ns1.starionhost.net. info.starionhost.net. 2008122905 28800 7200 1209600
> 3600 ns: starionline.com. [1d] NS ns1.starionhost.net., starionline.com.
> [1d] NS ns2.starionhost.net. ar: ns1.starionhost.net. [1d] A 74.87.108.83,
> ns2.starionhost.net. [1d] A 64.136.200.138, . OPT UDPsize=4096 (168)
>> 13:21:43.837389 IP (tos 0x0, ttl 64, id 9453, offset 0, flags [none],
> proto UDP (17), length 72)
>>  62.168.95.114.39172 > 74.87.108.83.53: [udp sum ok] 51735 [1au] SOA?
> starionline.com. ar: . OPT UDPsize=4096 (44)
>> 13:21:44.009780 IP (tos 0x10, ttl 50, id 4231, offset 0, flags [none],
> proto UDP (17), length 196)
>>  74.87.108.83.53 > 62.168.95.114.39172: [bad udp cksum 0x5586 -> 0xe731!]
> 51735*- q: SOA? starionline.com. 1/2/3 starionline.com. [1d] SOA
> ns1.starionhost.net. info.starionhost.net. 2008122905 28800 7200 1209600
> 3600 ns: starionline.com. [1d] NS ns1.starionhost.net., starionline.com.
> [1d] NS ns2.starionhost.net. ar: ns1.starionhost.net. [1d] A 74.87.108.83,
> ns2.starionhost.net. [1d] A 64.136.200.138, . OPT UDPsize=4096 (168)
>> 13:21:48.837515 IP (tos 0x0, ttl 64, id 9454, offset 0, flags [none],
> proto UDP (17), length 72)
>>  62.168.95.114.39172 > 74.87.108.83.53: [udp sum ok] 51735 [1au] SOA?
> starionline.com. ar: . OPT UDPsize=4096 (44)
>> 13:21:49.011060 IP (tos 0x10, ttl 50, id 38531, offset 0, flags [none],
> proto UDP (17), length 196)
>>  74.87.108.83.53 > 62.168.95.114.39172: [bad udp cksum 0x5586 -> 0xf531!]
> 51735*- q: SOA? starionline.com. 1/2/3 starionline.com. [1d] SOA
> ns1.starionhost.net. info.starionhost.net. 2008122905 28800 7200 1209600
> 3600 ns: starionline.com. [1d] NS ns2.starionhost.net., starionline.com.
> [1d] NS ns1.starionhost.net. ar: ns1.starionhost.net. [1d] A 74.87.108.83,
> ns2.starionhost.net. [1d] A 64.136.200.138, . OPT UDPsize=4096 (168)
>> 
>> 
>>>> stariononline.com has two NSes listed, ns1.starionhost.net
> [74.87.108.83]
>>>> and ns2.starionhost.net [64.136.200.138].  But the first one does not
> seem
>>>> to want to respond (http://goo.gl/s41wN and http://dnscheck.iis.se/ and
>>>> http://www.zonecut.net/dns/index.cgi are just a few examples) to a few
> of
>>>> the online checkers.  I checked with some others and it looks like you
> have
>>>> no SOA set for for ns1.starionhost.net:
>> 
>> -- 
>> Matus UHLAR - fantomas, uhlar at fantomas.sk ; http://www.fantomas.sk/
>> Warning: I wish NOT to receive e-mail advertising to this address.
>> Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
>> I don't have lysdexia. The Dog wouldn't allow that.
>> _______________________________________________
>> Please visit https://lists.isc.org/mailman/listinfo/bind-users to
> unsubscribe from this list
>> 
>> bind-users mailing list
>> bind-users at lists.isc.org
>> https://lists.isc.org/mailman/listinfo/bind-users
>> 
> 
> _______________________________________________
> Please visit https://lists.isc.org/mailman/listinfo/bind-users to
> unsubscribe from this list
> 
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
> 
> 
>