Problems removing a domain

Matus UHLAR - fantomas uhlar at fantomas.sk
Wed Mar 6 10:44:09 UTC 2019


>> On 05.03.19 16:20, Paul van der Vlis wrote:
>>> root at ns1:/etc/bind/domeinen# dig any @localhost extensus.nl
>>>
>>> ; <<>> DiG 9.10.3-P4-Debian <<>> any @localhost extensus.nl
>>> ; (2 servers found)
>>> ;; global options: +cmd
>>> ;; Got answer:
>>> ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 57790
                                           ^^^^^^^^

>Op 05-03-19 om 16:32 schreef Matus UHLAR - fantomas:
>> SERVFAIL here.

>>> ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
>>>
>>> ;; OPT PSEUDOSECTION:
>>> ; EDNS: version: 0, flags:; udp: 4096
>>> ;; QUESTION SECTION:
>>> ;extensus.nl.            IN    ANY
>>>
>>> ;; Query time: 53 msec
>>> ;; SERVER: ::1#53(::1)
>>> ;; WHEN: Tue Mar 05 16:12:54 CET 2019
>>> ;; MSG SIZE  rcvd: 40
>>>
>>> root at ns1:/etc/bind/domeinen#
>>> ---------
>>
>> this is the proper and expected response, since the extensus.nl domain is
>> delegated to servers that don't know about it.

>>> But... I think I found it:
>>> ----------
>>> root at ns1:/etc/bind/domeinen# rndc flushtree extensus.nl
>>> root at ns1:/usr/local/sbin# nslookup extensus.nl localhost
>>> ;; Got SERVFAIL reply from ::1, trying next server
>>> Server:        localhost
>>> Address:    127.0.0.1#53
>>>
>>> ** server can't find extensus.nl: SERVFAIL
>>>
>>> root at ns1:/usr/local/sbin#
>>> ----------
>>
>> this is in fact the same result, using the obsolete "nslookup" command
>> see the SERVFAIL in dig output above.

On 06.03.19 10:12, Paul van der Vlis wrote:
>Dig does something else then nslookup.

they do mostly the same. However, nslookup does many things that can confuse
users and therefore it's not recommended for diagnosing DNS problems.

>Nslookup gave response before the "rndc flushtree", dig did not.

it did, you just didn't see it. See above, it returned SERVFAIL.


-- 
Matus UHLAR - fantomas, uhlar at fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Emacs is a complicated operating system without good text editor.


More information about the bind-users mailing list