9.18 BIND not resolving .gov.bd site
Mark Andrews
marka at isc.org
Tue Oct 31 01:15:24 UTC 2023
> On 30 Oct 2023, at 17:25, Mosharaf Hossain <mosharaf.hossain at bol-online.com> wrote:
>
> mofa.gov.bd. 86400 IN NS ns1.bcc.gov.bd.
> mofa.gov.bd. 86400 IN NS ns2.bcc.gov.bd.
> couldn't get address for 'ns1.bcc.gov.bd': not found
> couldn't get address for 'ns2.bcc.gov.bd': not found
> dig: couldn't get address for 'ns1.bcc.gov.bd': no more
> root at ns1:/etc/bind#
So you got this this point and that is saying that the lookup of
the addresses of the nameservers is failing. The next step would to
do a 'dig +trace' or a 'dig +trace +all' of those names.
% dig +trace ns1.bcc.gov.bd. +all -4
;; BADCOOKIE, retrying.
; <<>> DiG 9.19.18-dev <<>> +trace ns1.bcc.gov.bd. +all -4
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 11927
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 14, AUTHORITY: 0, ADDITIONAL: 27
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 1232
; COOKIE: 69a562ec1c50e22801000000654052b51e141922bd619839 (good)
;; QUESTION SECTION:
;. IN NS
;; ANSWER SECTION:
. 193742 IN NS b.root-servers.net.
. 193742 IN NS c.root-servers.net.
. 193742 IN NS d.root-servers.net.
. 193742 IN NS g.root-servers.net.
. 193742 IN NS j.root-servers.net.
. 193742 IN NS l.root-servers.net.
. 193742 IN NS i.root-servers.net.
. 193742 IN NS h.root-servers.net.
. 193742 IN NS k.root-servers.net.
. 193742 IN NS a.root-servers.net.
. 193742 IN NS f.root-servers.net.
. 193742 IN NS e.root-servers.net.
. 193742 IN NS m.root-servers.net.
. 193742 IN RRSIG NS 8 0 518400 20231109050000 20231027040000 46780 . CkAeB9x0RdrjpMfUJWlZS8F8YwnNj8KY7CYkukIncgzX1eve21wHBkgF kXrIEQP7Atkq4/KYqsgs4fKnFwIkxtEqqDDvkU/635/cYgOFaBKiU5Di 4sPC5Q/q8jORU4WPM7vg+j7bY48qEaoTImPuT+EQpI4HF5uHekYm9F35 tJENhmLryMv8K4+072w2eaOTc45wirnVNxhxZ2QK8aZylubq2ELQ43aJ GgRmrFhujt8jzi20OvySAq1MNCd3Dy0Xqh99DSu6YkhflypgZXeUEiRV 8/HB33V9yQBs/GNXjajxSw/NwxLAxMDNv8kdkE08YBWTZLQfPmY/+ZDU FEchxA==
;; ADDITIONAL SECTION:
l.root-servers.net. 135488 IN A 199.7.83.42
g.root-servers.net. 135488 IN A 192.112.36.4
i.root-servers.net. 135488 IN A 192.36.148.17
h.root-servers.net. 135488 IN A 198.97.190.53
k.root-servers.net. 135488 IN A 193.0.14.129
j.root-servers.net. 135488 IN A 192.58.128.30
d.root-servers.net. 135488 IN A 199.7.91.13
b.root-servers.net. 135488 IN A 199.9.14.201
a.root-servers.net. 135488 IN A 198.41.0.4
f.root-servers.net. 135488 IN A 192.5.5.241
e.root-servers.net. 135488 IN A 192.203.230.10
c.root-servers.net. 135488 IN A 192.33.4.12
m.root-servers.net. 135488 IN A 202.12.27.33
l.root-servers.net. 135488 IN AAAA 2001:500:9f::42
g.root-servers.net. 135488 IN AAAA 2001:500:12::d0d
i.root-servers.net. 135488 IN AAAA 2001:7fe::53
h.root-servers.net. 135488 IN AAAA 2001:500:1::53
k.root-servers.net. 135488 IN AAAA 2001:7fd::1
j.root-servers.net. 135488 IN AAAA 2001:503:c27::2:30
d.root-servers.net. 135488 IN AAAA 2001:500:2d::d
b.root-servers.net. 135488 IN AAAA 2001:500:200::b
a.root-servers.net. 135488 IN AAAA 2001:503:ba3e::2:30
f.root-servers.net. 135488 IN AAAA 2001:500:2f::f
e.root-servers.net. 135488 IN AAAA 2001:500:a8::e
c.root-servers.net. 135488 IN AAAA 2001:500:2::c
m.root-servers.net. 135488 IN AAAA 2001:dc3::35
;; Query time: 0 msec
;; SERVER: 127.0.0.1#53(127.0.0.1) (UDP)
;; WHEN: Tue Oct 31 12:04:53 AEDT 2023
;; MSG SIZE rcvd: 1125
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 38819
;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 7, ADDITIONAL: 9
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 1232
; COOKIE: 69a562ec1c50e22801000000654052b5f101b47fe1d10f06 (good)
;; QUESTION SECTION:
;ns1.bcc.gov.bd. IN A
;; AUTHORITY SECTION:
bd. 172800 IN NS dns.bd.
bd. 172800 IN NS surma.btcl.net.bd.
bd. 172800 IN NS bd-ns.anycast.pch.net.
bd. 172800 IN NS jamuna.btcl.net.bd.
bd. 86400 IN DS 26044 8 1 2DAD1B7F8CA778464F536FDDD15EFD24CCCB62EF
bd. 86400 IN DS 26044 8 2 BD01C4B4345D21FC38AA88129F7BC00FDD7B422799CC6703736E3B38 1F37DD5B
bd. 86400 IN RRSIG DS 8 1 86400 20231112170000 20231030160000 46780 . IFF4dDc0UEceikw9rf2bEaz/4LZtyCHeKAxX+gD8okseRzK1EcheFZ53 m8ZJtUa/ptVRIm6Hvwc8HTq7KeRKoCULw2isoqB/gNJDc+PasE0/2Uq8 vEY0CCPJad/zKRAjSXxkI6tmvOt3a3Mk6soTIOFCiK0eITwx2sJsdIGZ /wL3cfaqSHh1735dWtg0kWFstyesSida7YHjNyOsJ/X/mUMEInhFdHzR mg3Sa64FUy8BamA/yTUazNb3VG3yRS9ZUFJXeMib7qjSspDEqb2dTKzy RvFxiNKOD5rDoCN3/Da6hi/dBhCLL9Zh+6mhsV0KHLahoKI2Bl2xw2v3 F9hFyA==
;; ADDITIONAL SECTION:
jamuna.btcl.net.bd. 172800 IN A 203.112.194.231
surma.btcl.net.bd. 172800 IN A 203.112.194.232
bd-ns.anycast.pch.net. 172800 IN A 204.61.216.108
dns.bd. 172800 IN A 123.49.12.112
jamuna.btcl.net.bd. 172800 IN AAAA 2407:5000:88:4::231
surma.btcl.net.bd. 172800 IN AAAA 2407:5000:88:4::232
bd-ns.anycast.pch.net. 172800 IN AAAA 2001:500:14:6108:ad::1
dns.bd. 172800 IN AAAA 2407:5000:88:5::3
;; Query time: 19 msec
;; SERVER: 192.33.4.12#53(c.root-servers.net) (UDP)
;; WHEN: Tue Oct 31 12:04:53 AEDT 2023
;; MSG SIZE rcvd: 725
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 54270
;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 2, ADDITIONAL: 3
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 4096
;; QUESTION SECTION:
;ns1.bcc.gov.bd. IN A
;; AUTHORITY SECTION:
bcc.gov.bd. 86400 IN NS ns1.bcc.gov.bd.
bcc.gov.bd. 86400 IN NS ns2.bcc.gov.bd.
;; ADDITIONAL SECTION:
ns1.bcc.gov.bd. 86400 IN A 114.130.54.123
ns2.bcc.gov.bd. 86400 IN A 114.130.54.124
;; Query time: 210 msec
;; SERVER: 123.49.12.112#53(dns.bd) (UDP)
;; WHEN: Tue Oct 31 12:04:54 AEDT 2023
;; MSG SIZE rcvd: 107
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 11259
;; flags: qr aa; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 1232
; COOKIE: 69a562ec1c50e22801000000654052b6abe0594cf8b9b688 (good)
;; QUESTION SECTION:
;ns1.bcc.gov.bd. IN A
;; ANSWER SECTION:
ns1.bcc.gov.bd. 38400 IN A 114.130.54.123
;; AUTHORITY SECTION:
bcc.gov.bd. 38400 IN NS ns1.bcc.gov.bd.
bcc.gov.bd. 38400 IN NS ns2.bcc.gov.bd.
;; ADDITIONAL SECTION:
ns2.bcc.gov.bd. 38400 IN A 114.130.54.124
;; Query time: 212 msec
;; SERVER: 114.130.54.123#53(ns1.bcc.gov.bd) (UDP)
;; WHEN: Tue Oct 31 12:04:54 AEDT 2023
;; MSG SIZE rcvd: 135
%
That succeeded but you will note that that address of both of the nameservers
for bcc.gov.bd are in the same /24 which means there is a single point of
failure at the routing level. At this point I’d test if you could reach
the nameservers with direct queries as you have their addresses in the glue
returned from the .bd nameservers assuming that if fails for you.
% dig ns1.bcc.gov.bd @114.130.54.123
; <<>> DiG 9.19.18-dev <<>> ns1.bcc.gov.bd @114.130.54.123
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 2139
;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
;; WARNING: recursion requested but not available
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
; COOKIE: 8a8e9d7bfc1abdb2010000006540536a724fdb04112462bb (good)
;; QUESTION SECTION:
;ns1.bcc.gov.bd. IN A
;; ANSWER SECTION:
ns1.bcc.gov.bd. 38400 IN A 114.130.54.123
;; Query time: 215 msec
;; SERVER: 114.130.54.123#53(114.130.54.123) (UDP)
;; WHEN: Tue Oct 31 12:07:54 AEDT 2023
;; MSG SIZE rcvd: 87
% dig ns2.bcc.gov.bd @114.130.54.124
; <<>> DiG 9.19.18-dev <<>> ns2.bcc.gov.bd @114.130.54.124
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 44727
;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
;; WARNING: recursion requested but not available
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
; COOKIE: 181d91ea2ecc46ce01000000654054883752dba5d1912e6e (good)
;; QUESTION SECTION:
;ns2.bcc.gov.bd. IN A
;; ANSWER SECTION:
ns2.bcc.gov.bd. 38400 IN A 114.130.54.124
;; Query time: 212 msec
;; SERVER: 114.130.54.124#53(114.130.54.124) (UDP)
;; WHEN: Tue Oct 31 12:12:40 AEDT 2023
;; MSG SIZE rcvd: 87
%
--
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742 INTERNET: marka at isc.org
More information about the bind-users
mailing list