Question about resolver
Mark Andrews
marka at isc.org
Mon Apr 29 00:37:16 UTC 2024
This looks like Google has forgotten to create the zone 96.34.in-addr.arpa but have created
180.96.34.in-addr.arpa resulting in answers that should come from 96.34.in-addr.arpa getting
REFUSED returned. DNSSEC validation and QNAME minimisation find these sorts of configuration errors.
Intermediate zones can’t be missed.
% dig ns 96.34.in-addr.arpa +trace +all
;; BADCOOKIE, retrying.
; <<>> DiG 9.19.24-dev <<>> ns 96.34.in-addr.arpa +trace +all
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 23007
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 14, AUTHORITY: 0, ADDITIONAL: 27
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 1232
; COOKIE: 7b100d5f1abe6a3301000000662eea5988229ff2514536e1 (good)
;; QUESTION SECTION:
;. IN NS
;; ANSWER SECTION:
. 274739 IN NS a.root-servers.net.
. 274739 IN NS g.root-servers.net.
. 274739 IN NS h.root-servers.net.
. 274739 IN NS b.root-servers.net.
. 274739 IN NS j.root-servers.net.
. 274739 IN NS i.root-servers.net.
. 274739 IN NS c.root-servers.net.
. 274739 IN NS d.root-servers.net.
. 274739 IN NS l.root-servers.net.
. 274739 IN NS e.root-servers.net.
. 274739 IN NS m.root-servers.net.
. 274739 IN NS k.root-servers.net.
. 274739 IN NS f.root-servers.net.
. 274739 IN RRSIG NS 8 0 518400 20240508210000 20240425200000 5613 . YeVEKbhLW5fUll0QPjIjDWfKbmrnJ/paeh/H86oG17GPeoFRWkecq+iM 8kjxy28AHg7cElZ3w8Lq0GND+DJUCYItS6cOHdQ07XdEFCPAoXMnVQe2 sBwd5nRu8tjH/I6NOn43DtfGkNMxzoHZf/64UeWeMFF8tjlD3y9Y+TQ1 UjBU0kzpsYXkl+QYHsNJ1nABDH3gdlTqpCmtrVA1UUgDjC/12KLSIiQH ykSABJZbHnOsDc7OaRH25QLZadE6zrUwP1xiEZuDfe4xuoz2z5WSBQbv 6JjCGVpm1WDILRra64v4BpO0kVUYE5fvJgAOV2cJwJwhM4gpcBNlMvG7 e3+WFA==
;; ADDITIONAL SECTION:
i.root-servers.net. 169819 IN AAAA 2001:7fe::53
d.root-servers.net. 169819 IN AAAA 2001:500:2d::d
h.root-servers.net. 169819 IN AAAA 2001:500:1::53
j.root-servers.net. 169819 IN AAAA 2001:503:c27::2:30
c.root-servers.net. 169819 IN AAAA 2001:500:2::c
e.root-servers.net. 169819 IN AAAA 2001:500:a8::e
g.root-servers.net. 169819 IN AAAA 2001:500:12::d0d
l.root-servers.net. 169819 IN AAAA 2001:500:9f::42
m.root-servers.net. 169819 IN AAAA 2001:dc3::35
k.root-servers.net. 169819 IN AAAA 2001:7fd::1
a.root-servers.net. 169819 IN AAAA 2001:503:ba3e::2:30
f.root-servers.net. 169819 IN AAAA 2001:500:2f::f
b.root-servers.net. 169819 IN AAAA 2801:1b8:10::b
i.root-servers.net. 169819 IN A 192.36.148.17
d.root-servers.net. 169819 IN A 199.7.91.13
h.root-servers.net. 169819 IN A 198.97.190.53
j.root-servers.net. 169819 IN A 192.58.128.30
c.root-servers.net. 169819 IN A 192.33.4.12
e.root-servers.net. 169819 IN A 192.203.230.10
g.root-servers.net. 169819 IN A 192.112.36.4
l.root-servers.net. 169819 IN A 199.7.83.42
m.root-servers.net. 169819 IN A 202.12.27.33
k.root-servers.net. 169819 IN A 193.0.14.129
a.root-servers.net. 169819 IN A 198.41.0.4
f.root-servers.net. 169819 IN A 192.5.5.241
b.root-servers.net. 169819 IN A 170.247.170.2
;; Query time: 0 msec
;; SERVER: ::1#53(::1) (UDP)
;; WHEN: Mon Apr 29 10:31:21 AEST 2024
;; MSG SIZE rcvd: 1125
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 39695
;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 11, ADDITIONAL: 13
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 1232
;; QUESTION SECTION:
;96.34.in-addr.arpa. IN NS
;; AUTHORITY SECTION:
in-addr.arpa. 172800 IN NS c.in-addr-servers.arpa.
in-addr.arpa. 172800 IN NS f.in-addr-servers.arpa.
in-addr.arpa. 172800 IN NS a.in-addr-servers.arpa.
in-addr.arpa. 172800 IN NS b.in-addr-servers.arpa.
in-addr.arpa. 172800 IN NS e.in-addr-servers.arpa.
in-addr.arpa. 172800 IN NS d.in-addr-servers.arpa.
in-addr.arpa. 86400 IN DS 53696 8 2 13E5501C56B20394DA921B51412D48B7089C5EB6957A7C58553C4D4D 424F04DF
in-addr.arpa. 86400 IN DS 47054 8 2 5CAFCCEC201D1933B4C9F6A9C8F51E51F3B39979058AC21B8DF1B1F2 81CBC6F2
in-addr.arpa. 86400 IN DS 63982 8 2 AAF4FB5D213EF25AE44679032EBE3514C487D7ABD99D7F5FEC3383D0 30733C73
in-addr.arpa. 86400 IN DS 54956 8 2 E0E2BF5CFBD66572CA05EC18267D91509BA6A9405AF05C3FD4141DFA 45200C08
in-addr.arpa. 86400 IN RRSIG DS 8 2 86400 20240511180000 20240428170000 43060 arpa. BBFF1T9b8+woUukDfJj8wBKwDyk2CGVfceNAX5S1LvANDal0g3gf0hFD 7OhTWZR1yaMoMaLVDgh8b9rDe5gMpOABbCHI/OBByz/rpUgau+XZ5aTJ NSJbmBcQRkzelreqm/B+4bjYtn48cK5Lp/iZm7hDHqJ1L/asdF7SRpRc BxFQeSf3eOy5BKL/XjlrsGZ510v2bnIlhLZPvjBPinbK10QeXzWOUW3J QtsY8MyTl0NE3prBU7bA20bkm+yBn4KMEzWeBz7rYfr6WJoGAw+I2ijM J6oC3ims4b1bF7eaPJ4DW6QZJu04a4C/JeluU/RMzWJC11MS2M1RRUf8 /XcxmQ==
;; ADDITIONAL SECTION:
f.in-addr-servers.arpa. 172800 IN A 193.0.9.1
e.in-addr-servers.arpa. 172800 IN A 203.119.86.101
d.in-addr-servers.arpa. 172800 IN A 200.10.60.53
c.in-addr-servers.arpa. 172800 IN A 196.216.169.10
b.in-addr-servers.arpa. 172800 IN A 199.253.183.183
a.in-addr-servers.arpa. 172800 IN A 199.180.182.53
f.in-addr-servers.arpa. 172800 IN AAAA 2001:67c:e0::1
e.in-addr-servers.arpa. 172800 IN AAAA 2001:dd8:6::101
d.in-addr-servers.arpa. 172800 IN AAAA 2001:13c7:7010::53
c.in-addr-servers.arpa. 172800 IN AAAA 2001:43f8:110::10
b.in-addr-servers.arpa. 172800 IN AAAA 2001:500:87::87
a.in-addr-servers.arpa. 172800 IN AAAA 2620:37:e000::53
;; Query time: 30 msec
;; SERVER: 202.12.27.33#53(m.root-servers.net) (UDP)
;; WHEN: Mon Apr 29 10:31:21 AEST 2024
;; MSG SIZE rcvd: 923
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 44039
;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 8, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 1232
;; QUESTION SECTION:
;96.34.in-addr.arpa. IN NS
;; AUTHORITY SECTION:
34.in-addr.arpa. 86400 IN NS r.arin.net.
34.in-addr.arpa. 86400 IN NS u.arin.net.
34.in-addr.arpa. 86400 IN NS x.arin.net.
34.in-addr.arpa. 86400 IN NS y.arin.net.
34.in-addr.arpa. 86400 IN NS z.arin.net.
34.in-addr.arpa. 86400 IN NS arin.authdns.ripe.net.
34.in-addr.arpa. 86400 IN DS 11366 8 2 3F7F017BDB9BDBB3A19B8B69DD51627ED8AE4E138F9EECD755AA7D27 7CFAB795
34.in-addr.arpa. 86400 IN RRSIG DS 8 3 86400 20240514050540 20240423021933 37980 in-addr.arpa. pkQcSZqryMqgUsMaAw5KC8tVNAf0yi/kyy17ud4PLHkB1NATnVzAHYZm +/Sm8moPBm6lDnqUdMEfuDa0Jfpwm0kavVejnN9harFuUu43EdpZENri xrgWXws30IhczI4MM8wapWeX/6nCD7sB/BuQW/yV6O6jNkPM/jyBmMsV Sts=
;; Query time: 461 msec
;; SERVER: 196.216.169.10#53(c.in-addr-servers.arpa) (UDP)
;; WHEN: Mon Apr 29 10:31:22 AEST 2024
;; MSG SIZE rcvd: 387
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 62944
;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 6, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 1232
;; QUESTION SECTION:
;96.34.in-addr.arpa. IN NS
;; AUTHORITY SECTION:
96.34.in-addr.arpa. 86400 IN NS ns-gce-public1.googledomains.com.
96.34.in-addr.arpa. 86400 IN NS ns-gce-public2.googledomains.com.
96.34.in-addr.arpa. 86400 IN NS ns-gce-public3.googledomains.com.
96.34.in-addr.arpa. 86400 IN NS ns-gce-public4.googledomains.com.
96.34.in-addr.arpa. 10800 IN NSEC 97.34.in-addr.arpa. NS RRSIG NSEC
96.34.in-addr.arpa. 10800 IN RRSIG NSEC 8 4 10800 20240512043000 20240428033000 34368 34.in-addr.arpa. oqSjTnBdaBb7n4QxJ3spQTYRDJ1bHCflOjvECoeYY4DdDyNUzQMUgR9U L+a8hn6nxdi7NFVIbS9l+c8KTZtM5DjNiTlHgYnXvnqENfRR9lervjCw PA/wbmrRwRyuaI8jXaOwKiH9N6/VyskkdtmhN/0MWUOXQ00M3HtPFRKh 5zs=
;; Query time: 346 msec
;; SERVER: 2001:67c:e0::10#53(arin.authdns.ripe.net) (UDP)
;; WHEN: Mon Apr 29 10:31:22 AEST 2024
;; MSG SIZE rcvd: 395
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: REFUSED, id: 15319
;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 512
; COOKIE: 7b100d5f1abe6a33011dc0242ca3b88f01fbf7e0b470e2eb0d3922ebf4 (good)
;; QUESTION SECTION:
;96.34.in-addr.arpa. IN NS
;; Query time: 279 msec
;; SERVER: 2001:4860:4802:36::66#53(ns-gce-public3.googledomains.com) (UDP)
;; WHEN: Mon Apr 29 10:31:22 AEST 2024
;; MSG SIZE rcvd: 80
%
% dig ns 180.96.34.in-addr.arpa +trace +all
;; BADCOOKIE, retrying.
; <<>> DiG 9.19.24-dev <<>> ns 180.96.34.in-addr.arpa +trace +all
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 21491
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 14, AUTHORITY: 0, ADDITIONAL: 27
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 1232
; COOKIE: cd143583dd37c5d001000000662eea99aef9454dc89ea2cc (good)
;; QUESTION SECTION:
;. IN NS
;; ANSWER SECTION:
. 274675 IN NS e.root-servers.net.
. 274675 IN NS m.root-servers.net.
. 274675 IN NS a.root-servers.net.
. 274675 IN NS h.root-servers.net.
. 274675 IN NS i.root-servers.net.
. 274675 IN NS b.root-servers.net.
. 274675 IN NS c.root-servers.net.
. 274675 IN NS d.root-servers.net.
. 274675 IN NS j.root-servers.net.
. 274675 IN NS g.root-servers.net.
. 274675 IN NS f.root-servers.net.
. 274675 IN NS k.root-servers.net.
. 274675 IN NS l.root-servers.net.
. 274675 IN RRSIG NS 8 0 518400 20240508210000 20240425200000 5613 . YeVEKbhLW5fUll0QPjIjDWfKbmrnJ/paeh/H86oG17GPeoFRWkecq+iM 8kjxy28AHg7cElZ3w8Lq0GND+DJUCYItS6cOHdQ07XdEFCPAoXMnVQe2 sBwd5nRu8tjH/I6NOn43DtfGkNMxzoHZf/64UeWeMFF8tjlD3y9Y+TQ1 UjBU0kzpsYXkl+QYHsNJ1nABDH3gdlTqpCmtrVA1UUgDjC/12KLSIiQH ykSABJZbHnOsDc7OaRH25QLZadE6zrUwP1xiEZuDfe4xuoz2z5WSBQbv 6JjCGVpm1WDILRra64v4BpO0kVUYE5fvJgAOV2cJwJwhM4gpcBNlMvG7 e3+WFA==
;; ADDITIONAL SECTION:
i.root-servers.net. 169755 IN AAAA 2001:7fe::53
d.root-servers.net. 169755 IN AAAA 2001:500:2d::d
h.root-servers.net. 169755 IN AAAA 2001:500:1::53
j.root-servers.net. 169755 IN AAAA 2001:503:c27::2:30
c.root-servers.net. 169755 IN AAAA 2001:500:2::c
e.root-servers.net. 169755 IN AAAA 2001:500:a8::e
g.root-servers.net. 169755 IN AAAA 2001:500:12::d0d
l.root-servers.net. 169755 IN AAAA 2001:500:9f::42
m.root-servers.net. 169755 IN AAAA 2001:dc3::35
k.root-servers.net. 169755 IN AAAA 2001:7fd::1
a.root-servers.net. 169755 IN AAAA 2001:503:ba3e::2:30
f.root-servers.net. 169755 IN AAAA 2001:500:2f::f
b.root-servers.net. 169755 IN AAAA 2801:1b8:10::b
i.root-servers.net. 169755 IN A 192.36.148.17
d.root-servers.net. 169755 IN A 199.7.91.13
h.root-servers.net. 169755 IN A 198.97.190.53
j.root-servers.net. 169755 IN A 192.58.128.30
c.root-servers.net. 169755 IN A 192.33.4.12
e.root-servers.net. 169755 IN A 192.203.230.10
g.root-servers.net. 169755 IN A 192.112.36.4
l.root-servers.net. 169755 IN A 199.7.83.42
m.root-servers.net. 169755 IN A 202.12.27.33
k.root-servers.net. 169755 IN A 193.0.14.129
a.root-servers.net. 169755 IN A 198.41.0.4
f.root-servers.net. 169755 IN A 192.5.5.241
b.root-servers.net. 169755 IN A 170.247.170.2
;; Query time: 0 msec
;; SERVER: ::1#53(::1) (UDP)
;; WHEN: Mon Apr 29 10:32:25 AEST 2024
;; MSG SIZE rcvd: 1125
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 11058
;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 11, ADDITIONAL: 13
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 1232
; COOKIE: cd143583dd37c5d001000000662eea9976945a7ec72a5c5d (good)
;; QUESTION SECTION:
;180.96.34.in-addr.arpa. IN NS
;; AUTHORITY SECTION:
in-addr.arpa. 172800 IN NS a.in-addr-servers.arpa.
in-addr.arpa. 172800 IN NS d.in-addr-servers.arpa.
in-addr.arpa. 172800 IN NS e.in-addr-servers.arpa.
in-addr.arpa. 172800 IN NS b.in-addr-servers.arpa.
in-addr.arpa. 172800 IN NS c.in-addr-servers.arpa.
in-addr.arpa. 172800 IN NS f.in-addr-servers.arpa.
in-addr.arpa. 86400 IN DS 53696 8 2 13E5501C56B20394DA921B51412D48B7089C5EB6957A7C58553C4D4D 424F04DF
in-addr.arpa. 86400 IN DS 63982 8 2 AAF4FB5D213EF25AE44679032EBE3514C487D7ABD99D7F5FEC3383D0 30733C73
in-addr.arpa. 86400 IN DS 47054 8 2 5CAFCCEC201D1933B4C9F6A9C8F51E51F3B39979058AC21B8DF1B1F2 81CBC6F2
in-addr.arpa. 86400 IN DS 54956 8 2 E0E2BF5CFBD66572CA05EC18267D91509BA6A9405AF05C3FD4141DFA 45200C08
in-addr.arpa. 86400 IN RRSIG DS 8 2 86400 20240511180000 20240428170000 43060 arpa. BBFF1T9b8+woUukDfJj8wBKwDyk2CGVfceNAX5S1LvANDal0g3gf0hFD 7OhTWZR1yaMoMaLVDgh8b9rDe5gMpOABbCHI/OBByz/rpUgau+XZ5aTJ NSJbmBcQRkzelreqm/B+4bjYtn48cK5Lp/iZm7hDHqJ1L/asdF7SRpRc BxFQeSf3eOy5BKL/XjlrsGZ510v2bnIlhLZPvjBPinbK10QeXzWOUW3J QtsY8MyTl0NE3prBU7bA20bkm+yBn4KMEzWeBz7rYfr6WJoGAw+I2ijM J6oC3ims4b1bF7eaPJ4DW6QZJu04a4C/JeluU/RMzWJC11MS2M1RRUf8 /XcxmQ==
;; ADDITIONAL SECTION:
f.in-addr-servers.arpa. 172800 IN AAAA 2001:67c:e0::1
e.in-addr-servers.arpa. 172800 IN AAAA 2001:dd8:6::101
d.in-addr-servers.arpa. 172800 IN AAAA 2001:13c7:7010::53
c.in-addr-servers.arpa. 172800 IN AAAA 2001:43f8:110::10
b.in-addr-servers.arpa. 172800 IN AAAA 2001:500:87::87
a.in-addr-servers.arpa. 172800 IN AAAA 2620:37:e000::53
f.in-addr-servers.arpa. 172800 IN A 193.0.9.1
e.in-addr-servers.arpa. 172800 IN A 203.119.86.101
d.in-addr-servers.arpa. 172800 IN A 200.10.60.53
c.in-addr-servers.arpa. 172800 IN A 196.216.169.10
b.in-addr-servers.arpa. 172800 IN A 199.253.183.183
a.in-addr-servers.arpa. 172800 IN A 199.180.182.53
;; Query time: 261 msec
;; SERVER: 2001:7fe::53#53(i.root-servers.net) (UDP)
;; WHEN: Mon Apr 29 10:32:25 AEST 2024
;; MSG SIZE rcvd: 955
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 20490
;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 8, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 1232
; COOKIE: cd143583dd37c5d001000000662eea9af9f57e1947085008 (good)
;; QUESTION SECTION:
;180.96.34.in-addr.arpa. IN NS
;; AUTHORITY SECTION:
34.in-addr.arpa. 86400 IN NS arin.authdns.ripe.net.
34.in-addr.arpa. 86400 IN NS x.arin.net.
34.in-addr.arpa. 86400 IN NS y.arin.net.
34.in-addr.arpa. 86400 IN NS r.arin.net.
34.in-addr.arpa. 86400 IN NS u.arin.net.
34.in-addr.arpa. 86400 IN NS z.arin.net.
34.in-addr.arpa. 86400 IN DS 11366 8 2 3F7F017BDB9BDBB3A19B8B69DD51627ED8AE4E138F9EECD755AA7D27 7CFAB795
34.in-addr.arpa. 86400 IN RRSIG DS 8 3 86400 20240514050540 20240423021933 37980 in-addr.arpa. pkQcSZqryMqgUsMaAw5KC8tVNAf0yi/kyy17ud4PLHkB1NATnVzAHYZm +/Sm8moPBm6lDnqUdMEfuDa0Jfpwm0kavVejnN9harFuUu43EdpZENri xrgWXws30IhczI4MM8wapWeX/6nCD7sB/BuQW/yV6O6jNkPM/jyBmMsV Sts=
;; Query time: 238 msec
;; SERVER: 2620:37:e000::53#53(a.in-addr-servers.arpa) (UDP)
;; WHEN: Mon Apr 29 10:32:25 AEST 2024
;; MSG SIZE rcvd: 437
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 15446
;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 6, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 4096
;; QUESTION SECTION:
;180.96.34.in-addr.arpa. IN NS
;; AUTHORITY SECTION:
96.34.in-addr.arpa. 86400 IN NS ns-gce-public3.googledomains.com.
96.34.in-addr.arpa. 86400 IN NS ns-gce-public1.googledomains.com.
96.34.in-addr.arpa. 86400 IN NS ns-gce-public4.googledomains.com.
96.34.in-addr.arpa. 86400 IN NS ns-gce-public2.googledomains.com.
96.34.in-addr.arpa. 10800 IN NSEC 97.34.in-addr.arpa. NS RRSIG NSEC
96.34.in-addr.arpa. 10800 IN RRSIG NSEC 8 4 10800 20240512043000 20240428033000 34368 34.in-addr.arpa. oqSjTnBdaBb7n4QxJ3spQTYRDJ1bHCflOjvECoeYY4DdDyNUzQMUgR9U L+a8hn6nxdi7NFVIbS9l+c8KTZtM5DjNiTlHgYnXvnqENfRR9lervjCw PA/wbmrRwRyuaI8jXaOwKiH9N6/VyskkdtmhN/0MWUOXQ00M3HtPFRKh 5zs=
;; Query time: 222 msec
;; SERVER: 2001:500:127::30#53(y.arin.net) (UDP)
;; WHEN: Mon Apr 29 10:32:26 AEST 2024
;; MSG SIZE rcvd: 399
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 8021
;; flags: qr aa; QUERY: 1, ANSWER: 5, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 512
; COOKIE: cd143583dd37c5d0011dc0242cf583ffbc0df6c25bae1d15235d6b1ee4 (good)
;; QUESTION SECTION:
;180.96.34.in-addr.arpa. IN NS
;; ANSWER SECTION:
180.96.34.in-addr.arpa. 21600 IN NS ns-gce-public2.googledomains.com.
180.96.34.in-addr.arpa. 21600 IN NS ns-gce-public4.googledomains.com.
180.96.34.in-addr.arpa. 21600 IN NS ns-gce-public1.googledomains.com.
180.96.34.in-addr.arpa. 21600 IN NS ns-gce-public3.googledomains.com.
180.96.34.in-addr.arpa. 21600 IN RRSIG NS 8 5 21600 20240518200316 20240426200316 2580 180.96.34.in-addr.arpa. a/v8r8emi3sMgoZXB9G6YG2+UyVpkcwP6V2GF7XhftKjVLxCHOviqLnI shoUfklqEXMLtdBTdzrZNMoWGfwTK3HfiqvhWQCPZVuzPpomwSX1YcXC BaNJ+ww+HRIiXLvxWlE0dFU+RwRCUID4nwnSU//7pQwXn5CIwN0SWNeP wGU=
;; Query time: 282 msec
;; SERVER: 2001:4860:4802:34::66#53(ns-gce-public2.googledomains.com) (UDP)
;; WHEN: Mon Apr 29 10:32:26 AEST 2024
;; MSG SIZE rcvd: 399
%
> On 28 Apr 2024, at 10:13, J Doe <general at nativemethods.com> wrote:
>
> On 2024-04-26 16:45, Josh Kuo wrote:
>
>> In this particular case, isn't the resolver attempting to do a reverse
>> lookup of the IP address that's listed ?
>>
>>
>> You are right, I missed that this is a reverse-mapping zone. In that
>> case, run DNSSEC analyzer on the domain "180.96.34.in-addr.arpa" and
>> you'll see the problem. Reverse-mapping zones work the same as
>> forward-mapping zones, they also need to be delegated properly.
>>
>> If you prefer a more visual output, try DNSViz:
>> https://dnsviz.net/d/180.96.34.in-addr.arpa/dnssec/
>> <https://dnsviz.net/d/180.96.34.in-addr.arpa/dnssec/>
>
> Hi Josh,
>
> Ok, sounds good!
>
> - J
>
> --
> Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list
>
> ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information.
>
>
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
--
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742 INTERNET: marka at isc.org
More information about the bind-users
mailing list