Parent or Child NS records ?

[Cricket Liu]

> Question; I see that our parent (.gov - or any of the root-servers)
> hands out 3 NS (& glue A records) for our domain, but another BIND
> server has different results at different times...the one set which
> contains auth00 is held on on parent, but the set of 3 which are all
> 151.200.x.x are held on our own DNS server, NS. Why the difference at
> different times ?

There's a mismatch between the NS RRs delegating uspto.gov
in the gov zone and those that the authoritative name servers,
ns.uspto.gov and ns2.uspto.gov, hold.

Here are the delegating NS RRs:

;; ANSWER SECTION:
uspto.gov.              1D IN NS        NS.uspto.gov.
uspto.gov.              1D IN NS        AUTH00.NS.UU.NET.
uspto.gov.              1D IN NS        NS2.uspto.gov.

;; ADDITIONAL SECTION:
NS.uspto.gov.           1D IN A         151.200.97.38
AUTH00.NS.UU.NET.       2D IN A         198.6.1.65
NS2.uspto.gov.          1D IN A         151.200.97.39

Here are the NS RRs from ns.uspto.gov:

;; ANSWER SECTION:
uspto.gov.              1H IN NS        mail2.uspto.gov.
uspto.gov.              1H IN NS        ns.uspto.gov.
uspto.gov.              1H IN NS        mail1.uspto.gov.

;; ADDITIONAL SECTION:
mail2.uspto.gov.        1H IN A         151.200.97.39
ns.uspto.gov.           1H IN A         151.200.97.38
mail1.uspto.gov.        1H IN A         151.200.97.38

Note:  auth00.ns.uu.net is lame for uspto.gov.  Calling
a name server ns2.uspto.gov in one set of records and
mail2.uspto.gov in another isn't a good idea.  And
delegating uspto.gov to the name server at 151.200.97.38
*twice* is probably not what you intend.

cricket

Acme Byte & Wire
cricket at acmebw.com
www.acmebw.com

Attend the next Internet Software Consortium/Acme Byte & Wire
DNS and BIND class!  See www.acmebw.com/training.htm for
the schedule and to register for upcoming classes.