Delegation problem with BIND 9.x.x

Martin O'Nions martin.o'nions at eu.sanchez.com
Tue Jan 9 14:50:11 UTC 2001


This has got to be a kickself, but it's been bugging me for a little while.
A delegation that works fine with BIND 8 breaks when I put up 9.anything on
my FreeBSD 4.1 (or OpenBSD 2.8) server. This has been through a number of
interations and test cases, but for the purposes of this, the delegated
domain is dummy.eu.ironchurch.com and the appropriate name server is
fruitbat.eu.ironchurch.com.

I'm using the same named.conf and zone files for both versions of named, but
whilst BIND 8 works as I expect, BIND 9 gives me an NXDOMAIN for an NS query
against dummy (but correctly returns the NS record if I do an ANY query).

I'm quite prepared to believe that I'm doing something stoopid, but I'd
really like to know what.

Finally, if anyone wants the zone file or named.conf contents, mail me.
Yeah, some of the names shown here are changed, but this is an internal zone
that couldn't be queried from the outside world anyway.

Martin

Here's the dig outputs for the different cases:

# With BIND 8 (as shipped with FreeBSD 4.1)

$ dig @172.31.241.1 dummy.eu.ironchurch.com ns

; <<>> DiG 8.3 <<>> @172.31.241.1 dummy.eu.ironchurch.com ns 
; (1 server found)
;; res options: init recurs defnam dnsrch
;; got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 6
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
;; QUERY SECTION:
;;	dummy.eu.ironchurch.com, type = NS, class = IN

;; ANSWER SECTION:
dummy.eu.ironchurch.com.	1H IN NS	fruitbat.eu.ironchurch.com.

;; ADDITIONAL SECTION:
fruitbat.eu.ironchurch.com.  1H IN A  172.31.241.2

;; Total query time: 1 msec
;; FROM: spike.eu.ironchurch.com to SERVER: 172.31.241.1
;; WHEN: Tue Jan  9 14:24:00 2001
;; MSG SIZE  sent: 38  rcvd: 77

# Same zone file, same named.conf, but BIND 9.*

$ dig @172.31.241.1 dummy.eu.ironchurch.com ns

; <<>> DiG 8.3 <<>> @172.31.241.1 dummy.eu.ironchurch.com ns 
; (1 server found)
;; res options: init recurs defnam dnsrch
;; got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 6
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
;; QUERY SECTION:
;;	dummy.eu.ironchurch.com, type = NS, class = IN

;; Total query time: 22 msec
;; FROM: spike.eu.ironchurch.com to SERVER: 172.31.241.1
;; WHEN: Tue Jan  9 14:23:23 2001
;; MSG SIZE  sent: 38  rcvd: 38


$ dig @172.31.241.1 dummy.eu.ironchurch.com any

; <<>> DiG 8.3 <<>> @172.31.241.1 dummy.eu.ironchurch.com any 
; (1 server found)
;; res options: init recurs defnam dnsrch
;; got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 6
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 3
;; QUERY SECTION:
;;	dummy.eu.ironchurch.com, type = ANY, class = IN

;; ANSWER SECTION:
dummy.eu.ironchurch.com.	1H IN NS	fruitbat.eu.ironchurch.com.

;; AUTHORITY SECTION:
eu.ironchurch.com.		1H IN NS	spike.eu.ironchurch.com.
eu.ironchurch.com.		1H IN NS	tacoma.eu.ironchurch.com.

;; ADDITIONAL SECTION:
fruitbat.eu.ironchurch.com.  1H IN A  172.31.241.2
spike.eu.ironchurch.com.	1H IN A		172.31.241.1
tacoma.eu.ironchurch.com.	1H IN A		172.31.240.5

;; Total query time: 4 msec
;; FROM: spike.eu.ironchurch.com to SERVER: 172.31.241.1
;; WHEN: Tue Jan  9 14:23:33 2001
;; MSG SIZE  sent: 38  rcvd: 150







More information about the bind-users mailing list