Delegation problem with BIND 9.x.x

[Mark.Andrews at nominum.com]

	Do you have both eu.ironchurch.com and dummy.eu.ironchurch.com
	delegated from ironchurch.com?

	Mark

> 
> This has got to be a kickself, but it's been bugging me for a little while.
> A delegation that works fine with BIND 8 breaks when I put up 9.anything on
> my FreeBSD 4.1 (or OpenBSD 2.8) server. This has been through a number of
> interations and test cases, but for the purposes of this, the delegated
> domain is dummy.eu.ironchurch.com and the appropriate name server is
> fruitbat.eu.ironchurch.com.
> 
> I'm using the same named.conf and zone files for both versions of named, but
> whilst BIND 8 works as I expect, BIND 9 gives me an NXDOMAIN for an NS query
> against dummy (but correctly returns the NS record if I do an ANY query).
> 
> I'm quite prepared to believe that I'm doing something stoopid, but I'd
> really like to know what.
> 
> Finally, if anyone wants the zone file or named.conf contents, mail me.
> Yeah, some of the names shown here are changed, but this is an internal zone
> that couldn't be queried from the outside world anyway.
> 
> Martin
> 
> Here's the dig outputs for the different cases:
> 
> # With BIND 8 (as shipped with FreeBSD 4.1)
> 
> $ dig @172.31.241.1 dummy.eu.ironchurch.com ns
> 
> ; <<>> DiG 8.3 <<>> @172.31.241.1 dummy.eu.ironchurch.com ns 
> ; (1 server found)
> ;; res options: init recurs defnam dnsrch
> ;; got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 6
> ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
> ;; QUERY SECTION:
> ;;	dummy.eu.ironchurch.com, type = NS, class = IN
> 
> ;; ANSWER SECTION:
> dummy.eu.ironchurch.com.	1H IN NS	fruitbat.eu.ironchurch.com.
> 
> ;; ADDITIONAL SECTION:
> fruitbat.eu.ironchurch.com.  1H IN A  172.31.241.2
> 
> ;; Total query time: 1 msec
> ;; FROM: spike.eu.ironchurch.com to SERVER: 172.31.241.1
> ;; WHEN: Tue Jan  9 14:24:00 2001
> ;; MSG SIZE  sent: 38  rcvd: 77
> 
> # Same zone file, same named.conf, but BIND 9.*
> 
> $ dig @172.31.241.1 dummy.eu.ironchurch.com ns
> 
> ; <<>> DiG 8.3 <<>> @172.31.241.1 dummy.eu.ironchurch.com ns 
> ; (1 server found)
> ;; res options: init recurs defnam dnsrch
> ;; got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 6
> ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
> ;; QUERY SECTION:
> ;;	dummy.eu.ironchurch.com, type = NS, class = IN
> 
> ;; Total query time: 22 msec
> ;; FROM: spike.eu.ironchurch.com to SERVER: 172.31.241.1
> ;; WHEN: Tue Jan  9 14:23:23 2001
> ;; MSG SIZE  sent: 38  rcvd: 38
> 
> 
> $ dig @172.31.241.1 dummy.eu.ironchurch.com any
> 
> ; <<>> DiG 8.3 <<>> @172.31.241.1 dummy.eu.ironchurch.com any 
> ; (1 server found)
> ;; res options: init recurs defnam dnsrch
> ;; got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 6
> ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 3
> ;; QUERY SECTION:
> ;;	dummy.eu.ironchurch.com, type = ANY, class = IN
> 
> ;; ANSWER SECTION:
> dummy.eu.ironchurch.com.	1H IN NS	fruitbat.eu.ironchurch.com.
> 
> ;; AUTHORITY SECTION:
> eu.ironchurch.com.		1H IN NS	spike.eu.ironchurch.com.
> eu.ironchurch.com.		1H IN NS	tacoma.eu.ironchurch.com.
> 
> ;; ADDITIONAL SECTION:
> fruitbat.eu.ironchurch.com.  1H IN A  172.31.241.2
> spike.eu.ironchurch.com.	1H IN A		172.31.241.1
> tacoma.eu.ironchurch.com.	1H IN A		172.31.240.5
> 
> ;; Total query time: 4 msec
> ;; FROM: spike.eu.ironchurch.com to SERVER: 172.31.241.1
> ;; WHEN: Tue Jan  9 14:23:33 2001
> ;; MSG SIZE  sent: 38  rcvd: 150
> 
> 
> 
> 
> 
> 
--
Mark Andrews, Nominum Inc.
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark.Andrews at nominum.com