Delegation problem with BIND 9.x.x
Martin O'Nions
martin.o'nions at eu.sanchez.com
Wed Jan 10 10:45:17 UTC 2001
No. eu is delegated from ironchurch.com and dummy subsequently from within
the eu.ironchurch.com zone.
Martin
-----Original Message-----
From: Mark.Andrews at nominum.com [mailto:Mark.Andrews at nominum.com]
Sent: Tuesday, January 09, 2001 8:32 PM
To: Martin O'Nions
Cc: 'bind-users at isc.org'
Subject: Re: Delegation problem with BIND 9.x.x
Do you have both eu.ironchurch.com and dummy.eu.ironchurch.com
delegated from ironchurch.com?
Mark
>
> This has got to be a kickself, but it's been bugging me for a little
while.
> A delegation that works fine with BIND 8 breaks when I put up 9.anything
on
> my FreeBSD 4.1 (or OpenBSD 2.8) server. This has been through a number of
> interations and test cases, but for the purposes of this, the delegated
> domain is dummy.eu.ironchurch.com and the appropriate name server is
> fruitbat.eu.ironchurch.com.
>
> I'm using the same named.conf and zone files for both versions of named,
but
> whilst BIND 8 works as I expect, BIND 9 gives me an NXDOMAIN for an NS
query
> against dummy (but correctly returns the NS record if I do an ANY query).
>
> I'm quite prepared to believe that I'm doing something stoopid, but I'd
> really like to know what.
>
> Finally, if anyone wants the zone file or named.conf contents, mail me.
> Yeah, some of the names shown here are changed, but this is an internal
zone
> that couldn't be queried from the outside world anyway.
>
> Martin
>
> Here's the dig outputs for the different cases:
>
> # With BIND 8 (as shipped with FreeBSD 4.1)
>
> $ dig @172.31.241.1 dummy.eu.ironchurch.com ns
>
> ; <<>> DiG 8.3 <<>> @172.31.241.1 dummy.eu.ironchurch.com ns
> ; (1 server found)
> ;; res options: init recurs defnam dnsrch
> ;; got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 6
> ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
> ;; QUERY SECTION:
> ;; dummy.eu.ironchurch.com, type = NS, class = IN
>
> ;; ANSWER SECTION:
> dummy.eu.ironchurch.com. 1H IN NS fruitbat.eu.ironchurch.com.
>
> ;; ADDITIONAL SECTION:
> fruitbat.eu.ironchurch.com. 1H IN A 172.31.241.2
>
> ;; Total query time: 1 msec
> ;; FROM: spike.eu.ironchurch.com to SERVER: 172.31.241.1
> ;; WHEN: Tue Jan 9 14:24:00 2001
> ;; MSG SIZE sent: 38 rcvd: 77
>
> # Same zone file, same named.conf, but BIND 9.*
>
> $ dig @172.31.241.1 dummy.eu.ironchurch.com ns
>
> ; <<>> DiG 8.3 <<>> @172.31.241.1 dummy.eu.ironchurch.com ns
> ; (1 server found)
> ;; res options: init recurs defnam dnsrch
> ;; got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 6
> ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
> ;; QUERY SECTION:
> ;; dummy.eu.ironchurch.com, type = NS, class = IN
>
> ;; Total query time: 22 msec
> ;; FROM: spike.eu.ironchurch.com to SERVER: 172.31.241.1
> ;; WHEN: Tue Jan 9 14:23:23 2001
> ;; MSG SIZE sent: 38 rcvd: 38
>
>
> $ dig @172.31.241.1 dummy.eu.ironchurch.com any
>
> ; <<>> DiG 8.3 <<>> @172.31.241.1 dummy.eu.ironchurch.com any
> ; (1 server found)
> ;; res options: init recurs defnam dnsrch
> ;; got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 6
> ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 3
> ;; QUERY SECTION:
> ;; dummy.eu.ironchurch.com, type = ANY, class = IN
>
> ;; ANSWER SECTION:
> dummy.eu.ironchurch.com. 1H IN NS fruitbat.eu.ironchurch.com.
>
> ;; AUTHORITY SECTION:
> eu.ironchurch.com. 1H IN NS spike.eu.ironchurch.com.
> eu.ironchurch.com. 1H IN NS tacoma.eu.ironchurch.com.
>
> ;; ADDITIONAL SECTION:
> fruitbat.eu.ironchurch.com. 1H IN A 172.31.241.2
> spike.eu.ironchurch.com. 1H IN A 172.31.241.1
> tacoma.eu.ironchurch.com. 1H IN A 172.31.240.5
>
> ;; Total query time: 4 msec
> ;; FROM: spike.eu.ironchurch.com to SERVER: 172.31.241.1
> ;; WHEN: Tue Jan 9 14:23:33 2001
> ;; MSG SIZE sent: 38 rcvd: 150
>
>
>
>
>
>
--
Mark Andrews, Nominum Inc.
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742 INTERNET: Mark.Andrews at nominum.com
More information about the bind-users
mailing list