rootservers

Brad Knowles brad.knowles at skynet.be
Mon Jul 9 08:01:06 UTC 2001


At 12:33 AM +0200 7/9/01, batman wrote:

>  I would like to know wich rootserver holds the .nl toplevel domains,

	The .nl ccTLD has multiple servers:

% dig @a.root-servers.net. nl. ns

; <<>> DiG 9.1.2 <<>> @a.root-servers.net. nl. ns
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 13116
;; flags: qr rd; QUERY: 1, ANSWER: 6, AUTHORITY: 0, ADDITIONAL: 6

;; QUESTION SECTION:
;nl.                            IN      NS

;; ANSWER SECTION:
nl.                     172800  IN      NS      NS.EU.NET.
nl.                     172800  IN      NS      NS.DOMAIN-REGISTRY.nl.
nl.                     172800  IN      NS      SUNIC.SUNET.SE.
nl.                     172800  IN      NS      NS2.DOMAIN-REGISTRY.nl.
nl.                     172800  IN      NS      AUTH02.NS.UU.NET.
nl.                     172800  IN      NS      NS2.NIC.FR.

;; ADDITIONAL SECTION:
NS.EU.NET.              172800  IN      A       192.16.202.11
NS.DOMAIN-REGISTRY.nl.  172800  IN      A       193.176.144.2
SUNIC.SUNET.SE.         172800  IN      A       192.36.125.2
NS2.DOMAIN-REGISTRY.nl. 172800  IN      A       193.176.144.130
AUTH02.NS.UU.NET.       172800  IN      A       198.6.1.82
NS2.NIC.FR.             172800  IN      A       192.93.0.4

;; Query time: 6 msec
;; SERVER: 198.41.0.4#53(a.root-servers.net.)
;; WHEN: Mon Jul  9 03:55:08 2001
;; MSG SIZE  rcvd: 269

>  i mean i am not a dns wizard, i just like to know how the basics of dns
>  work.
>
>  I read that a whois database is seperate database that is not accurate in
>  giving the real domain info.)

	"Whois" can definitely be inaccurate.

>  for example i registered domain www.auto-matic.nl
>  and the whois database (www.nic.nl/bestaat.lp) is reporting that the
>  nameservers are NS3.ZONEEDIT.COM
>  NS5.ZONEEDIT.COM
>
>  but i think the rootserver still holds the NXS.NL nameservers...

	If you want to check out a particular zone, the best thing to do 
is run standard DNS debugging tools like "doc", "dnswalk", and/or DNS 
Expert Professional.

	The latest version of doc says:

% doc -d auto-matic.nl
Doc-2.2.2: doc -d auto-matic.nl
Doc-2.2.2: Starting test of auto-matic.nl.   parent is nl.
Doc-2.2.2: Test date - Mon Jul  9 03:56:36 EDT 2001
DEBUG: digging @auth02.ns.uu.net. for soa of nl.
soa @auth02.ns.uu.net. for nl. has serial: 200107060
DEBUG: digging @ns.domain-registry.nl. for soa of nl.
soa @ns.domain-registry.nl. for nl. has serial: 200107090
DEBUG: digging @ns.eu.net. for soa of nl.
soa @ns.eu.net. for nl. has serial: 200107060
DEBUG: digging @ns2.domain-registry.nl. for soa of nl.
soa @ns2.domain-registry.nl. for nl. has serial: 200107090
DEBUG: digging @ns2.nic.fr. for soa of nl.
soa @ns2.nic.fr. for nl. has serial: 200107090
DEBUG: digging @sunic.sunet.se. for soa of nl.
soa @sunic.sunet.se. for nl. has serial:
WARNING: no SOA record for nl. from sunic.sunet.se.
WARNING: Found 2 unique SOA serial #'s for nl.
Found 2 NS and 2 glue records for auto-matic.nl. @auth02.ns.uu.net. (non-AUTH)
Found 2 NS and 0 glue records for auto-matic.nl. 
@ns.domain-registry.nl. (non-AUTH)
Found 2 NS and 2 glue records for auto-matic.nl. @ns.eu.net. (non-AUTH)
Found 2 NS and 0 glue records for auto-matic.nl. 
@ns2.domain-registry.nl. (non-AUTH)
Found 2 NS and 2 glue records for auto-matic.nl. @ns2.nic.fr. (non-AUTH)
DNServers for nl.
    === 0 were also authoritatve for auto-matic.nl.
    === 5 were non-authoritative for auto-matic.nl.
WARN: Found 2 diff sets of NS records
    === from servers not authoritative for auto-matic.nl.
DEBUG: domserv = ns1.nxs.nl. ns2.nxs.nl. ns3.zoneedit.com. ns5.zoneedit.com.
NS list summary for auto-matic.nl. from parent (nl.) servers
   == ns1.nxs.nl. ns2.nxs.nl. ns3.zoneedit.com.
   == ns5.zoneedit.com.
digging @ns1.nxs.nl. for soa of auto-matic.nl.
soa @ns1.nxs.nl. for auto-matic.nl. serial: 2001070315
digging @ns2.nxs.nl. for soa of auto-matic.nl.
soa @ns2.nxs.nl. for auto-matic.nl. serial: 2001070315
digging @ns3.zoneedit.com. for soa of auto-matic.nl.
soa @ns3.zoneedit.com. for auto-matic.nl. serial: 993636197
digging @ns5.zoneedit.com. for soa of auto-matic.nl.
soa @ns5.zoneedit.com. for auto-matic.nl. serial: 993636197
WARN: Found 2 unique SOA serial #'s for auto-matic.nl.
ERROR: Found 2 unique sets of NS records
    === from authoritative domain (auto-matic.nl.) servers
ERROR: NS list from auto-matic.nl. authoritative servers does not
   === match NS list from parent (nl.) servers
NS list summary for auto-matic.nl. from authoritative servers
   == ns1.nxs.nl. ns2.nxs.nl. ns3.zoneedit.com.
   == ns5.zoneedit.com.
Checking 0 potential addresses for hosts at auto-matic.nl.
   ==
Summary:
    ERRORS found for auto-matic.nl. (count: 2)
    WARNINGS issued for auto-matic.nl. (count: 4)
Done testing auto-matic.nl.  Mon Jul  9 03:56:49 EDT 2001


	Clearly, you've got some problems you need to get worked out with 
the owners of nxs.nl and zoneedit.com.  There's two different 
versions of your zone out there, and they disagree.  Until you get 
the delegation issues corrected, nothing else is likely to work right.

-- 
Brad Knowles, <brad.knowles at skynet.be>

/*        efdtt.c  Author:  Charles M. Hannum <root at ihack.net>          */
/*       Represented as 1045 digit prime number by Phil Carmody         */
/*     Prime as DNS cname chain by Roy Arends and Walter Belgers        */
/*                                                                      */
/*     Usage is:  cat title-key scrambled.vob | efdtt >clear.vob        */
/*   where title-key = "153 2 8 105 225" or other similar 5-byte key    */

dig decss.friet.org|perl -ne'if(/^x/){s/[x.]//g;print pack(H124,$_)}'


More information about the bind-users mailing list