status: SERVFAIL

Wed Nov 14 14:43:05 UTC 2001

I am lost for an explanation. I have 2 DNS servers in our DMZ that take care
of ALL external DNS queries. This domain among others consistently gives us
issues when trying to resolve it. 

Based on another message sent last week, If I am referred to a DNS server
for a certain domain, shouldn't I always get the "aa" flag set from the
server that is named as the authoritative source?

Is there anything that I can do to eliminate this?, Should I be using a ISP
resolvers instead of our DNS servers using the db.cache file with the root
servers?

Thanks,

RCE

Cache Dump:

Server Rootdns1 
----------------
SAMSUNG 7079 IN NS nic.samsung.co.kr.   ;Cr=addtnl LAME=480
[203.255.234.103]
        7079 IN NS red.samsung.co.kr.   ;Cr=addtnl LAME=479
[203.255.234.103]
        7079 IN NS green.samsung.co.kr. ;Cr=addtnl LAME=479
[203.255.234.103]

Server Rootdns2 (first time)
-----------------------------
samsung 6161 IN NS nic.samsung.co.kr.   ;Cr=answer LAME=257
[203.255.234.103]
        6161 IN NS red.samsung.co.kr.   ;Cr=answer LAME=256
[203.255.234.103]
        6161 IN NS green.samsung.co.kr. ;Cr=answer LAME=256
[203.255.234.103]
Server Rootdns2 (Second time)
samsung 3139  IN NS    nic.samsung.co.kr.      ;Cr=answer [203.255.234.103]
        3139  IN NS    red.samsung.co.kr.      ;Cr=answer [203.255.234.103]
        3139  IN NS    green.samsung.co.kr.    ;Cr=answer [203.255.234.103]
        85852 IN MX    0 imail00.samsung.co.kr.;Cr=answer [203.241.132.34]

Server Rootdns1
-----------------
# /usr/sbin/dig samsung.co.kr mx

; <<>> DiG 8.2 <<>> samsung.co.kr mx 
;; res options: init recurs defnam dnsrch
;; got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 4
;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
;;      samsung.co.kr, type = MX, class = IN
;; Total query time: 35 msec
;; FROM: rootdns1 to SERVER: default -- 192.19.192.98
;; WHEN: Wed Nov 14 08:48:50 2001
;; MSG SIZE  sent: 31  rcvd: 31