root servers list changing?

Mark_Andrews at isc.org Mark_Andrews at isc.org
Tue Aug 6 03:06:14 UTC 2002


> 
> On Mon, Aug 05, 2002 at 11:28:17PM +0000, Paul Vixie wrote:
> > 
> > Matthew Hannigan <mlh at zip.com.au> writes:
> > 
> > > I forgot to mention that I also got the message 
> > >      check_root: 1 root servers ater query to root server < min
> > > message for a while.  And I had not changed my dns setup, which
> > > had been working fine.

	This is indicative of a firewall munging the response.

	Set min-roots.

> > 
> > this means BIND is trying to re-prime since the cached ". NS" TTL is
> > too low, and it is not getting good answers.  this can mean that your
> > root.cache file is corrupt, and is pointing at a server that is not
> > answering the question correctly (though not so incorrectly as to cause
> > the answer to be rejected by the cache).  or it can mean that your host
> > is firewalled off from the root servers in a way that these priming
> > queries aren't getting answered at all.  either way, that is the real
> > trouble spot, and the fact that "dig" gives inconsistent results is
> > only a symptom.
> 
> This 2nd last one is the answer; I'm behind a maze of twisty name servers,
> all different.  This thread is about me getting enough information to
> crack over the head of my upstream name service providers.
> 
> > what does "dig @f.root-servers.net . ns" say?
> 
> I'm behind a firewall, so 'timeout' :)
> 
> > you could also try the bind9 operations guide.  it's in the kit and on the
> > web, as a pdf file.
> 
> Thanks
> 
> Matt
> PS. FWIW it's not zip's net that I'm discussing above.
> 
--
Mark Andrews, Internet Software Consortium
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark.Andrews at isc.org


More information about the bind-users mailing list