international domain registration issues/dns related

[@quasar Internet Solutions, Inc.]

I think I understand why you are asking ;)

Especially if you are doing a lot of this and people are telling you they
can't reach your nameservers then I'd be anxious to look into that too.
And it appears your VeriSign service did what was expected...they told you
why the registration was rejected.  I would think it is not their job to
debug technical problems in someone's setup.

If they are telling you that they cannot reach your nameservers, what they
probably mean is that your specified nameservers (specified by you are the
service registering them for you) are not answering for those domains.
But the way it looks like they worded it also makes one wonder if they
just can't reach "your nameservers."

So to find out who their nameservers are who can't reach either your
nameservers and/or desired domain from their nameservers you'd first query
like this:

To find out where your server thinks the co.nz servers are would be
simply:

dig co.nz. ns

(don't forget the trailing dot)

or to find out where one of the legacy root servers think their
nameservers are it would be like this one:

dig @a.gtld-servers.net co.nz. ns

or to find out where my server thinks they are (ORSC) would be
dig @ns1.quasar.net co.nz. ns

In theory all these responses for co.nz should be the same.

Then you can query those nameservers for your specified nameservers to
make sure they can "reach" your nameservers at all.

Even if they can't it could be a timeout issue somewhere between.

Then make sure you have set up your desired domain on those nameservers
and that they are answering.  This is in *most* TLD registrar agreements
that the domain should be first answering on those nameservers before it
gets delegated.  There are a couple where it reads that way in their
agreement but I have noted that some are looking the other way and you
will even sometimes see whois lookups with one or no nameservers listed.
With most registrars that is a valid cause to revoke a registration even
once it's been delegated.

-Dena
-----------------------------------------------------------------------
     -=Dena Whitebirch=-          ***         http://quasar.net/
@quasar Internet Solutions, Inc.  *** "Internet Powered by Experience"
--------------------------------------------------------------------------

On Wed, 23 Jan 2002 sid_shapiro at bio-rad.com wrote:

>
> Hello,
> We are in the process of registering our domain (bio-rad.com) with several
> international registration services, for example bio-rad.co.nz. We are doing
> this using verisign as our agent - they are submitting all of the paperwork and
> such.
>
> We've done this for 20 or so country tlds already. We are part way though the
> process. Most of my zone files for these domains are identical, modulo the
> domain to be done - I mean except for the tld, they are the same - same root
> info, same name server info, same mx info, etc - most of the zone files are
> pretty short - just an mx record, several names servers and a couple of A
> records.
>
> Some of our registrations are being rejected by the various country registrars.
> Frequently we get very little information back from verisign, who they say get
> very little info back the country registrars. Sometimes we get an actual error,
> but more frequently we get something "you nameserver is not set up right". Not
> incredibly helpful.
>
> I'm having trouble figuring out where to start. I want to verify that the
> nameserver info that I get, is in fact, the same info that they are getting - at
> least I'd have a basis for starting a conversation. But how do I tell what they
> are seeing?
>
> If I dig co.nz, I get ns1.dns.net.nz as the nameserver for that domain. If I dig
> my primary domain from them I get nothing for me - just the root servers (dig
> bio-rad.com @ns1.dns.net.nz). Does this mean that they have no information at
> all on us, which would indicate that they don't know my nameservers at all? If
> that's the case, I can see why they would reject our registration - they can't
> find our nameservers.
>
> But I'm not even sure I'm heading in the right direction to test all this.
>
> Is there some other trick to checking domain info from other nameservers and
> picking the right ones to check? I gather that some nameservers don't allow
> queries form the outside.
>
> help?
> Thanks,
> --
> Sid Shapiro         - sid_shapiro at bio-rad.com
> Bio-Rad Laboratories - (510) 741-6846
>
>