international domain registration issues/dns related

Mark_Andrews at isc.org Mark_Andrews at isc.org
Thu Jan 24 22:36:34 UTC 2002


> 
> > Well you should take this up with the people who you're presumably
> > paying to provide this service.
> 
>     >> I'm having trouble figuring out where to start. I want to
>     >> verify that the nameserver info that I get, is in fact, the
>     >> same info that they are getting - at least I'd have a basis for
>     >> starting a conversation. But how do I tell what they are
>     >> seeing?
> 
> > I refer you to the reply I just gave. Whoever is making the
> > registration requests on your behalf has (or should have) that
> > information. So ask them.
> 
> I would agree - getting help from my agent seems a good place to start. Howe
> ver,
> what I've gotten in the past was exactly this, for example:
> 
> "For the primary, the following error was given:
>         No Authoritive NS records were returned from this NameServer."
> 
> I believe I (verisign) told them that the primary ns for the domain should b
> e
> ns1.mis.bio-rad.com. If I dig @ns1.mis.bio-rad.com bio-rad.co.nz ns
> I get 
> ;; ANSWER SECTION:
> bio-rad.co.nz.          1D IN NS        sol.earthlink.net.
> bio-rad.co.nz.          1D IN NS        luna.earthlink.net.
> bio-rad.co.nz.          1D IN NS        ns2.noc.netcom.net.
> bio-rad.co.nz.          1D IN NS        ns1.mis.bio-rad.com.
> bio-rad.co.nz.          1D IN NS        ns1.noc.netcom.net. 
> 
> Which looks to me as though I'm returning authoritative information. So if I
> think I am, and they think I'm not, there is a disconnect. It could easily b
> e in
> my mind and I'm doing stuff wrongly, in which case I'd love to hear what it 
> is.
> But if I'm not doing it wrongly, how do I converse with them unless I can
> "duplicate their results"?

; <<>> DiG 8.3 <<>> @ns1.mis.bio-rad.com bio-rad.co.nz +norec 
; (1 server found)
;; res options: init defnam dnsrch
;; got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 24490
;; flags: qr ra; QUERY: 1, ANSWER: 1, AUTHORITY: 5, ADDITIONAL: 5
;; QUERY SECTION:
;;	bio-rad.co.nz, type = A, class = IN

;; ANSWER SECTION:
bio-rad.co.nz.		23h58m48s IN A	208.151.183.76

;; AUTHORITY SECTION:
bio-rad.co.nz.		0S IN NS	ns1.mis.bio-rad.com.
bio-rad.co.nz.		23h58m48s IN NS  ns1.noc.netcom.net.
bio-rad.co.nz.		23h58m48s IN NS  sol.earthlink.net.
bio-rad.co.nz.		23h58m48s IN NS  luna.earthlink.net.
bio-rad.co.nz.		23h58m48s IN NS  ns2.noc.netcom.net.

;; ADDITIONAL SECTION:
ns1.mis.bio-rad.com.	0S IN A		198.211.153.71
ns1.noc.netcom.net.	1d7h36m36s IN A  204.31.1.1
sol.earthlink.net.	1d23h1m3s IN A	207.69.188.192
luna.earthlink.net.	1d23h1m3s IN A	207.69.188.193
ns2.noc.netcom.net.	18h45m30s IN A	199.183.9.2

;; Total query time: 252 msec
;; FROM: drugs.dv.isc.org to SERVER: ns1.mis.bio-rad.com  198.211.153.60
;; WHEN: Fri Jan 25 09:29:26 2002
;; MSG SIZE  sent: 31  rcvd: 257

	Note: there is no "aa" (authoritative answer) in the flags section.

	Now as this is the master I suggest that you look at the logs
	as they will be reporting errors.

> 
>     >> If I dig co.nz, I get ns1.dns.net.nz as the nameserver for that
>     >> domain. If I dig my primary domain from them I get nothing for
>     >> me - just the root servers (dig bio-rad.com
>     >> @ns1.dns.net.nz). Does this mean that they have no information
>     >> at all on us, which would indicate that they don't know my
>     >> nameservers at all? If that's the case, I can see why they
>     >> would reject our registration - they can't find our
>     >> nameservers.
> 
> > You seem horribly confused. Why do you expect a name server for co.nz
> > to answer for bio-rad.com? It's quite common for authoritative name
> > servers to have recursion switched off. When this happens, the server
> > won't provide answers for stuff they don't serve. At best you'd get a
> > referral, which is exactly what ns1.dns.net.nz does if it's asked
> > about bio-rad.com.
> 
> no doubt I am - but I'm sort of grasping at straws - I'm trying to duplicate
>  the
> problem they say they are seeing, so how can I do that if I can't query some
>  nz
> nameserver to see what they see? 
> 
> 
> > The .co.nz servers don't answer for bio-rad.co.nz. You will need to
> > ask the co.nz registry why that is. Maybe your registration is pending
> > while some paperwork is checked. Or you've not paid them. Or you don't
> > have name servers set up for the zone in accordance with any rules
> > they have. Or there's a dispute over ownership of the name. Or it's
> > not been registered. If the name has been registered, most registries
> > will issue a tracking number so that the customer can check the status
> > of the registration as it works its way through the system. Your agent
> > should have this information and details on how to check the progress
> > of the registration. Which takes us back to what I first said....
> 
> Yup - I guess, I was hoping for some technical pointers to be able to see wh
> at
> they see...
> 
> But what I am going to do is try to get the exact paperwork that is being us
> ed,
> and the exact message that is being returned and try to fix things depending
>  on
> what I see.
> 
> I guess I was also looking for some sympathy from folks who have been throug
> h
> the registration process with country tlds and possibly some suggestions in 
> how
> to best deal with them.
> 
> Thanks
> / Sid /
> 
> 
--
Mark Andrews, Internet Software Consortium
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark.Andrews at isc.org


More information about the bind-users mailing list