Everybody Resolves this Domain but Us.

phn at icke-reklam.ipsec.nu phn at icke-reklam.ipsec.nu
Sat Jul 20 14:14:05 UTC 2002


Chris Davis <chris.davis at computerjobs.com> wrote:

> This is the exact same problem I had with the IP address NS RDATA discussed
> on this list in the last few days.  Bad NS RDATA is passed with an answer.
> If you cache it, you look to be the broken one.

> How much money and time needs to be expended on a problem before the
> software should prevent it?

The question should be : "when will admins learn to properly configure
their zones ?"



> -----Original Message-----
> From: James Griffin [mailto:agriffin at cpcug.org]
> Sent: Saturday, July 20, 2002 8:53 AM
> To: comp-protocols-dns-bind at isc.org
> Subject: Re: Everybody Resolves this Domain but Us.



> Simon Waters wrote:
>> 
>> Martin McCormick wrote:
>> >
>> >         I am blue in the face.  What else can I try?
>> 
>> accxx123.com
>> 
>> Asking for it's nameserver gives.
>> 
>> $ dig @216.98.135.124 accxx123.com ns +norec +short
>> brit.
>> 
>> There is no top level domain "brit." let alone a nameserver, so
>> the domain is broken.
>> 
>> Probably they meant brit.accxx123.com or some such, but that
>> isn't what got written to the zone file.
>> 

> Simon is spot-on.  Here is the axfr for accxx123.com with notes.

> $ dig   @soham.clikaroo.net. accxx123.com. axfr

> ; <<>> DiG 9.2.1 <<>> @soham.clikaroo.net. accxx123.com. axfr
> ;; global options:  printcmd
> accxx123.com.           3600    IN      SOA     brit. admin. 6 900 600
> 86400 3600
> ---------  Note the ending '.' here ----------------^ and  ^
> accxx123.com.           3600    IN      A       216.98.135.124
> accxx123.com.           3600    IN      NS      brit.
> ---------  as well as here -------------------------^ but
> ---------  where is the A RR for brit.<whatever>?
> accxx123.com.           3600    IN      MX      10 email.accxx123.com.
> email.accxx123.com.     3600    IN      A       216.98.135.124
> ftp.accxx123.com.       3600    IN      A       216.98.135.124
> www.accxx123.com.       3600    IN      A       216.98.135.124
> accxx123.com.           3600    IN      SOA     brit. admin. 6 900 600
> 86400 3600
> ;; Query time: 296 msec
> ;; SERVER: 216.98.135.124#53(soham.clikaroo.net.)
> ;; WHEN: Sat Jul 20 08:46:17 2002
> ;; XFR size: 9 records

> [snip]


-- 
Peter Håkanson         
        IPSec  Sverige      ( At Gothenburg Riverside )
           Sorry about my e-mail address, but i'm trying to keep spam out,
	   remove "icke-reklam" if you feel for mailing me. Thanx.


More information about the bind-users mailing list