creeping death ???

WM-data - Johnny Damtoft JOD at sonofon.dk
Wed Sep 25 16:14:52 UTC 2002


Hi,

Well Cybercity is not to blaim.. They only allow you to use there =
resolver
if you are on there network. That's the reason for getting the .ORG =
zone
when using dig.

If your next question would be why does it "work" on .NZ? but only for =
the
top-level domain, that answer is simple: its in that DNS servers cache.
I only tested this on Cybercitys DNS server, ns3.cybercity.dk, and
rata.vuw.ac.nz.

Tommy:  What is "dig" saying in your end?


/ Johnny Damtoft




-----Original Message-----
From: Peter Larsen [mailto:mail at czar.dk]
Sent: Wednesday, September 25, 2002 4:07 PM
To: comp-protocols-dns-bind at isc.org
Subject: Re: creeping death ???


> we provide Name Services for iea-shc.org. I can query this from =
almost
> anywhere in the world (can get SOA's etc), however, I have some =
people
> trying to get to www.iea-shc.org from finland, denmark and now Sweden
> who are unable to resolve anything, they cant even get soa's for the
> domain.

Hi.. I'm sitting in denmark, a matter of fact, in the very middel of =
the
danish Island of Sams=F8 :D

I have several computers, and connections using to test your little
problem..

Using my laptop, with windows xp (iirks) and with me freebsd =
installation, I
have search a little bit around..

I found your problem... It's called "CyberCity", a danish cheap =
provider
that have expand into norway.. perhaps also in sweden, and finland.. =
not
quiet sure about that.. "Telia" is also a problem...

anyways... here is your "problem"..

%dig @ns3.cybercity.dk iea-shc.org

; <<>> DiG 8.3 <<>> @ns3.cybercity.dk iea-shc.org
; (1 server found)
;; res options: init recurs defnam dnsrch
;; got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 4
;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 13, ADDITIONAL: 13
;; QUERY SECTION:
;;      iea-shc.org, type =3D A, class =3D IN

;; AUTHORITY SECTION:
org.                    2d14h2m38s IN NS  A.GTLD-SERVERS.NET.
org.                    2d14h2m38s IN NS  G.GTLD-SERVERS.NET.
org.                    2d14h2m38s IN NS  H.GTLD-SERVERS.NET.
org.                    2d14h2m38s IN NS  C.GTLD-SERVERS.NET.
org.                    2d14h2m38s IN NS  I.GTLD-SERVERS.NET.
org.                    2d14h2m38s IN NS  B.GTLD-SERVERS.NET.
org.                    2d14h2m38s IN NS  D.GTLD-SERVERS.NET.
org.                    2d14h2m38s IN NS  L.GTLD-SERVERS.NET.
org.                    2d14h2m38s IN NS  F.GTLD-SERVERS.NET.
org.                    2d14h2m38s IN NS  J.GTLD-SERVERS.NET.
org.                    2d14h2m38s IN NS  K.GTLD-SERVERS.NET.
org.                    2d14h2m38s IN NS  E.GTLD-SERVERS.NET.
org.                    2d14h2m38s IN NS  M.GTLD-SERVERS.NET.

;; ADDITIONAL SECTION:
A.GTLD-SERVERS.NET.     8h39m14s IN A   192.5.6.30
G.GTLD-SERVERS.NET.     8h39m14s IN A   192.42.93.30
H.GTLD-SERVERS.NET.     8h39m14s IN A   192.54.112.30
C.GTLD-SERVERS.NET.     8h39m14s IN A   192.26.92.30
I.GTLD-SERVERS.NET.     8h39m14s IN A   192.43.172.30
B.GTLD-SERVERS.NET.     8h39m14s IN A   192.33.14.30
D.GTLD-SERVERS.NET.     8h39m14s IN A   192.31.80.30
L.GTLD-SERVERS.NET.     8h39m14s IN A   192.41.162.30
F.GTLD-SERVERS.NET.     8h39m14s IN A   192.35.51.30
J.GTLD-SERVERS.NET.     8h39m14s IN A   210.132.100.101
K.GTLD-SERVERS.NET.     8h39m14s IN A   192.52.178.30
E.GTLD-SERVERS.NET.     8h39m14s IN A   192.12.94.30
M.GTLD-SERVERS.NET.     8h39m14s IN A   192.55.83.30

;; Total query time: 29 msec
;; FROM: nbhg28.samsoe.nu to SERVER: ns3.cybercity.dk  212.242.40.2
;; WHEN: Wed Sep 25 15:06:32 2002
;; MSG SIZE  sent: 29  rcvd: 461


cybercity have 4 dns servers:
ns1.cybercity.dk
ns2.cybercity.dk
ns3.cybercity.dk
ns4.cybercity.dk

I think ns3 and ns4 is used for "public access", and ns1 and ns2 is =
used for
"hosted" dns..

Some wiser men can contact cybercity and tell them what's wrong.. =
support
( yes the "at sign" here) cybercity.dk

> Heres the funny part, we serve ns requests for vuw.ac.nz, the =
affected
> servers in finland and denmark can resolve those perfectly, they get

%dig @ns3.cybercity.dk vuw.ac.nz

; <<>> DiG 8.3 <<>> @ns3.cybercity.dk vuw.ac.nz
; (1 server found)
;; res options: init recurs defnam dnsrch
;; got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 4
;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 6, ADDITIONAL: 6
;; QUERY SECTION:
;;      vuw.ac.nz, type =3D A, class =3D IN

;; AUTHORITY SECTION:
nz.                     7h39m53s IN NS  MX.NSI.NASA.GOV.
nz.                     7h39m53s IN NS  GORGON.XTRA.CO.nz.
nz.                     7h39m53s IN NS  NS1.DNS.NET.nz.
nz.                     7h39m53s IN NS  NS2.DNS.NET.nz.
nz.                     7h39m53s IN NS  NS3.DNS.NET.nz.
nz.                     7h39m53s IN NS  NS4.DNS.NET.nz.

;; ADDITIONAL SECTION:
MX.NSI.NASA.GOV.        23h57m32s IN A  128.102.18.31
GORGON.XTRA.CO.nz.      7h39m53s IN A   202.27.158.34
NS1.DNS.NET.nz.         7h39m53s IN A   202.46.161.3
NS2.DNS.NET.nz.         7h39m53s IN A   202.46.160.5
NS3.DNS.NET.nz.         7h39m53s IN A   203.97.8.250
NS4.DNS.NET.nz.         7h39m53s IN A   203.97.40.200

;; Total query time: 25 msec
;; FROM: nbhg28.samsoe.nu to SERVER: ns3.cybercity.dk  212.242.40.2
;; WHEN: Wed Sep 25 15:08:38 2002
;; MSG SIZE  sent: 27  rcvd: 261

yep..

> Any ideas ???

Another test... This time "Telia", A swedish phone company.. The have
expanded in denmark and surely also in finland...

%dig @ns.telia.dk iea-shc.org NS

; <<>> DiG 8.3 <<>> @ns.telia.dk iea-shc.org NS
; (1 server found)
;; res options: init recurs defnam dnsrch
;; got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 4
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 2
;; QUERY SECTION:
;;      iea-shc.org, type =3D NS, class =3D IN

;; ANSWER SECTION:
iea-shc.org.            1d23h49m29s IN NS  RATA.VUW.AC.NZ.
iea-shc.org.            1d23h49m29s IN NS  TOTARA.ITS.VUW.AC.NZ.

;; ADDITIONAL SECTION:
RATA.VUW.AC.NZ.         7h5m11s IN A    130.195.2.11
TOTARA.ITS.VUW.AC.NZ.   1d7h26m51s IN A  130.195.2.249

;; Total query time: 102 msec
;; FROM: nbhg28.samsoe.nu to SERVER: ns.telia.dk  131.116.6.40
;; WHEN: Wed Sep 25 15:25:47 2002
;; MSG SIZE  sent: 29  rcvd: 114

.. so far so good..

%dig @ns.telia.dk www.iea-shc.org A

; <<>> DiG 8.3 <<>> @ns.telia.dk www.iea-shc.org A
; (1 server found)
;; res options: init recurs defnam dnsrch
;; res_nsend to server ns.telia.dk  131.116.6.40: Operation timed out
%

Uuups.. does it work with another..?

%dig @ns.telia.dk www.redcross.org A

; <<>> DiG 8.3 <<>> @ns.telia.dk www.redcross.org A
; (1 server found)
;; res options: init recurs defnam dnsrch
;; got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 4
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 3, ADDITIONAL: 3
;; QUERY SECTION:
;;      www.redcross.org, type =3D A, class =3D IN

;; ANSWER SECTION:
www.redcross.org.       1H IN A         162.6.217.197

;; AUTHORITY SECTION:
redcross.org.           1H IN NS        arcdns2.redcross.org.
redcross.org.           1H IN NS        arcdns3.redcross.org.
redcross.org.           1H IN NS        arcdns1.redcross.org.

;; ADDITIONAL SECTION:
arcdns1.redcross.org.   1H IN A         162.6.217.141
arcdns2.redcross.org.   1H IN A         162.6.217.142
arcdns3.redcross.org.   1H IN A         162.6.217.225

;; Total query time: 5305 msec
;; FROM: nbhg28.samsoe.nu to SERVER: ns.telia.dk  131.116.6.40
;; WHEN: Wed Sep 25 15:26:56 2002
;; MSG SIZE  sent: 34  rcvd: 164

yep.. so Telia also have a problem with dns for your site...

Lets see... the swedish ns.telia.se answered correct..

The Finland version:

%dig @ns.telia.fi iea-shc.org

; <<>> DiG 8.3 <<>> @ns.telia.fi iea-shc.org
; (1 server found)
;; res options: init recurs defnam dnsrch
;; res_nsend to server ns.telia.fi  195.10.128.13: Operation timed out
(don't know if telia IS an isp in finland..)..

Also looks bad...

Some else must have a comment.. As far as I can see, some of these =
companys
have mailfunction in there DNS service..

Anyways, maybee you are useing a bind9 only setting.. I have had an odd
problem with that on a bind8 server..

Tell your danish clients to use TDC (big danish old phone company.. =
:).. in
sweden, telia is OK, in finland... dunno.. never been there..

--
Regards, Peter Larsen - GratisDNS.dk




More information about the bind-users mailing list