dig with status: REFUSED

Joseph Begumisa begj at trueafrican.com
Wed Nov 19 15:29:57 UTC 2003


On Wed, 19 Nov 2003 aabouk01 at fiu.edu wrote:

> What would cause a query to come back with a refused status?
>I can query the zone on some nameservers with no issues, but on
>others i not able to. The domain i'm working with is bernuth.com
>Could this simply be the changes have not propagated
>to all nameservers or I have an issue on my zone configuration?

bernuth.com is delegated to the nameservers below

;; ANSWER SECTION:
bernuth.com.            2D IN NS        ns.fbsims.com.
bernuth.com.            2D IN NS        ns1.fbsims.com.

ns.fbsims.com. is authoritative for bernuth.com and so all queries sent to
it concerning bernuth.com will be answered with the data it has concerning
that domain.

ns1.fbsims.com is not authoritative for bernuth.com. there is a problem
with the domain records for ns1.fbsims.com.  the nameserver for
fbsims.com. which is ns.fbsims.com does not answer authoritatively for
ns1.fbsims.com as you can see below that "aa" is not listed among the
flags although it returns the address and nameserver records of which the
nameserver (68.216.33.5.fbsims.com.) doesn't exist:

dig +norec @ns.fbsims.com. ns1.fbsims.com. a

; <<>> DiG 8.3 <<>> +norec @ns.fbsims.com. ns1.fbsims.com. a
; (1 server found)
;; res options: init defnam dnsrch
;; got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 65151
;; flags: qr ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 0
;; QUERY SECTION:
;;      ns1.fbsims.com, type = A, class = IN

;; ANSWER SECTION:
ns1.fbsims.com.         18h21m51s IN A  68.216.33.5

;; AUTHORITY SECTION:
ns1.fbsims.com.         165w2d9h46m39s IN NS  68.216.33.5.fbsims.com.



this means that ns1.fbsims.com. cannot be found by anyone who tries to
query it for domain data concerning bernuth.com and therefore all queries
sent to it will fail resulting in you only being able to have successful
lookups when the queries are sent to ns.fbsims.com.

look at the zone file for fbsims.com. on ns.fbsims.com to rectify the
issues with ns1.fbsims.com.

Joseph


More information about the bind-users mailing list