Lookup weirdness

Mike B toastyhamster at hotmail.com
Sun Nov 21 20:17:54 UTC 2004


In message <cnnje8$318j$1 at sf1.isc.org>, Barry Margolin
<barmar at alum.mit.edu> writes
>In article <cnm7eg$23ic$1 at sf1.isc.org>, Jim Reid <jim at rfc1035.com> wrote:
>
>> >>>>> "Mike" == Mike B <toastyhamster at hotmail.com> writes:
>>
>>
>>     Mike> Ok, this has me baffled.  I'm running a primary/secondary
>>     Mike> DNS server, neither are able to resolve anything in the
>>     Mike> 152.158 domain (the example I am using is
>>     Mike> 152.158.16.48). Everywhere else on the 'Net I have tried
>>     Mike> can. The only anomaly I can find is that www.dnsstuff.com
>>     Mike> occasionally shows a bad delegation, this is a fault of one
>>     Mike> of the ARIN servers, which is delegating it to a now
>>     Mike> decommissioned ibm.net server.
>>
>>This is not "a fault of one of the ARIN servers". ARIN's name servers
>>are only responding with the data they've been given. Garbage in,
>>garbage out. The responsibility for that problem doesn't rest with
>>ARIN either. The 158.152.in-addr.arpa zone administrator has screwed
>>up the delegation of this zone.
>>
>>They have told ARIN to delegate the zone to ns01.ca.us.ibm.net, a
>>name that doesn't exist, and ns1.us.prserv.net, which does not answer
>>authoritatively for this zone. So it's no wonder reverse lookups for
>>152.158/16 are not working. Nobody can find authoritative name servers
>>for 158.152.in-addr.arpa. It looks like zone administrator has changed
>>the name servers for the zone and forgotten to tell ARIN so that the
>>delegation info in the parent zone gets changed.
>
>It answered authoritatively when I tried it:
>
>$ dig -x 152.158 any @ns1.us.prserv.net +norec
>
>; <<>> DiG 9.2.2 <<>> -x 152.158 any @ns1.us.prserv.net +norec
>;; global options:  printcmd
>;; Got answer:
>;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 55715
>;; flags: qr aa ra; QUERY: 1, ANSWER: 5, AUTHORITY: 4, ADDITIONAL: 4
>
>;; QUESTION SECTION:
>;158.152.in-addr.arpa.     IN ANY
>
>;; ANSWER SECTION:
>158.152.in-addr.arpa.   86400 IN NS ns1.us.prserv.net.
>158.152.in-addr.arpa.   86400 IN NS ns4.us.prserv.net.
>158.152.in-addr.arpa.   86400 IN NS ns3.us.prserv.net.
>158.152.in-addr.arpa.   86400 IN NS ns3.prserv.net.
>158.152.in-addr.arpa.   86400 IN SOA   master.us.prserv.net. 
>dns.us.ibm.com. 993751088 10800 3600 604800 86400
>
>;; AUTHORITY SECTION:
>158.152.in-addr.arpa.   86400 IN NS ns1.us.prserv.net.
>158.152.in-addr.arpa.   86400 IN NS ns4.us.prserv.net.
>158.152.in-addr.arpa.   86400 IN NS ns3.us.prserv.net.
>158.152.in-addr.arpa.   86400 IN NS ns3.prserv.net.
>
>;; ADDITIONAL SECTION:
>ns1.us.prserv.net.   14400 IN A  165.87.194.244
>ns4.us.prserv.net.   14400 IN A  165.87.201.244
>ns3.us.prserv.net.   14400 IN A  165.87.201.243
>ns3.prserv.net.      86400 IN A  165.87.201.243
>
>;; Query time: 116 msec
>;; SERVER: 165.87.194.244#53(ns1.us.prserv.net)
>;; WHEN: Sat Nov 20 08:59:34 2004
>;; MSG SIZE  rcvd: 300
>

Thanks for the help, anybody got any idea why the query isn't actually
leaving the DNS server?

--

Mike




More information about the bind-users mailing list