BIND servers don't provide lookup...why?

Julian Daniel jdaniel at smcdsb.on.ca
Thu Jun 23 02:35:52 UTC 2005


One of our teachers is asking why we cannot provide domain resolution for
"centralontariocachers.com". 
I have tried four BIND servers (three v9.2.1, two of which are outside our
firewall, one v9.3.1), and they respond with SERVFAIL as follows
(10.100.1.77 is running v9.3.1):

     ---------------
     $dig centralontariocachers.com

     ; <<>> DiG 9.2.2 <<>> centralontariocachers.com
     ;; global options:  printcmd
     ;; Got answer:
     ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 53492
     ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0

     ;; QUESTION SECTION:
     ;centralontariocachers.com.     IN      A

     ;; Query time: 1 msec
     ;; SERVER: 10.100.1.77#53(10.100.1.77)
     ;; WHEN: Wed Jun 22 18:29:01 2005
     ;; MSG SIZE  rcvd: 43
     ---------------

but if I get a different response when I do the following:

     ---------------
     $ dig +norec centralontariocachers.com

     ; <<>> DiG 9.2.2 <<>> +norec centralontariocachers.com
     ;; global options:  printcmd
     ;; Got answer:
     ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 18360
     ;; flags: qr ra; QUERY: 1, ANSWER: 0, AUTHORITY: 2, ADDITIONAL: 2

     ;; QUESTION SECTION:
     ;centralontariocachers.com.     IN      A

     ;; AUTHORITY SECTION:
     centralontariocachers.com. 7097 IN      NS     
ns3.incognitonetworks.com.
     centralontariocachers.com. 7097 IN      NS     
ns4.incognitonetworks.com.

     ;; ADDITIONAL SECTION:
     ns3.incognitonetworks.com. 155895 IN    A       70.85.116.132
     ns4.incognitonetworks.com. 172427 IN    A       70.85.116.133

     ;; Query time: 1 msec
     ;; SERVER: 10.100.1.77#53(10.100.1.77)
     ;; WHEN: Wed Jun 22 18:28:44 2005
     ;; MSG SIZE  rcvd: 129
     ---------------

What gives? Is this a BIND bug? Our Windows 2000 DNS (10.100.1.252)
responds as follows:

     ---------------
     $ dig centralontariocachers.com @10.100.1.252

     ; <<>> DiG 9.2.2 <<>> centralontariocachers.com @10.100.1.252
     ;; global options:  printcmd
     ;; Got answer:
     ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 43170
     ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

     ;; QUESTION SECTION:
     ;centralontariocachers.com.     IN      A

     ;; ANSWER SECTION:
     centralontariocachers.com. 14399 IN     A       70.85.116.132

     ;; Query time: 301 msec
     ;; SERVER: 10.100.1.252#53(10.100.1.252)
     ;; WHEN: Wed Jun 22 18:39:05 2005
     ;; MSG SIZE  rcvd: 59
     ---------------

Explanations? Solutions?

Many thanks!

Julian Daniel
Information Systems Support
Simcoe Muskoka CDSB





More information about the bind-users mailing list