late CNAME and LOOPBACK log errors

[Mark Andrews]

> I have a bind (v8.3.3-2.0) on a Debian woody server that had until recently
> an internal LAN adaptor and an external WAN adaptor. Last night I disabled
> the LAN adaptor and I started receiving these errors.
> 
> I am not sure if they mean anything to me or not. From what I can tell by
> searching google and bind mail archives these errors don't mean anything to
> me. However I would like to know if I can prevent them from cluttering up my
> logs. That is unless they really do need attention in which case I would
> like to fix any problem.

	They are external errors that named has detected.

> any help would be greatly appreciated
> 
> Oct  7 16:31:32 wahoo named[352]: late CNAME in answer section for skios.es
> MX from [195.219.190.135].53

	The server for skios.es is sending back a malformed response.
	The CNAME record should NOT be there.

; <<>> DiG 8.3 <<>> @195.219.190.135 mx skios.es +norec 
; (1 server found)
;; res options: init defnam dnsrch
;; got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 3346
;; flags: qr aa; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1
;; QUERY SECTION:
;;	skios.es, type = MX, class = IN

;; ANSWER SECTION:
skios.es.		0S IN MX	10 correo.skios.es.
correo.skios.es.	3h30m43s IN CNAME  anas.skios.es.

;; ADDITIONAL SECTION:
anas.skios.es.		7h30m44s IN A	195.219.190.136

;; Total query time: 349 msec
;; FROM: drugs.dv.isc.org to SERVER: 195.219.190.135
;; WHEN: Sat Oct  8 10:29:51 2005
;; MSG SIZE  sent: 26  rcvd: 84

	Also they are trying to use IP addresses for the NS record.
	
skios.es.               0S IN NS        195.219.190.135.
skios.es.               0S IN NS        195.219.190.136.

	I suggest that you contact skios.es and inform them of their
	problems.

> Oct  7 16:46:12 wahoo named[352]: ns_resp: query(d2-online.de) Bogus
> LOOPBACK A RR (ecrc.de:127.0.0.1) learnt (A=212.80.175.2:NS=193.0.7.3)
> Oct  7 16:46:12 wahoo named[352]: ns_resp: query(d2-online.de) Bogus
> LOOPBACK A RR (ecrc.de:127.0.0.1) learnt (A=212.80.175.2:NS=193.0.7.3)

	d2-online have not updated their delegation and one of the
	old nameservers now returns 127.0.0.1.  They need to update
	their delegation.
	
d2-online.de.           86400   IN      NS      ns.infra.net.
d2-online.de.           86400   IN      NS      ns.space.net.
d2-online.de.           86400   IN      NS      ecrc.de.
d2-online.de.           86400   IN      NS      ns.hamburg.pop.de.
;; Received 127 bytes from 217.51.137.213#53(L.DE.NET) in 322 ms

d2-online.de.           1800    IN      SOA     ns.infra.net. hostmaster.infra.net. 2003100204 10000 2500 864000 40000
d2-online.de.           1800    IN      NS      ns.infra.net.
d2-online.de.           1800    IN      NS      ns2.infra.net.
d2-online.de.           1800    IN      NS      ns3.infra.net.
;; Received 187 bytes from 212.89.96.3#53(ns.infra.net) in 328 ms


	Mark

--
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark_Andrews at isc.org