buggy nameservers resolve x.y.z CNAME a.b.c but not x.y.z. CNAME w.y.z

Sam Wilson Sam.Wilson at ed.ac.uk
Tue Jul 11 15:42:24 UTC 2006


In article <e90f1s$1ump$1 at sf1.isc.org>,
 "jcomeau_ictx" <john.comeau at gmail.com> wrote:

> Mark Andrews wrote:
> 
> > 	Well the NS RRset is incorrect in this reply.
> >
> > ; <<>> DiG 9.3.2 <<>> test.jcomeau.com @ns1.domaindiscount24.net +norec
> [snip]
> > ;; AUTHORITY SECTION:
> > test.jcomeau.com.	28800	IN	NS	ns1.domaindiscount24.net.
> > test.jcomeau.com.	28800	IN	NS	ns2.domaindiscount24.net.
> > test.jcomeau.com.	28800	IN	NS	ns3.domaindiscount24.net.
> 
> Right you are! But I'm quite certain that wasn't the case when
> www.jcomeau.com was a CNAME. Anyway, I can alert my provider to the
> missing glue on this query at least. Thanks!

Actually there are very odd things happening with those servers:

; <<>> DiG 9.2.2 <<>> test.jcomeau.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 10939
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 3, ADDITIONAL: 3

;; QUESTION SECTION:
;test.jcomeau.com.              IN      A

;; ANSWER SECTION:
test.jcomeau.com.       28800   IN      CNAME   www.jcomeau.com.
www.jcomeau.com.        28800   IN      A       207.210.74.124

;; AUTHORITY SECTION:
www.jcomeau.com.        28800   IN      NS      ns2.domaindiscount24.net.
www.jcomeau.com.        28800   IN      NS      ns3.domaindiscount24.net.
www.jcomeau.com.        28800   IN      NS      ns1.domaindiscount24.net.

Fair enough - maybe www.jcomeau.com is a delegated domain - perhaps 
there is an SOA:

; <<>> DiG 9.2.2 <<>> www.jcomeau.com soa
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 33719
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;www.jcomeau.com.               IN      SOA

;; AUTHORITY SECTION:
www.jcomeau.com.        10800   IN      SOA     
ns1.domaindiscount24.net. postmaster.jcomeau.com. 2003090573 10000 3600 
604800 28800

Well, there is and there isn't.  Let's see what happens with something 
strange:

; <<>> DiG 9.2.2 <<>> icantbelieveitsnotlying.jcomeau.com soa
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 51942
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;icantbelieveitsnotlying.jcomeau.com. IN        SOA

;; AUTHORITY SECTION:
icantbelieveitsnotlying.jcomeau.com. 10800 IN SOA 
ns1.domaindiscount24.net. postmaster.jcomeau.com. 2003090573 10000 3600 
604800 28800


fpdns says the domaindiscount24.net servers are running 
Net::DNS::Nameserver.  Ummm...

Sam



More information about the bind-users mailing list