+trace works on domain that gives SERVFAIL normally

[Mark Andrews]

> Hi,
>   We hare having a weird problems.  A domain lookup for a particilar
> domain
> Produces different results dependant on whether or not the +trace flag
> is used.
> 
> Any ideas?
> 
> [root at monet1 etc]# named -v
> BIND 9.2.4

	First thing I would do is upgrade, 9.2.4 is old and has
	lots of bugs.  If that fails then I would take a tcpdump
	and see if ypu are getting replies to the queries named is
	putting out.

	The delegation appears to be fine.

	The remote end doesn't appear to block packets from port 53.

	I'm worried a bit about your NAT box.  Some NAT's are known
	to just start dropping replies.  The tcpdump above should
	tell you if that is the problem.

	Mark
 
> See dig outputs below:
> 
> #################################################################
> # 1st dig run
> #################################################################
> [root at monet1 etc]# rndc flush
> [root at monet1 etc]# dig @10.10.10.20 heartofphilosophy.com
> 
> ; <<>> DiG 9.2.4 <<>> @10.10.10.20 heartofphilosophy.com
> ; (1 server found)
> ;; global options:  printcmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 2935
> ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
> 
> ;; QUESTION SECTION:
> ;heartofphilosophy.com.         IN      A
> 
> ;; Query time: 358 msec
> ;; SERVER: 10.10.10.20#53(10.10.10.20)
> ;; WHEN: Thu Feb  8 10:42:47 2007
> ;; MSG SIZE  rcvd: 39
> 
> #################################################################
> # 2nd dig run
> #################################################################
> [root at monet1 etc]# rndc flush
> [root at monet1 etc]# dig +trace @10.10.10.20 heartofphilosophy.com
> 
> ; <<>> DiG 9.2.4 <<>> +trace @10.10.10.20 heartofphilosophy.com
> ; (1 server found)
> ;; global options:  printcmd
> .                       518400  IN      NS      J.ROOT-SERVERS.NET.
> .                       518400  IN      NS      K.ROOT-SERVERS.NET.
> .                       518400  IN      NS      L.ROOT-SERVERS.NET.
> .                       518400  IN      NS      M.ROOT-SERVERS.NET.
> .                       518400  IN      NS      A.ROOT-SERVERS.NET.
> .                       518400  IN      NS      B.ROOT-SERVERS.NET.
> .                       518400  IN      NS      C.ROOT-SERVERS.NET.
> .                       518400  IN      NS      D.ROOT-SERVERS.NET.
> .                       518400  IN      NS      E.ROOT-SERVERS.NET.
> .                       518400  IN      NS      F.ROOT-SERVERS.NET.
> .                       518400  IN      NS      G.ROOT-SERVERS.NET.
> .                       518400  IN      NS      H.ROOT-SERVERS.NET.
> .                       518400  IN      NS      I.ROOT-SERVERS.NET.
> ;; Received 228 bytes from 10.10.10.20#53(10.10.10.20) in 1 ms
> 
> com.                    172800  IN      NS      A.GTLD-SERVERS.NET.
> com.                    172800  IN      NS      G.GTLD-SERVERS.NET.
> com.                    172800  IN      NS      H.GTLD-SERVERS.NET.
> com.                    172800  IN      NS      C.GTLD-SERVERS.NET.
> com.                    172800  IN      NS      I.GTLD-SERVERS.NET.
> com.                    172800  IN      NS      B.GTLD-SERVERS.NET.
> com.                    172800  IN      NS      D.GTLD-SERVERS.NET.
> com.                    172800  IN      NS      L.GTLD-SERVERS.NET.
> com.                    172800  IN      NS      F.GTLD-SERVERS.NET.
> com.                    172800  IN      NS      J.GTLD-SERVERS.NET.
> com.                    172800  IN      NS      K.GTLD-SERVERS.NET.
> com.                    172800  IN      NS      E.GTLD-SERVERS.NET.
> com.                    172800  IN      NS      M.GTLD-SERVERS.NET.
> ;; Received 511 bytes from 192.58.128.30#53(J.ROOT-SERVERS.NET) in 310
> ms
> 
> heartofphilosophy.com.  172800  IN      NS      ns1.alexsrv30.com.
> heartofphilosophy.com.  172800  IN      NS      ns2.alexsrv30.com.
> ;; Received 117 bytes from 192.5.6.30#53(A.GTLD-SERVERS.NET) in 1004 ms
> 
> heartofphilosophy.com.  14400   IN      A       75.126.34.72
> heartofphilosophy.com.  86400   IN      NS      ns1.alexsrv30.com.
> heartofphilosophy.com.  86400   IN      NS      ns2.alexsrv30.com.
> ;; Received 133 bytes from 75.126.27.219#53(ns1.alexsrv30.com) in 201 ms
> 
> 
> Adam Clark
> Network Administrator
> 
> National Gallery of Victoria
> 180 St Kilda Road Melbourne Vic 3004 Australia
> Telephone: +61 3 8620 2369 
> Fax: +61 3 8620 2565
> www.ngv.vic.gov.au
> 
> Keep informed of the latest NGV exhibitions, special events and programs at T
> he Ian Potter Centre: NGV Australia and NGV International by subscribing to N
> GV at RT, the NGV's free e-newsletter.
> 
> DISCLAIMER: This email and any files transmitted with it are confidential and
>  intended solely for bind-users at isc.org. If you are not the named addressee y
> ou should not disseminate, copy or alter this email. WARNING: Although Nation
> al Gallery of Victoria has taken reasonable precautions to ensure no viruses 
> are present in this email, the organisation cannot accept responsibility for 
> any loss or damage arising from the use of this email or attachment.
> 
> 
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark_Andrews at isc.org