No resolving in some geographic areas

Mark Andrews Mark_Andrews at isc.org
Thu Jul 5 03:51:57 UTC 2007


> Sorry Barry, Mark
> I used to hide info for security reasons, but you're right!!
> 
> This is the info for the domain which is in troubles www.rebujia.com.co
> 
> Some people can open the site and others just don't do
> 
> 
> # dig www.rebujia.com.co
> 
> ; <<>> DiG 9.3.2 <<>> www.rebujia.com.co
> ;; global options:  printcmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 56733
> ;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 6, ADDITIONAL: 4
> 
> ;; QUESTION SECTION:
> ;www.rebujia.com.co.            IN      A
> 
> ;; ANSWER SECTION:
> www.rebujia.com.co.     842     IN      CNAME   proxy.rebujia.com.co.
> proxy.rebujia.com.co.   842     IN      A       201.234.69.219
> 
> ;; AUTHORITY SECTION:
> co.                     38845   IN      NS      cdcnet.uniandes.edu.co.
> co.                     38845   IN      NS      kenshin.uniandes.edu.co.
> co.                     38845   IN      NS      mintaka.uniandes.edu.co.
> co.                     38845   IN      NS      ayax.uniandes.edu.co.
> co.                     38845   IN      NS      cmcl2.nyu.edu.
> co.                     38845   IN      NS      saell.cc.columbia.edu.
> 
> ;; ADDITIONAL SECTION:
> ayax.uniandes.edu.co.   37221   IN      A       157.253.50.3
> cdcnet.uniandes.edu.co. 37221   IN      A       157.253.1.13
> kenshin.uniandes.edu.co. 37221  IN      A       200.57.34.101
> mintaka.uniandes.edu.co. 37221  IN      A       200.31.69.106
> 
> ;; Query time: 40 msec
> ;; SERVER: 200.30.115.163#53(200.30.115.163)
> ;; WHEN: Wed Jul  4 22:25:28 2007
> ;; MSG SIZE  rcvd: 292
> 
> What could be wrong?

	One of the servers for rebujia.com.co doesn't have the address
	record for proxy.rebujia.com.co.

	Also the NS list in the parent zone should match that in the
	zone itself.  The currently don't.

; <<>> DiG 9.3.4 <<>> +norec www.rebujia.com.co @chester.consulcom.com.co
; (1 server found)
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 50952
;; flags: qr aa; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;www.rebujia.com.co.            IN      A

;; ANSWER SECTION:
www.rebujia.com.co.     86400   IN      CNAME   proxy.rebujia.com.co.

;; AUTHORITY SECTION:
rebujia.com.co.         86400   IN      SOA     chester.consulcom.com.co. root.rebujia.com.co. 2005103103 10800 3600 604800 86400

;; Query time: 312 msec
;; SERVER: 200.21.82.114#53(200.21.82.114)
;; WHEN: Thu Jul  5 13:47:03 2007
;; MSG SIZE  rcvd: 115

> Thanks in advanced
> 
> Carlos Bernat
> ---------- Forwarded message ----------
> From: Barry Margolin <barmar at alum.mit.edu>
> Date: 04-jul-2007 22:07
> Subject: Re: No resolving in some geographic areas
> To: comp-protocols-dns-bind at isc.org
> 
> In article <f6hj6n$11l0$1 at sf1.isc.org>,
> "Carlos Alberto Bernat Orozco" <cabo81 at gmail.com> wrote:
> 
> > Hi Group
> > I need help for a question which is killing me!! I configured BIND 8 on
> > CentOS for my web site and BIND resolves fine for some users but doesn't
> in
> > other cities.
> 
> What's the real domain that you're having trouble with?  We can't tell
> whether you've made a mistake in delegation or configuration when you
> hide the domain like this.
> 
> >
> > this the result for dig:
> > # dig myhost.myserver.com.co
> >
> > ; <<>> DiG 9.3.2 <<>> myhost.myserver.com.co
> > ;; global options:  printcmd
> > ;; Got answer:
> > ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 1916
> > ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 6, ADDITIONAL: 4
> >
> > ;; QUESTION SECTION:
> > ;myhost.myserver.com.co.          IN      A
> >
> > ;; ANSWER SECTION:
> > myhost.myserver.com.co.   7244    IN      A       xxxx.xxxx.xxxx.xxxx
> >
> > ;; AUTHORITY SECTION:
> > co.                     45247   IN      NS      cmcl2.nyu.edu.
> > co.                     45247   IN      NS      saell.cc.columbia.edu.
> > co.                     45247   IN      NS      cdcnet.uniandes.edu.co.
> > co.                     45247   IN      NS      kenshin.uniandes.edu.co.
> > co.                     45247   IN      NS      mintaka.uniandes.edu.co.
> > co.                     45247   IN      NS      ayax.uniandes.edu.co.
> 
> The fact that the answer contains authority records for co. rather than
> myserver.com.co. suggests that something is wrong.  But we can't tell if
> you don't tell us what the domain is.
> 
> >
> > ;; ADDITIONAL SECTION:
> > ayax.uniandes.edu.co.   177     IN      A       157.253.50.3
> > cdcnet.uniandes.edu.co. 177     IN      A       157.253.1.13
> > kenshin.uniandes.edu.co. 177    IN      A       200.57.34.101
> > mintaka.uniandes.edu.co. 177    IN      A       200.31.69.106
> >
> > ;; Query time: 40 msec
> > ;; SERVER: xxxx.xxxx.xxxx.xxxx#53(xxxx.xxxx.xxxx.xxxx)
> > ;; WHEN: Wed Jul  4 20:38:46 2007
> > ;; MSG SIZE  rcvd: 274
> >
> >
> >
> > Where could be the error?? Is a problem of the foreign ISP of my clients??
> >
> > Please help and thanks in advanced!!!
> >
> > Carlos Bernat
> 
> --
> Barry Margolin, barmar at alum.mit.edu
> Arlington, MA
> *** PLEASE post questions in newsgroups, not directly to me ***
> *** PLEASE don't copy me on replies, I'll read them in the group ***
> 
> 
> 
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark_Andrews at isc.org



More information about the bind-users mailing list