not resolving from some places?

[Barry Finkel]

"Dawn Connelly" <dawn.connelly at gmail.com> wrote in reply to a posting:

>I get the same thing on my network. But if I turn around and immediately do
>the exact some query again, I get an answer. I'm thinking that the latency
>in getting the cname and doing the second query is just enough to make it
>time out. When I do the query the send time, I'm getting an answer out of
>cache. I noticed from the outside that the response time was 200+ ms. I
>could be WAY off on this one...but that's what it looks like to me.
>One thing that might help is if any of your clients that are doing lookups
>are windows boxes, try putting a period at the end of the FQDN when using
>nslookup. Windows is a spastic freak when it comes to appending FQDNs. By
>putting the period at the end, you are telling it not to do that. You'll
>probably be able to prove that your stuff is working but you have latency
>working against you.
>
>[root at ns2 named]# dig www.atosresearch.eu
>
>; <<>> DiG 9.2.1 <<>> www.atosresearch.eu
>;; global options:  printcmd
>;; connection timed out; no servers could be reached
>[root at ns2 named]# dig www.atosresearch.eu
>
>; <<>> DiG 9.2.1 <<>> www.atosresearch.eu
>;; global options:  printcmd
>;; Got answer:
>;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 11213
>;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 3, ADDITIONAL: 3
>
>;; QUESTION SECTION:
>;www.atosresearch.eu.           IN      A
>
>;; ANSWER SECTION:
>www.atosresearch.eu.    85642   IN      CNAME   arroyito.atosorigin.es.
>arroyito.atosorigin.es. 85646   IN      A       212.170.156.75
>
>;; AUTHORITY SECTION:
>atosorigin.es.          85646   IN      NS      ns1.atosorigin.es.
>atosorigin.es.          85646   IN      NS      ns2.atosorigin.es.
>atosorigin.es.          85646   IN      NS      ineco.nic.es.
>
>;; ADDITIONAL SECTION:
>ns1.atosorigin.es.      85624   IN      A       212.170.156.7
>ns2.atosorigin.es.      85624   IN      A       212.170.156.77
>ineco.nic.es.           2842    IN      A       194.69.254.2
>
>;; Query time: 1 msec
>;; SERVER: 127.0.0.1#53(127.0.0.1)
>;; WHEN: Wed Jul 25 13:16:08 2007
>;; MSG SIZE  rcvd: 197

The first query takes time, and an answer is placed in the cache.
The second query gets it answer immediately from the cache without
delay.

       flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 3, ADDITIONAL: 3

Note the absence of "aa" (authoritative answer); this answer came from
the DNS cache.
----------------------------------------------------------------------
Barry S. Finkel
Computing and Information Systems Division
Argonne National Laboratory          Phone:    +1 (630) 252-7277
9700 South Cass Avenue               Facsimile:+1 (630) 252-4601
Building 222, Room D209              Internet: BSFinkel at anl.gov
Argonne, IL   60439-4828             IBMMAIL:  I1004994