+trace works on domain that gives SERVFAIL normally

Adam Clark adam.clark at ngv.vic.gov.au
Thu Mar 29 04:17:02 UTC 2007


I am still exhibiting the same problem and have had a few people email
me directly to see if I had a solution.

Which I don't.

System is RedHat Enterprise Linux 3, all updates applied

[aclark at monet1 aclark]$ uname -a
Linux monet1.ngv.vic.gov.au 2.4.21-47.0.1.ELsmp #1 SMP Fri Oct 13
17:56:20 EDT 2006 i686 i686 i386 GNU/Linux

[aclark at monet1 aclark]$ named -v
BIND 9.2.4

[aclark at monet1 aclark]$ rpm -q -a | grep bind
bind-libs-9.2.4-20.EL3
bind-9.2.4-20.EL3
bind-utils-9.2.4-20.EL3
bind-chroot-9.2.4-20.EL3

New example:
[root at monet1 aclark]# rndc flush
[root at monet1 aclark]# dig www.getfirebug.com

; <<>> DiG 9.2.4 <<>> www.getfirebug.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 18888
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;www.getfirebug.com.            IN      A

;; Query time: 219 msec
;; SERVER: 10.10.10.20#53(10.10.10.20)
;; WHEN: Thu Mar 29 14:13:42 2007
;; MSG SIZE  rcvd: 36

[root at monet1 aclark]# dig +trace www.getfirebug.com

; <<>> DiG 9.2.4 <<>> +trace www.getfirebug.com
;; global options:  printcmd
.                       518389  IN      NS      b.root-servers.net.
.                       518389  IN      NS      c.root-servers.net.
.                       518389  IN      NS      d.root-servers.net.
.                       518389  IN      NS      e.root-servers.net.
.                       518389  IN      NS      f.root-servers.net.
.                       518389  IN      NS      g.root-servers.net.
.                       518389  IN      NS      h.root-servers.net.
.                       518389  IN      NS      i.root-servers.net.
.                       518389  IN      NS      j.root-servers.net.
.                       518389  IN      NS      k.root-servers.net.
.                       518389  IN      NS      l.root-servers.net.
.                       518389  IN      NS      m.root-servers.net.
.                       518389  IN      NS      a.root-servers.net.
;; Received 244 bytes from 10.10.10.20#53(10.10.10.20) in 0 ms

com.                    172800  IN      NS      I.GTLD-SERVERS.NET.
com.                    172800  IN      NS      J.GTLD-SERVERS.NET.
com.                    172800  IN      NS      K.GTLD-SERVERS.NET.
com.                    172800  IN      NS      L.GTLD-SERVERS.NET.
com.                    172800  IN      NS      M.GTLD-SERVERS.NET.
com.                    172800  IN      NS      A.GTLD-SERVERS.NET.
com.                    172800  IN      NS      B.GTLD-SERVERS.NET.
com.                    172800  IN      NS      C.GTLD-SERVERS.NET.
com.                    172800  IN      NS      D.GTLD-SERVERS.NET.
com.                    172800  IN      NS      E.GTLD-SERVERS.NET.
com.                    172800  IN      NS      F.GTLD-SERVERS.NET.
com.                    172800  IN      NS      G.GTLD-SERVERS.NET.
com.                    172800  IN      NS      H.GTLD-SERVERS.NET.
;; Received 508 bytes from 192.228.79.201#53(b.root-servers.net) in 172
ms

getfirebug.com.         172800  IN      NS      ns1.parakey.com.
getfirebug.com.         172800  IN      NS      ns2.parakey.com.
;; Received 112 bytes from 192.43.172.30#53(I.GTLD-SERVERS.NET) in 370
ms

www.getfirebug.com.     14400   IN      CNAME   getfirebug.com.
getfirebug.com.         14400   IN      A       74.52.85.194
getfirebug.com.         86400   IN      NS      ns2.parakey.com.
getfirebug.com.         86400   IN      NS      ns1.parakey.com.
;; Received 142 bytes from 74.52.85.194#53(ns1.parakey.com) in 200 ms
 

-----Original Message-----
From: bind-users-bounce at isc.org [mailto:bind-users-bounce at isc.org] On
Behalf Of Adam Clark
Sent: Thursday, 8 February 2007 10:46 AM
To: bind-users at isc.org
Subject: +trace works on domain that gives SERVFAIL normally

Hi,
  We hare having a weird problems.  A domain lookup for a particilar
domain Produces different results dependant on whether or not the +trace
flag is used.

Any ideas?

[root at monet1 etc]# named -v
BIND 9.2.4

See dig outputs below:

#################################################################
# 1st dig run
#################################################################
[root at monet1 etc]# rndc flush
[root at monet1 etc]# dig @10.10.10.20 heartofphilosophy.com

; <<>> DiG 9.2.4 <<>> @10.10.10.20 heartofphilosophy.com ; (1 server
found) ;; global options:  printcmd ;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 2935 ;; flags: qr
rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;heartofphilosophy.com.         IN      A

;; Query time: 358 msec
;; SERVER: 10.10.10.20#53(10.10.10.20)
;; WHEN: Thu Feb  8 10:42:47 2007
;; MSG SIZE  rcvd: 39

#################################################################
# 2nd dig run
#################################################################
[root at monet1 etc]# rndc flush
[root at monet1 etc]# dig +trace @10.10.10.20 heartofphilosophy.com

; <<>> DiG 9.2.4 <<>> +trace @10.10.10.20 heartofphilosophy.com ; (1
server found) ;; global options:  printcmd
.                       518400  IN      NS      J.ROOT-SERVERS.NET.
.                       518400  IN      NS      K.ROOT-SERVERS.NET.
.                       518400  IN      NS      L.ROOT-SERVERS.NET.
.                       518400  IN      NS      M.ROOT-SERVERS.NET.
.                       518400  IN      NS      A.ROOT-SERVERS.NET.
.                       518400  IN      NS      B.ROOT-SERVERS.NET.
.                       518400  IN      NS      C.ROOT-SERVERS.NET.
.                       518400  IN      NS      D.ROOT-SERVERS.NET.
.                       518400  IN      NS      E.ROOT-SERVERS.NET.
.                       518400  IN      NS      F.ROOT-SERVERS.NET.
.                       518400  IN      NS      G.ROOT-SERVERS.NET.
.                       518400  IN      NS      H.ROOT-SERVERS.NET.
.                       518400  IN      NS      I.ROOT-SERVERS.NET.
;; Received 228 bytes from 10.10.10.20#53(10.10.10.20) in 1 ms

com.                    172800  IN      NS      A.GTLD-SERVERS.NET.
com.                    172800  IN      NS      G.GTLD-SERVERS.NET.
com.                    172800  IN      NS      H.GTLD-SERVERS.NET.
com.                    172800  IN      NS      C.GTLD-SERVERS.NET.
com.                    172800  IN      NS      I.GTLD-SERVERS.NET.
com.                    172800  IN      NS      B.GTLD-SERVERS.NET.
com.                    172800  IN      NS      D.GTLD-SERVERS.NET.
com.                    172800  IN      NS      L.GTLD-SERVERS.NET.
com.                    172800  IN      NS      F.GTLD-SERVERS.NET.
com.                    172800  IN      NS      J.GTLD-SERVERS.NET.
com.                    172800  IN      NS      K.GTLD-SERVERS.NET.
com.                    172800  IN      NS      E.GTLD-SERVERS.NET.
com.                    172800  IN      NS      M.GTLD-SERVERS.NET.
;; Received 511 bytes from 192.58.128.30#53(J.ROOT-SERVERS.NET) in 310
ms

heartofphilosophy.com.  172800  IN      NS      ns1.alexsrv30.com.
heartofphilosophy.com.  172800  IN      NS      ns2.alexsrv30.com.
;; Received 117 bytes from 192.5.6.30#53(A.GTLD-SERVERS.NET) in 1004 ms

heartofphilosophy.com.  14400   IN      A       75.126.34.72
heartofphilosophy.com.  86400   IN      NS      ns1.alexsrv30.com.
heartofphilosophy.com.  86400   IN      NS      ns2.alexsrv30.com.
;; Received 133 bytes from 75.126.27.219#53(ns1.alexsrv30.com) in 201 ms


Adam Clark
Network Administrator

National Gallery of Victoria
180 St Kilda Road Melbourne Vic 3004 Australia
Telephone: +61 3 8620 2369
Fax: +61 3 8620 2565
www.ngv.vic.gov.au

Keep informed of the latest NGV exhibitions, special events and programs
at The Ian Potter Centre: NGV Australia and NGV International by
subscribing to NGV at RT, the NGV's free e-newsletter.

DISCLAIMER: This email and any files transmitted with it are
confidential and intended solely for bind-users at isc.org. If you are not
the named addressee you should not disseminate, copy or alter this
email. WARNING: Although National Gallery of Victoria has taken
reasonable precautions to ensure no viruses are present in this email,
the organisation cannot accept responsibility for any loss or damage
arising from the use of this email or attachment.




More information about the bind-users mailing list