bad horizontal referral ?

[Jean-François Leroux]

Well, you're right. Maybe it's coming from dig version? It's DiG
9.4.1-P1 (debian Etch).

Thanks for the test anyways :-)


2008/3/13, Kevin Darcy <kcd at chrysler.com>:
> What version of dig are you using? I don't seem to be having a problem:
>
>  $ dig tice.ac-orleans-tours.fr @dns1.ac-orleans-tours.fr. +nssearch +trace
>  SOA dns2.tice.ac-orleans-tours.fr. root.tice.ac-orleans-tours.fr.
>  2008031103 28800 7200 604800 86400 from server
>  dns4.tice.ac-orleans-tours.fr in 121 ms.
>  SOA dns2.tice.ac-orleans-tours.fr. root.tice.ac-orleans-tours.fr.
>  2008031103 28800 7200 604800 86400 from server dns1.ac-orleans-tours.fr
>  in 123 ms.
>  SOA dns2.tice.ac-orleans-tours.fr. root.tice.ac-orleans-tours.fr.
>  2008031103 28800 7200 604800 86400 from server
>  dns2.tice.ac-orleans-tours.fr in 125 ms.
>  SOA dns2.tice.ac-orleans-tours.fr. root.tice.ac-orleans-tours.fr.
>  2008031103 28800 7200 604800 86400 from server dns1.ac-orleans-tours.fr
>  in 123 ms.
>  SOA dns2.tice.ac-orleans-tours.fr. root.tice.ac-orleans-tours.fr.
>  2008031103 28800 7200 604800 86400 from server
>  dns2.tice.ac-orleans-tours.fr in 164 ms.
>  SOA dns2.tice.ac-orleans-tours.fr. root.tice.ac-orleans-tours.fr.
>  2008031103 28800 7200 604800 86400 from server
>  dns4.tice.ac-orleans-tours.fr in 164 ms.
>  SOA dns2.tice.ac-orleans-tours.fr. root.tice.ac-orleans-tours.fr.
>  2008031103 28800 7200 604800 86400 from server dns1.ac-orleans-tours.fr
>  in 122 ms.
>  SOA dns2.tice.ac-orleans-tours.fr. root.tice.ac-orleans-tours.fr.
>  2008031103 28800 7200 604800 86400 from server
>  dns4.tice.ac-orleans-tours.fr in 123 ms.
>  SOA dns2.tice.ac-orleans-tours.fr. root.tice.ac-orleans-tours.fr.
>  2008031103 28800 7200 604800 86400 from server
>  dns2.tice.ac-orleans-tours.fr in 123 ms.
>
> $
>
>
>                - Kevin
>
>  Jean-François Leroux wrote:
>  > Oh, sorry, both of you. I had misunderstood the question. Thanks for
>  > offering help :-)
>  >
>  > Here it is : tice.ac-orleans-tours.fr
>  >
>  > 2008/3/13, Kevin Darcy <kcd at chrysler.com>:
>  >
>  >> Examples work perfectly, assuming they're constructed properly.
>  >>
>  >>  If you want help on a real zone, you'll need to give the real zone name,
>  >>  not an example name.
>  >>
>  >>  FYI, myzone.com is delegated to ns1.netnation.com and ns2.netnation.com,
>  >>  neither of which appear to be giving horizontal referrals.
>  >>
>  >>
>  >>
>  >>                   - Kevin
>  >>
>  >>
>  >>
>  >>  Jean-François Leroux wrote:
>  >>  > The zone, in my example, is called myzone.com. Private zone is
>  >>  > private.myzone.com.
>  >>  >
>  >>  > 2008/3/13, Barry Margolin <barmar at alum.mit.edu>:
>  >>  >
>  >>  >> In article <fr96i6$1bt6$1 at sf1.isc.org>,
>  >>  >>
>  >>  >>  "Jean-Francois Leroux" <leroux.jeanfrancois at gmail.com> wrote:
>  >>  >>
>  >>  >>  > Ok, I understand. Thanks for the explanation.
>  >>  >>  >
>  >>  >>  > Now, here's my problem. I have two dns servers in a public zone (which
>  >>  >>  > I'm testing), and when I issue a dig myzone.com @myserver1.myzone.com
>  >>  >>  > (or myserver2) +nsserach +trace, I always get this message. Could it
>  >>  >>  > be that there's a problem with my setup? As far as I understand bind,
>  >>  >>  > it should be ok, the second one being slave of the first one. They're
>  >>  >>  > on the same level though, since both are slaves of a single master in
>  >>  >>  > the private zone. Is this a problem?
>  >>  >>
>  >>  >>
>  >>  >> What's the zone?
>  >>  >>
>  >>  >>
>  >>  >>  >
>  >>  >>  >
>  >>  >>  > 2008/3/12, Kevin Darcy <kcd at chrysler.com>:
>  >>  >>
>  >>  >>
>  >>  >>>> Jean-Francois Leroux wrote:
>  >>  >>>>
>  >>  >>  > >  > Thanks for the explanation, Kevin. If I may ask, what means
>  >>  >>  > >  > 'horizontal' in the message? I've had a look in my DNS & Bind book but
>  >>  >>  > >  > couldn't find anything about it...
>  >>  >>  > >  > And while I'm thinking of it, how can I know which server refers me to
>  >>  >>  > >  > a wrong address? Is this possible ?
>  >>  >>  > >  >
>  >>  >>  > >  >
>  >>  >>  > >  > 2008/3/12, Kevin Darcy <kcd at chrysler.com>:
>  >>  >>  > >  >
>  >>  >>
>  >>  >>
>  >>  >>>>  >> Jean-Francois Leroux wrote:
>  >>  >>>>
>  >>  >>  > >  >>  > Hi,
>  >>  >>  > >  >>  > doing a trace with dig today I got a 'BAD (HORIZONTAL) REFERRAL'
>  >>  >>  > >  >>  > message, with the correct answer though.
>  >>  >>  > >  >>  >  What does this mean ?
>  >>  >>  > >  >>  >
>  >>  >>  > >  >>  >
>  >>  >>  > >  >>  >
>  >>  >>  > >  >>
>  >>  >>  > >  >> Referrals should be "down" not "across". If you're resolving www.foo.com
>  >>  >>  > >  >>  iteratively and along the way a delegated nameserver for foo.com refers
>  >>  >>  > >  >>  you to blah.com, that's a useless referral because it doesn't get you
>  >>  >>  > >  >>  any closer to resolving the name.
>  >>  >>  > >  >>
>  >>  >>  > >  >>  Dig probably got the correct answer because it gave up on the broken
>  >>  >>  > >  >>  nameserver and tried a different one.
>  >>  >>  > >  >>
>  >>  >>  > >
>  >>  >>  > > "Horizontal" means at the same level of the hierarchy. The DNS namespace
>  >>  >>  > >  is often viewed as being tree-like, with the "root" at the top and each
>  >>  >>  > >  level of subdomain extending downwards. If a referral is "across" rather
>  >>  >>  > >  than "down", it's "horizontal" instead of "vertical".
>  >>  >>  > >
>  >>  >>  > >  So many prepositions, so little time...
>  >>  >>  > >
>  >>  >>  > >
>  >>  >>  > >
>  >>  >>  > >       - Kevin
>  >>  >>  > >
>  >>  >>  > >
>  >>  >>  > >
>  >>  >>
>  >>  >>
>  >>  >> --
>  >>  >>  Barry Margolin, barmar at alum.mit.edu
>  >>  >>  Arlington, MA
>  >>  >>  *** PLEASE don't copy me on replies, I'll read them in the group ***
>  >>  >>
>  >>  >>
>  >>  >>
>  >>  >
>  >>  >
>  >>  >
>  >>  >
>  >>
>  >>
>  >>
>  >>
>  >
>  >
>  >
>  >
>
>
>