Some dns recursive resolution issues ..

vincent.blondel at ing.be vincent.blondel at ing.be
Mon Oct 20 08:27:25 UTC 2008


Hello,

this mail to ask you some help because I get some strange behaviour on
my public dns resolvers. Public resolution is working nice behalve for
some sites where I get SERVFAIL error ..

Last times I got this problem with .., ugc.fr and now this moring I also
get the same problem with climair.be.

I already searched a bit everywhere but nothing found right now ..

# dig @localhost climair.be in mx +trace

; <<>> DiG 9.4.2-P1 <<>> @localhost climair.be in mx +trace
; (1 server found)
;; global options:  printcmd
.                       14081   IN      NS      k.root-servers.net.
.                       14081   IN      NS      l.root-servers.net.
.                       14081   IN      NS      m.root-servers.net.
.                       14081   IN      NS      j.root-servers.net.
.                       14081   IN      NS      c.root-servers.net.
.                       14081   IN      NS      d.root-servers.net.
.                       14081   IN      NS      h.root-servers.net.
.                       14081   IN      NS      f.root-servers.net.
.                       14081   IN      NS      b.root-servers.net.
.                       14081   IN      NS      a.root-servers.net.
.                       14081   IN      NS      e.root-servers.net.
.                       14081   IN      NS      g.root-servers.net.
.                       14081   IN      NS      i.root-servers.net.
;; Received 272 bytes from 127.0.0.1#53(127.0.0.1) in 3 ms

be.                     172800  IN      NS      A.NS.DNS.be.
be.                     172800  IN      NS      MILANO.NS.DNS.be.
be.                     172800  IN      NS      B.NS.DNS.be.
be.                     172800  IN      NS      PRAGUE.NS.DNS.be.
be.                     172800  IN      NS      C.NS.DNS.be.
be.                     172800  IN      NS      LONDON.NS.DNS.be.
be.                     172800  IN      NS      X.DNS.be.
be.                     172800  IN      NS      BRUSSELS.NS.DNS.be.
be.                     172800  IN      NS      AMSTERDAM.NS.DNS.be.
;; Received 381 bytes from 192.203.230.10#53(e.root-servers.net) in 172
ms

climair.be.             86400   IN      NS      ns2.dns7947.net.
climair.be.             86400   IN      NS      ns.dns7947.net.
;; Received 74 bytes from 195.66.241.90#53(LONDON.NS.DNS.be) in 18 ms

climair.be.             86400   IN      MX      10 mail.climair.be.
climair.be.             86400   IN      NS      ns.climair.be.
climair.be.             86400   IN      NS      ns.dns7947.net.
climair.be.             86400   IN      NS      ns2.dns7947.net.
;; Received 176 bytes from 174.133.204.227#53(ns2.dns7947.net) in 135 ms

# dig @localhost climair.be in mx

; <<>> DiG 9.4.2-P1 <<>> @localhost climair.be in mx
; (1 server found)
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 983
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;climair.be.                    IN      MX

;; Query time: 2 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Mon Oct 20 10:11:13 2008
;; MSG SIZE  rcvd: 28

As you can see when I trace the complete resolution it seems to work but
when querying the usual way I get an SERVFAIL. It also happens that when
sending the request with +norec I get an answer.

Thanks to help me because our mail engineers really claim about it ...
-----------------------------------------------------------------
ATTENTION:
The information in this electronic mail message is private and
confidential, and only intended for the addressee. Should you
receive this message by mistake, you are hereby notified that
any disclosure, reproduction, distribution or use of this
message is strictly prohibited. Please inform the sender by
reply transmission and delete the message without copying or
opening it.

Messages and attachments are scanned for all viruses known.
If this message contains password-protected attachments, the
files have NOT been scanned for viruses by the ING mail domain.
Always scan attachments before opening them.
-----------------------------------------------------------------




More information about the bind-users mailing list