BIND 9 and BIND 8 issue

[Mark Andrews]

In message <397019C15B5A45899BB02B1B212E1597 at bradon>, "bradonkuo" writes:
> Dear all bind users,
> 
> I am new to manage 3 BIND 9 servers, lately, I got some complains about =
> users cannot connect to=20
> 
> some websites while they use our BIND 9 servers, this issue will be =
> solved if they use other
> 
> ISP's BIND 8 servers, one example is as below. Can we modify any =
> configurations of BIND 9 server to
> 
> solve this issue so that users don't need to change anything?
> 
> Sincerly,
> 
> Bradon Kuo from Taiwan, Taipei,
> 
> > lserver 168.95.1.1
> Default Server:  dns.hinet.net
> Address:  168.95.1.1
> 
> > www.hangan.org.tw
> Server:  dns.hinet.net
> Address:  168.95.1.1
> 
> Non-authoritative answer:
> Name:    www.hangan.org.tw
> Address:  211.21.92.25
> 
> > lserver 163.21.249.166
> Default Server:  dns.tp.edu.tw
> Address:  163.21.249.166
> 
> > www.hangan.org.tw
> Server:  dns.tp.edu.tw
> Address:  163.21.249.166
> 
> DNS request timed out.
>     timeout was 2 seconds.
> DNS request timed out.
>     timeout was 2 seconds.
> *** Request to dns.tp.edu.tw timed-out
> >

	Depending apon how old the BIND 8 server is it may be
	promoting the glue below to answer.  I can't get any reponse
	out of the nameserver itself.  tcpdump shows queries going
	out and no responses coming back.  Either the nameserver
	is dead or it is firewalled off.

	Try asking for the mx record at both servers and see if you
	get a response.  This requires the other ISP to query the
	nameserver rather than rely on glue.

	Mark

; <<>> DiG 9.7.0pre-alpha <<>> www.hangan.org.tw @c.twnic.net.tw
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 34204
;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 2, ADDITIONAL: 2
;; WARNING: recursion requested but not available

;; QUESTION SECTION:
;www.hangan.org.tw.		IN	A

;; AUTHORITY SECTION:
hangan.org.tw.		86400	IN	NS	www.hangan.org.tw.
hangan.org.tw.		86400	IN	NS	mail.hangan.org.tw.

;; ADDITIONAL SECTION:
www.hangan.org.tw.	86400	IN	A	211.21.92.25
mail.hangan.org.tw.	86400	IN	A	211.21.92.25

;; Query time: 359 msec
;; SERVER: 168.95.192.10#53(168.95.192.10)
;; WHEN: Wed Mar  4 07:36:47 2009
;; MSG SIZE  rcvd: 100



; <<>> DiG 9.3.6-P1 <<>> www.hangan.org.tw @211.21.92.25
;; global options:  printcmd
;; connection timed out; no servers could be reached


07:38:43.523517 211.30.172.21.62657 > 211.21.92.25.53:  27058+ A? www.hangan.org.tw. (35)
07:38:48.543936 211.30.172.21.62657 > 211.21.92.25.53:  27058+ A? www.hangan.org.tw. (35)
07:38:53.566828 211.30.172.21.62657 > 211.21.92.25.53:  27058+ A? www.hangan.org.tw. (35)

-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark_Andrews at isc.org