BIND 9 and BIND 8 issue

[Kevin Darcy]

hangan.org.tw is delegated to www.hangan.org.tw and mail.hangan.org.tw, 
the glue records that are provided resolve both of those names to the 
address 211.21.92.25. I believe BIND 8 considers a glue record to be 
"good enough" to serve as an answer, so it returns the glue record. BIND 
9, however, is more diligent about trying to get a *better* answer 
directly from the authoritative servers.

I can't get any kind of response from the nameserver at 211.21.92.25, 
can anyone else (tried with both EDNS0 on and off)?

Having both delegated nameservers resolve to the same address is, of 
course, very bad architecture; it means you have a single point of 
failure for your entire domain. I'm somewhat surprised that the .tw 
registry even allows this.

- Kevin


bradonkuo wrote:
> Dear all bind users,
> I am new to manage 3 BIND 9 servers, lately, I got some complains 
> about users cannot connect to
> some websites while they use our BIND 9 servers, this issue will be 
> solved if they use other
> ISP's BIND 8 servers, one example is as below. Can we modify any 
> configurations of BIND 9 server to
> solve this issue so that users don't need to change anything?
> Sincerly,
> Bradon Kuo from Taiwan, Taipei,
> > lserver 168.95.1.1
> Default Server: dns.hinet.net
> Address: 168.95.1.1
> > www.hangan.org.tw <http://www.hangan.org.tw>
> Server: dns.hinet.net
> Address: 168.95.1.1
> Non-authoritative answer:
> Name: www.hangan.org.tw <http://www.hangan.org.tw>
> Address: 211.21.92.25
> > lserver 163.21.249.166
> Default Server: dns.tp.edu.tw
> Address: 163.21.249.166
> > www.hangan.org.tw <http://www.hangan.org.tw>
> Server: dns.tp.edu.tw
> Address: 163.21.249.166
> DNS request timed out.
> timeout was 2 seconds.
> DNS request timed out.
> timeout was 2 seconds.
> *** Request to dns.tp.edu.tw timed-out
> >
> 台北市教育網路中心 郭春吉
> 電話:2722-3004 傳真:2722-3574
> ------------------------------------------------------------------------
>
> _______________________________________________
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users