unexpected RCODE (REFUSED) resolving

Tue Aug 3 22:32:29 UTC 2010

In message <20100803142625.GC27217 at tamay-dogan.net>, Michelle Konzack writes:
> This is a MIME-formatted message.  If you see this text it means that your
> E-mail software does not support MIME-formatted messages.
> 
> Hello,
> 
> since today morning (~06:30 CEST) I get several 1.000 errors like:
> 
> ----[ '/var/log/named.log' ]--------------------------------------------
> Aug  3 10:12:39 dns1 named[26425]: 03-Aug-2010 10:12:39.951 lame-servers: i=
> nfo: unexpected RCODE (REFUSED) resolving 'lists.colo.xensource.com/A/IN': =
> 68.156.138.136#53

Basically you need to complain to the administators for xensource.com
to get the delegation cleaned up or the server configured.

xensource.com is delegated to 68.156.138.136 but that server is refusing
to answer queries for the xensource.com.  Additionally according to
ns1.xensource.com both ns0.xensource.com and ns2.xensource.com no longer
exist.  The administrators for xensource.com need to clean up the
delegation by contacting their registrar and removing ns0.xensource.com
from delegation.  They also need to clean up the delegation for
colo.xensource.com as that has ns0 and ns2 listed which don't exist.

; <<>> DiG 9.3.6-P1 <<>> xensource.com @a.gtld-servers.net
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 4442
;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:
;xensource.com.			IN	A

;; AUTHORITY SECTION:
xensource.com.		172800	IN	NS	ns0.xensource.com.
xensource.com.		172800	IN	NS	ns1.xensource.com.

;; ADDITIONAL SECTION:
ns0.xensource.com.	172800	IN	A	68.156.138.136
ns1.xensource.com.	172800	IN	A	70.42.241.99

;; Query time: 181 msec
;; SERVER: 2001:503:a83e::2:30#53(2001:503:a83e::2:30)
;; WHEN: Wed Aug  4 08:25:08 2010
;; MSG SIZE  rcvd: 99

> Aug  3 10:12:40 dns1 named[26425]: 03-Aug-2010 10:12:40.298 lame-servers: i=
> nfo: unexpected RCODE (REFUSED) resolving 'lists.colo.xensource.com/AAAA/IN=
> ': 66.165.176.24#53
> Aug  3 10:12:40 dns1 named[26425]: 03-Aug-2010 10:12:40.439 lame-servers: i=
> nfo: unexpected RCODE (REFUSED) resolving 'lists.colo.xensource.com/AAAA/IN=
> ': 68.156.138.136#53
> Aug  3 11:11:07 dns1 named[26425]: 03-Aug-2010 11:11:07.670 lame-servers: i=
> nfo: FORMERR resolving 'ns.xinnet.cn/AAAA/IN': 61.155.152.86#53
> Aug  3 11:12:07 dns1 named[26425]: 03-Aug-2010 11:12:07.259 lame-servers: i=
> nfo: unexpected RCODE (SERVFAIL) resolving 'kernelnewbies.org/NS/IN': 85.11=
> 8.1.10#53
> Aug  3 11:12:07 dns1 named[26425]: 03-Aug-2010 11:12:07.380 lame-servers: i=
> nfo: unexpected RCODE (SERVFAIL) resolving 'nl.linux.org/A/IN': 131.211.29.=
> 16#53
> Aug  3 11:12:07 dns1 named[26425]: 03-Aug-2010 11:12:07.381 lame-servers: i=
> nfo: unexpected RCODE (SERVFAIL) resolving 'nl.linux.org/MX/IN': 131.211.29=
> =2E16#53
> Aug  3 11:39:22 dns1 named[26425]: 03-Aug-2010 11:39:22.848 lame-servers: i=
> nfo: FORMERR resolving 'tehrooz.com/NS/IN': 79.175.164.23#53
> Aug  3 11:41:23 dns1 named[26425]: 03-Aug-2010 11:41:23.649 lame-servers: i=
> nfo: unexpected RCODE (REFUSED) resolving 'lists.colo.xensource.com/A/IN': =
> 68.156.138.136#53
> Aug  3 11:41:23 dns1 named[26425]: 03-Aug-2010 11:41:23.975 lame-servers: i=
> nfo: unexpected RCODE (REFUSED) resolving 'lists.colo.xensource.com/AAAA/IN=
> ': 68.156.138.136#53
> Aug  3 11:41:24 dns1 named[26425]: 03-Aug-2010 11:41:24.135 lame-servers: i=
> nfo: unexpected RCODE (REFUSED) resolving 'lists.colo.xensource.com/AAAA/IN=
> ': 66.165.176.24#53
> Aug  3 11:51:06 dns1 named[26425]: 03-Aug-2010 11:51:06.272 lame-servers: i=
> nfo: unexpected RCODE (REFUSED) resolving 'tallyho.bc.nu/A/IN': 209.132.176=
> =2E100#53
> Aug  3 12:12:30 dns1 named[26425]: 03-Aug-2010 12:12:30.505 lame-servers: i=
> nfo: unexpected RCODE (SERVFAIL) resolving 'ns2.telkom.co.za/A/IN': 196.7.1=
> 42.133#53
> Aug  3 12:12:30 dns1 named[26425]: 03-Aug-2010 12:12:30.513 lame-servers: i=
> nfo: unexpected RCODE (SERVFAIL) resolving 'ns3.telkom.co.za/A/IN': 196.7.1=
> 42.133#53
> Aug  3 12:12:30 dns1 named[26425]: 03-Aug-2010 12:12:30.515 lame-servers: i=
> nfo: unexpected RCODE (SERVFAIL) resolving 'ns2.telkom.co.za/AAAA/IN': 196.=
> 7.142.133#53
> Aug  3 12:12:30 dns1 named[26425]: 03-Aug-2010 12:12:30.522 lame-servers: i=
> nfo: unexpected RCODE (SERVFAIL) resolving 'ns3.telkom.co.za/AAAA/IN': 196.=
> 7.142.133#53
> Aug  3 12:41:42 dns1 named[26425]: 03-Aug-2010 12:41:42.753 lame-servers: i=
> nfo: unexpected RCODE (REFUSED) resolving 'lists.colo.xensource.com/A/IN': =
> 68.156.138.136#53
> Aug  3 12:41:43 dns1 named[26425]: 03-Aug-2010 12:41:43.101 lame-servers: i=
> nfo: unexpected RCODE (REFUSED) resolving 'lists.colo.xensource.com/AAAA/IN=
> ': 66.165.176.24#53
> Aug  3 12:41:43 dns1 named[26425]: 03-Aug-2010 12:41:43.240 lame-servers: i=
> nfo: unexpected RCODE (REFUSED) resolving 'lists.colo.xensource.com/AAAA/IN=
> ': 68.156.138.136#53
> Aug  3 13:11:24 dns1 named[26425]: 03-Aug-2010 13:11:24.187 lame-servers: i=
> nfo: unexpected RCODE (SERVFAIL) resolving '34.46.85.18.in-addr.arpa/PTR/IN=
> ': 18.85.2.171#53
> Aug  3 13:16:17 dns1 named[26425]: 03-Aug-2010 13:16:17.355 lame-servers: i=
> nfo: unexpected RCODE (REFUSED) resolving '110.241.42.70.in-addr.arpa/PTR/I=
> N': 68.156.138.136#53
> ------------------------------------------------------------------------
> 
> The weird thing is, normaly I see between 40 and 100 per day, but  today
> more then 7000.  What can this be?
> 
> Thanks, Greetings and nice Day/Evening
>     Michelle Konzack
> 
> --=20
> ##################### Debian GNU/Linux Consultant ######################
>    Development of Intranet and Embedded Systems with Debian GNU/Linux
> 
> itsystems at tdnet France EURL       itsystems at tdnet UG (limited liability)
> Owner Michelle Konzack            Owner Michelle Konzack
> 
> Apt. 917 (homeoffice)
> 50, rue de Soultz                 Kinzigstra=DFe 17
> 67100 Strasbourg/France           77694 Kehl/Germany
> Tel: +33-6-61925193 mobil         Tel: +49-177-9351947 mobil
> Tel: +33-9-52705884 fix
> 
> <http://www.itsystems.tamay-dogan.net/>  <http://www.flexray4linux.org/>
> <http://www.debian.tamay-dogan.net/>         <http://www.can4linux.org/>
> 
> Jabber linux4michelle at jabber.ccc.de
> ICQ    #328449886
> 
> Linux-User #280138 with the Linux Counter, http://counter.li.org/
> 
> --=_samba3-10610-1280845586-0001-2
> Content-Type: application/pgp-signature; name="signature.pgp"
> Content-Transfer-Encoding: 7bit
> Content-Description: Digital signature
> Content-Disposition: inline
> 
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.9 (GNU/Linux)
> 
> iD8DBQFMWCcQC0FPBMSS+BIRAu++AKC9lgPXjakq35Qkn2L8I2aBBaNYQACfd5o5
> 32ExRtmAd4jHg83g2lDA37s=
> =+h2w
> -----END PGP SIGNATURE-----
> 
> --=_samba3-10610-1280845586-0001-2--
> 
> --===============5020919719648838695==
> Content-Type: text/plain; charset="us-ascii"
> MIME-Version: 1.0
> Content-Transfer-Encoding: 7bit
> Content-Disposition: inline
> 
> _______________________________________________
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
> --===============5020919719648838695==--
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: marka at isc.org