Strange issue - please enlighten me

Mark Andrews marka at isc.org
Sat Feb 20 22:52:32 UTC 2010


In message <20100220192646.GB14801 at fantomas.sk>, Matus UHLAR - fantomas writes:
> > Marco Davids (SIDN) wrote:
> > 
> > > Anyone any clue? I am trying to understand why some resolvers handle
> > > this query well, while BIND 9.7.x returns a SERVFAIL.
> 
> On 19.02.10 13:21, Alan Clegg wrote:
> > aclegg at Yellow:~$ dig +short airfrance.fr ns
> > webaf1.airfrance.fr.
> > lasvegas.airfrance.fr.
> > proof.rain.fr.
> > 
> > aclegg at Yellow:~$ dig +short @webaf1.airfrance.fr. www.airfrance.fr
> > aclegg at Yellow:~$ dig +short @lasvegas.airfrance.fr. www.airfrance.fr
> > aclegg at Yellow:~$ dig +short @proof.rain.fr. www.airfrance.fr
> > 
> > All three of these servers, however, provide NS responses:
> > 
> > www.airfrance.fr.	87600	IN	NS	ns2isp2.airfrance.fr.
> > www.airfrance.fr.	87600	IN	NS	ns2isp1.airfrance.fr.
> > 
> > That's not right... all three of the servers are "lame" (as you noted
> > from your logfile).
> > 
> > airfrance.fr needs to fix their delegations.
> 
> like other domains I have seen before, they delegated the "www.airfrance.fr"
> record to broken nameservers that can not return proper answers for ANY or
> NS requests. ryanair.com is one of those, ccs.cz/ccs.sk are another.
> 
> I have no idea what kind of nameservers are they, but they're either broken o
> r
> their admins do not know how to properly configure zone delegation.
> No, NS delegations ni parent zones are NOT enough.

Yet another misconfigured load balancer.  When will DNS admins learn
that the net has not been just A queries and you actually need to
test that the load balancer can answer queries other that A queries.

Mark

; <<>> DiG 9.3.6-P1 <<>> www.airfrance.fr @ns2isp2.airfrance.fr +norec +dnssec
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 56821
;; flags: qr aa; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 2048
;; QUESTION SECTION:
;www.airfrance.fr.		IN	A

;; ANSWER SECTION:
www.airfrance.fr.	60	IN	A	193.57.244.36

;; Query time: 351 msec
;; SERVER: 193.57.219.253#53(193.57.219.253)
;; WHEN: Sun Feb 21 09:46:07 2010
;; MSG SIZE  rcvd: 61


; <<>> DiG 9.3.6-P1 <<>> www.airfrance.fr @ns2isp2.airfrance.fr +norec +dnssec aaaa
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 48998
;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 13, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 4096
;; QUESTION SECTION:
;www.airfrance.fr.		IN	AAAA

;; AUTHORITY SECTION:
.			518400	IN	NS	G.ROOT-SERVERS.NET.
.			518400	IN	NS	H.ROOT-SERVERS.NET.
.			518400	IN	NS	I.ROOT-SERVERS.NET.
.			518400	IN	NS	J.ROOT-SERVERS.NET.
.			518400	IN	NS	K.ROOT-SERVERS.NET.
.			518400	IN	NS	L.ROOT-SERVERS.NET.
.			518400	IN	NS	M.ROOT-SERVERS.NET.
.			518400	IN	NS	A.ROOT-SERVERS.NET.
.			518400	IN	NS	B.ROOT-SERVERS.NET.
.			518400	IN	NS	C.ROOT-SERVERS.NET.
.			518400	IN	NS	D.ROOT-SERVERS.NET.
.			518400	IN	NS	E.ROOT-SERVERS.NET.
.			518400	IN	NS	F.ROOT-SERVERS.NET.

;; Query time: 353 msec
;; SERVER: 193.57.219.253#53(193.57.219.253)
;; WHEN: Sun Feb 21 09:46:12 2010
;; MSG SIZE  rcvd: 256

 
> -- 
> Matus UHLAR - fantomas, uhlar at fantomas.sk ; http://www.fantomas.sk/
> Warning: I wish NOT to receive e-mail advertising to this address.
> Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
> Spam = (S)tupid (P)eople's (A)dvertising (M)ethod
> _______________________________________________
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: marka at isc.org



More information about the bind-users mailing list