Getting a formerr 'invalid response' for winqual.microsoft.com. but dig +trace works.

[Matt Doughty]

I have spend the afternoon trying to figure this out. The response I
get back from their nameserver looks fine to me, and dig +trace works
fine, but a regular dig returns a servfail. I have looked at the code
for invalid response, but I don't quite follow what is going on there,
and the comment 'responder is insane' leaves something to be desired.
Any help would be appreciated here. I have included the dig +trace
output below:

dig +trace winqual.partners.extranet.microsoft.com.

; <<>> DiG 9.7.0-P1 <<>> +trace winqual.partners.extranet.microsoft.com.
;; global options: +cmd
.                       518004  IN      NS      j.root-servers.net.
.                       518004  IN      NS      e.root-servers.net.
.                       518004  IN      NS      l.root-servers.net.
.                       518004  IN      NS      c.root-servers.net.
.                       518004  IN      NS      m.root-servers.net.
.                       518004  IN      NS      d.root-servers.net.
.                       518004  IN      NS      b.root-servers.net.
.                       518004  IN      NS      h.root-servers.net.
.                       518004  IN      NS      k.root-servers.net.
.                       518004  IN      NS      a.root-servers.net.
.                       518004  IN      NS      g.root-servers.net.
.                       518004  IN      NS      i.root-servers.net.
.                       518004  IN      NS      f.root-servers.net.
;; Received 228 bytes from 172.16.255.1#53(172.16.255.1) in 1 ms

com.                    172800  IN      NS      h.gtld-servers.net.
com.                    172800  IN      NS      f.gtld-servers.net.
com.                    172800  IN      NS      m.gtld-servers.net.
com.                    172800  IN      NS      g.gtld-servers.net.
com.                    172800  IN      NS      l.gtld-servers.net.
com.                    172800  IN      NS      c.gtld-servers.net.
com.                    172800  IN      NS      d.gtld-servers.net.
com.                    172800  IN      NS      a.gtld-servers.net.
com.                    172800  IN      NS      b.gtld-servers.net.
com.                    172800  IN      NS      i.gtld-servers.net.
com.                    172800  IN      NS      j.gtld-servers.net.
com.                    172800  IN      NS      e.gtld-servers.net.
com.                    172800  IN      NS      k.gtld-servers.net.
;; Received 497 bytes from 192.33.4.12#53(c.root-servers.net) in 18 ms

microsoft.com.          172800  IN      NS      ns3.msft.net.
microsoft.com.          172800  IN      NS      ns1.msft.net.
microsoft.com.          172800  IN      NS      ns5.msft.net.
microsoft.com.          172800  IN      NS      ns2.msft.net.
microsoft.com.          172800  IN      NS      ns4.msft.net.
;; Received 235 bytes from 192.43.172.30#53(i.gtld-servers.net) in 67 ms

partners.extranet.microsoft.com. 3600 IN NS     dns10.one.microsoft.com.
partners.extranet.microsoft.com. 3600 IN NS     dns13.one.microsoft.com.
partners.extranet.microsoft.com. 3600 IN NS     dns11.one.microsoft.com.
partners.extranet.microsoft.com. 3600 IN NS     dns12.one.microsoft.com.
;; Received 236 bytes from 64.4.59.173#53(ns2.msft.net) in 3 ms

winqual.partners.extranet.microsoft.com. 10 IN A 131.107.97.31
;; Received 112 bytes from 131.107.125.65#53(dns10.one.microsoft.com) in 23 ms


-- 
--Matt