variable dig results

Fr34k freaknetboy at yahoo.com
Fri Jan 6 13:55:05 UTC 2012


I suspect that dig is confused.  Let me explain.


Looks like WHOIS says that these (2) servers are authoritative for this domain:

ns1.thehartford.com.   ['162.136.188.1']   [TTL=172800] 
ns2.thehartford.com.   ['162.136.190.1']   [TTL=172800] 


However, the DNS configuration says something different, which lists these (4) servers instead:


hfdns3.thehartford.com  ['162.136.188.3']   [TTL=120] 
hfdns4.thehartford.com  ['162.136.188.4']   [TTL=120] 
simns3.thehartford.com  ['162.136.190.3']   [TTL=120] 
simns4.thehartford.com  ['162.136.190.4']   [TTL=120] 


As one can see, they do not match nor even overlap nor even agree.
Someone needs to decide which servers are really supposed to be authoritative for this domain and have alignment in all configurations.

http://www.intodns.com/thehartford.com

Hope this helps.








>________________________________
> From: M. Meadows <sun-guru at live.com>
>To: bind-users <bind-users at lists.isc.org> 
>Sent: Friday, January 6, 2012 8:28 AM
>Subject: variable dig results
> 
>
> 
> 
>Wondering why we get variable results from the following command:    dig eftc.thehartford.com
>(sometimes we get authority section and additional section feedback ... sometimes we don't)
> 
>Usually we see the following:
> 
>; <<>> DiG 9.3.6-P1-RedHat-9.3.6-4.P1.el5_4.2 <<>> eftc.thehartford.com
>;; global options:  printcmd
>;; Got answer:
>;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 35955
>;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0
>;; QUESTION SECTION:
>;eftc.thehartford.com.          IN      A
>;; ANSWER SECTION:
>eftc.thehartford.com.   120     IN      A       162.136.189.173
>;; Query time: 94 msec
>;; SERVER: 172.25.17.185#53(172.25.17.185)
>;; WHEN: Fri Jan  6 07:23:07 2012
>;; MSG SIZE  rcvd: 54
>
> 
>But occasionally we see :
> 
>
>; <<>> DiG 9.3.6-P1-RedHat-9.3.6-4.P1.el5_4.2 <<>> eftc.thehartford.com ;; global options:  printcmd ;; Got answer:
>;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 64958 ;; flags: qr aa; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 4
> 
>;; QUESTION SECTION:
>;eftc.thehartford.com.                   IN           A
> 
>;; ANSWER SECTION:
>eftc.thehartford.com.     120        IN           A             162.136.189.173
> 
>;; AUTHORITY SECTION:
>thehartford.com.             120        IN           NS          hfdns3.thehartford.com.
>thehartford.com.             120        IN           NS          hfdns4.thehartford.com.
>thehartford.com.             120        IN           NS          simns3.thehartford.com.
>thehartford.com.             120        IN           NS          simns4.thehartford.com.
> 
>;; ADDITIONAL SECTION:
>hfdns3.thehartford.com.               120        IN           A             162.136.188.3
>hfdns4.thehartford.com.               120        IN           A             162.136.188.4
>simns3.thehartford.com.               120        IN           A             162.136.190.3
>simns4.thehartford.com.               120        IN           A             162.136.190.4
> 
>;; Query time: 52 msec
>;; SERVER: 172.25.17.185#53(172.25.17.185) ;; WHEN: Fri Jan  6 00:10:02 2012 ;; MSG SIZE  rcvd: 202
> 
> 
>I assume this is due to differences in response from different auth nameservers. If that's the case ... what does one have set up to return the 2nd response?
> 
>Thanks!
>Martin Meadows
> 
> 
>
> 
>
>_______________________________________________
>Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list
>
>bind-users mailing list
>bind-users at lists.isc.org
>https://lists.isc.org/mailman/listinfo/bind-users
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20120106/2c123307/attachment.html>


More information about the bind-users mailing list