Recursion Issue

[Chris Buxton]

On Mar 28, 2013, at 10:51 AM, Manson, John wrote:
> http://www.digwebinterface.com/?  Is one of the internet sites I use.

http://www.digwebinterface.com/?hostnames=test.gopleader.gov&type=A&showcommand=on&colorize=on&stats=on&norecursive=on&useresolver=8.8.4.4&ns=auth&nameservers=
______________________________________

test.gopleader.gov at chyron.house.gov.:
dig A +norec test.gopleader.gov. @chyron.house.gov.
; <<>> DiG 9.3.6-P1-RedHat-9.3.6-20.P1.el5_8.1 <<>> A +norec test.gopleader.gov. @chyron.house.gov.
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 48126
;; flags: qr aa; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;test.gopleader.gov.		IN	A

;; ANSWER SECTION:

test.gopleader.gov.	300	IN	CNAME	www.house.gov.
www.house.gov.		900	IN	CNAME	house.gov.edgesuite.net.


;; Query time: 26 msec
;; SERVER: 143.228.129.38#53(143.228.129.38)
;; WHEN: Thu Mar 28 18:55:49 2013
;; MSG SIZE  rcvd: 97

test.gopleader.gov at mercury.house.gov.:
dig A +norec test.gopleader.gov. @mercury.house.gov.
; <<>> DiG 9.3.6-P1-RedHat-9.3.6-20.P1.el5_8.1 <<>> A +norec test.gopleader.gov. @mercury.house.gov.
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 63565
;; flags: qr aa; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;test.gopleader.gov.		IN	A

;; ANSWER SECTION:

test.gopleader.gov.	300	IN	CNAME	www.house.gov.
www.house.gov.		900	IN	CNAME	house.gov.edgesuite.net.


;; Query time: 23 msec
;; SERVER: 143.231.1.67#53(143.231.1.67)
;; WHEN: Thu Mar 28 18:55:49 2013
;; MSG SIZE  rcvd: 97
______________________________________

You've changed the record test.gopleader.gov since last I looked at it -- it's now going to Akamai. The result shown here shows what's called a "dangling CNAME" -- your CNAME record, pointing to an outside resource. A resolving name server (one with recursion enabled) will then follow that to Akamai, giving this result:

test.gopleader.gov.	300	IN	CNAME	www.house.gov.
www.house.gov.		552	IN	CNAME	house.gov.edgesuite.net.
house.gov.edgesuite.net. 12640	IN	CNAME	a1164.g.akamai.net.
a1164.g.akamai.net.	19	IN	A	165.254.47.115
a1164.g.akamai.net.	19	IN	A	165.254.47.112

Everything is as it should be.

Chris Buxton
BlueCat Networks