sporatic, noaa.gov SERVFAIL
Mark Andrews
marka at isc.org
Thu Jan 29 21:37:47 UTC 2015
Ensure your firewall passes fragmented UDP packets.
dig +trace +all +dnssec www.nhc.noaa.gov
should succeed. You will notice that the responses are large.
Mark
; <<>> DiG 9.11.0pre-alpha <<>> +trace +all +dnssec www.nhc.noaa.gov
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 41145
;; flags: qr aa; QUERY: 1, ANSWER: 14, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 4096
;; QUESTION SECTION:
;. IN NS
;; ANSWER SECTION:
. 518400 IN NS e.root-servers.net.
. 518400 IN NS i.root-servers.net.
. 518400 IN NS h.root-servers.net.
. 518400 IN NS g.root-servers.net.
. 518400 IN NS b.root-servers.net.
. 518400 IN NS l.root-servers.net.
. 518400 IN NS j.root-servers.net.
. 518400 IN NS m.root-servers.net.
. 518400 IN NS c.root-servers.net.
. 518400 IN NS f.root-servers.net.
. 518400 IN NS a.root-servers.net.
. 518400 IN NS d.root-servers.net.
. 518400 IN NS k.root-servers.net.
. 518400 IN RRSIG NS 8 0 518400 20150208170000 20150129160000 16665 . wBP+DfP/H1T7T267f+aUmqZFa6L0xAkPh2CGu1jQo8Z5+1kcchA6v0Ee BFlVI90eFFgLrFJKugBq4XozHW5Uj7HQHP9dPPI0W4z2u4380vM/Rdbq xRB8nesg66eWEghiocUvG2pUCIBfE60ReAu9lFktYTQWNHoSFOjMLhS0 1Fg=
;; Query time: 0 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Fri Jan 30 08:35:07 EST 2015
;; MSG SIZE rcvd: 397
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 37128
;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 5, ADDITIONAL: 4
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 4096
;; QUESTION SECTION:
;www.nhc.noaa.gov. IN A
;; AUTHORITY SECTION:
gov. 172800 IN NS a.gov-servers.net.
gov. 172800 IN NS b.gov-servers.net.
gov. 86400 IN DS 7698 8 1 6F109B46A80CEA9613DC86D5A3E065520505AAFE
gov. 86400 IN DS 7698 8 2 6BC949E638442EAD0BDAF0935763C8D003760384FF15EBBD5CE86BB5 559561F0
gov. 86400 IN RRSIG DS 8 1 86400 20150208170000 20150129160000 16665 . ucjpVlvTDORdbUPC8Be67uAeVplPFOV5b+5Ej6dOIjEdreiVp8Xqw5ro fh4VmLa+/TvdwPLr2uZD5Cm7uPI5t+Ux477CYEaWGVQO5Jguc1xvwo/U lEoI177BjHdTM2PTrp+woZQp1SpIINIBidmidic3dPWuDLzQIGscFlVn S1I=
;; ADDITIONAL SECTION:
a.gov-servers.net. 172800 IN A 69.36.157.30
b.gov-servers.net. 172800 IN A 209.112.123.30
a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30
;; Query time: 180 msec
;; SERVER: 192.228.79.201#53(192.228.79.201)
;; WHEN: Fri Jan 30 08:35:07 EST 2015
;; MSG SIZE rcvd: 395
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 43552
;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 6, ADDITIONAL: 7
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 1472
;; QUESTION SECTION:
;www.nhc.noaa.gov. IN A
;; AUTHORITY SECTION:
noaa.gov. 86400 IN NS ns-e.noaa.gov.
noaa.gov. 86400 IN NS ns-mw.noaa.gov.
noaa.gov. 86400 IN NS ns-nw.noaa.gov.
noaa.gov. 3600 IN DS 19789 5 1 F26B21B0C8365F80A85221BA8CC6DF40CC73B05B
noaa.gov. 3600 IN DS 19789 5 2 ABA039285FD7FA9D260206DD4C12D93CE346644A75316A143A27883D E93FA35B
noaa.gov. 3600 IN RRSIG DS 8 2 3600 20150205175724 20150129175724 4352 gov. wB2UOo0xqtc9SX7uy4DiOlZkfret3kcdB9IDG93d5M28flNhhLnZSgSU K2ZFyjnlqb25k0Z8uca2tSSpb8hOPldsvvKG8Rgs7x48+fgXciY2ovPn mzKedfsgTVtXGgjZsLAVovTY2y3weio1YUSEziLeM9++yaJ0REA6JiQq 3HM=
;; ADDITIONAL SECTION:
ns-e.noaa.gov. 86400 IN A 140.90.33.237
ns-mw.noaa.gov. 86400 IN A 140.172.17.237
ns-nw.noaa.gov. 86400 IN A 161.55.32.2
ns-e.noaa.gov. 86400 IN AAAA 2610:20:8000:8c00::237
ns-mw.noaa.gov. 86400 IN AAAA 2610:20:8800:8c00::237
ns-nw.noaa.gov. 86400 IN AAAA 2610:20:8c00:8c00::2
;; Query time: 172 msec
;; SERVER: 69.36.157.30#53(69.36.157.30)
;; WHEN: Fri Jan 30 08:35:08 EST 2015
;; MSG SIZE rcvd: 483
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 59153
;; flags: qr aa; QUERY: 1, ANSWER: 15, AUTHORITY: 4, ADDITIONAL: 13
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 4096
;; QUESTION SECTION:
;www.nhc.noaa.gov. IN A
;; ANSWER SECTION:
www.nhc.noaa.gov. 300 IN CNAME edge-nws.woc.noaa.gov.
www.nhc.noaa.gov. 300 IN RRSIG CNAME 5 4 300 20150205145231 20150129145231 49680 nhc.noaa.gov. LRzPzZS3xkV21r3YDBiCXUvroMnuT2Fw7jzjlmpusRhP82Ai+XPftnuK rmbu9pqIgIA28pe7wR8Sz61LEfhvNtGfS9JOMcMPxQmBlny6/JWSgwBF hlIhOqyRSktraXTTJ/n9sSqC3/QjKFs+dWTTrynTy2ZvfWscqL2KakaT pqcSrhDolgyDocqsExzgcWjyPYSHwR/rCMCcCje5PXfY1GrzrQ/UUMe0 rAr7kn6J1C0oDmUtbpIRYuqNQKwPp2EdIZ8akZmL151HDMcIlc2pG+4X S5zdlMZ3lV/O8WC0E3Db31JIX1EmdjeSiUdhs7GmUC+XW496NdppsCo4 6JL8LQ==
edge-nws.woc.noaa.gov. 300 IN CNAME edge-p1.l.noaa.gov.
edge-nws.woc.noaa.gov. 300 IN RRSIG CNAME 5 4 300 20150205145342 20150129145342 41187 woc.noaa.gov. CgEHsTvz6Z+gE8AdDTL/Uy7KuDgtzBwwURLgvu9uBSG9vQD7/axDgnSy oJOJ/Ir2OlQQEQi7fInwllHLYqFEby8MhBM0ADnkROVP4ixzQdv3Kbj3 d6ItRxGIzwzfLEKOAkopeHsWiAy5Eepkeu3DNMyqxEi55AAATUzEJCN1 aU9RZokNfmhkv9rKY+lJXUPnXtpoaOASXs9S5hJoI1MVsQWjbYSkiBy7 AnVYNTK8IlGnmk/pwIh9NVvygB2bcL0YIy8Cdvqv+7TdM3z4BfLl2T69 tAn7jdMRqDhEho9hdbw1BJqX2s3IBX9t83wZ9LgS+i/0nwXuGTmsPorZ ZHws6A==
edge-p1.l.noaa.gov. 30 IN A 140.172.17.11
edge-p1.l.noaa.gov. 30 IN A 140.172.17.21
edge-p1.l.noaa.gov. 30 IN A 216.38.80.71
edge-p1.l.noaa.gov. 30 IN A 216.38.80.81
edge-p1.l.noaa.gov. 30 IN A 129.15.96.11
edge-p1.l.noaa.gov. 30 IN A 129.15.96.21
edge-p1.l.noaa.gov. 30 IN A 140.90.33.11
edge-p1.l.noaa.gov. 30 IN A 140.90.33.21
edge-p1.l.noaa.gov. 30 IN A 140.90.200.11
edge-p1.l.noaa.gov. 30 IN A 140.90.200.21
edge-p1.l.noaa.gov. 30 IN RRSIG A 5 4 30 20150205203218 20150129203218 54795 l.noaa.gov. xhewX9CefTTIY4Hkic+g9CLZKDfiEVNwBFW6AH1M6JsZiH1qmXkddMOo N8rzQxHVIoVMq27NnpBBRLzcNOqp6AlrxuA1VnCEtsWR3R9cvNSkU03N zrN7nzpdApGRT4T4Uyw6cFTVPJQm8daZRhivqJ2Htgf+bZKB9Dj2yG9R 5ppoZpZ9Scf79n7Ul+Rt/beM7eZYmNsBBP0O2Kw+e75hqySyB3plB70p 9hI1QJTsYTgTyCEt0IHu4oXLFpGIRltkEI7GJ13U7UlgPDJaY+OU3Rut 0lL7V/xWhOabF17mAA+7J/eqYPKcAt/vE9e0tAyyc56791Nn+NCVir/z eolq0Q==
;; AUTHORITY SECTION:
l.noaa.gov. 86400 IN NS ns-mw.noaa.gov.
l.noaa.gov. 86400 IN NS ns-nw.noaa.gov.
l.noaa.gov. 86400 IN NS ns-e.noaa.gov.
l.noaa.gov. 86400 IN RRSIG NS 5 3 86400 20150205203218 20150129203218 54795 l.noaa.gov. TxJ2hj2WgSC/rUoUboTxelNmPEyJYoDSuy7iBcmS3A6cCtEK5TU46R8g zFDR7beDuAiz8rgcef5gW9s8DW6CVvZ2Drw71edldQgVh5OjNgxoQED5 jCexouzP0JajUI5BZqGMqs2l2mRdRXqrDMOky5mgctOD4HmqC4PfDwYs XxWJClW13J4YS/QkYB9IiHGWXLjYb+TvDyqRyxYPZAzLybfTLj+nMkky O34ke7t87tM5aF1m8V7+E1hf8MJLqy+2HSJK9SUJeqZj2strYMNz9vP7 7KP5wtbHCAe3qRELDSPj3/63L3gvNvVhLBhwUb4xSEhU7WWZgWHKbNfj w7Fx/Q==
;; ADDITIONAL SECTION:
ns-e.noaa.gov. 86400 IN A 140.90.33.237
ns-e.noaa.gov. 86400 IN AAAA 2610:20:8000:8c00::237
ns-mw.noaa.gov. 86400 IN A 140.172.17.237
ns-mw.noaa.gov. 86400 IN AAAA 2610:20:8800:8c00::237
ns-nw.noaa.gov. 86400 IN A 161.55.32.2
ns-nw.noaa.gov. 86400 IN AAAA 2610:20:8c00:8c00::2
ns-e.noaa.gov. 86400 IN RRSIG A 5 3 86400 20150205145234 20150129145234 45702 noaa.gov. fuCsyeBpUCiKExnAveteeEZttukTfrtFCPw9PUsE2/F7T1BiWUbpedsp zq57wmrH4fc7Qe11h420poeK0nDMbQpwKfmQwRpMhCGEWG/ZgeK6PoXa uNH1YIf9giMGUn055trEvHXRTcwsBZq8/CqfyeSHPjKd5QRoQGvEXoP1 GGzrlINzlDNaExNmWJRBDC7q8uDRKRLC28fYBkORUK3z5+2HzqWrCeHi pjWRmyE53WTLwq/960YQ4S//bOlT6OBTzP2N7S9fhR7cIwvFBrgEuBqQ +1eNmCXqz6nDPmjqysjnI/wtb6d/HMYiJpXu07hcLiPQ9/4Z3+jbbGAQ k0ii8Q==
ns-e.noaa.gov. 86400 IN RRSIG AAAA 5 3 86400 20150205145234 20150129145234 45702 noaa.gov. zy8WYbgybQ8ijOX7NuUmhl2nftvgytTeyv5ZQuIDfVvo2lWmnTQK51Mm YRZnRMfN/Sms5Hg3YN5HE3nVxXs6/OGx758DDPyleSygPAzzxDM5I7jf ZJNBOp3FH3hLh7fMhcT4zz5TycIWxwBjThYDU2Q7BGGykMLrJyz3W7d+ T2S2WzVCzbV5WdgnfQpf1bdYOi+UvNpdc2vBqu96SOKKiCxHBuBQGoqO RfTo/qhMSIRR+gWfHm2uOweDzx8roD97AvJ0OuiUERYEnZ03JSYB/++9 fiMzz0Ke0nuChztkQYxx+EWeZQZx1ekE44+HwOZdXv7ksUJpEGCfpISI zoFOGg==
ns-mw.noaa.gov. 86400 IN RRSIG A 5 3 86400 20150205145234 20150129145234 45702 noaa.gov. dZ3g54AHjVYtJkMq+52Q2uvgu2lrtxtzFbwcWnaxBsE4lSsHpa0jTX3v hoEY96GbmBNR6oxuwV8Gr2KS576IULKvP4c5y6+LGtZsHXPWkIacQA0M uNSfnY6yYXMDJHjvdgGPFtpo11akDgSFHWe8VxxHDnfGx9ZfLZq4Q1nB OAenmjRqr93FbKz2LbEGjHm3Rkou0bZgvR1hpeK0ElhkTn5aX8vscrgQ Tiw9K2u3aFuj+DFMb7w33W4WFCc1oUwULgg8sI5EjNHDHZRIFLdzJ4MC AQuKw0Iet5el/2UmU4qv9u9zLCteQ4kALJuQ0hDQDYEHrNkPG+uvAhaD 0X9UZQ==
ns-mw.noaa.gov. 86400 IN RRSIG AAAA 5 3 86400 20150205145234 20150129145234 45702 noaa.gov. zCbaVxy40gnAYAoC8qY9iWEzAlAkNwmDZhY+7BDgLb5DAYpAexoMlckq FIISulHYwitORYGOkdLkM5odhoKXh7Znr+UE7OZ0eve6j0pehuP/X/Mp N8tzccZc86sWzUSqqUhV533FaCxkDhoB7WzRIoSLAwnDeFuH0NDMvgA0 jZ+hCCC2lzI6GGO29PQ80EmFUd4vyBFLT1YObNEQwUE7EEZcRi4SIXGq JJFrlqhPSd2jhaSbNNwJJ4cckc94L1G4ujP1W+OIJLk1QIQ057ph+H71 jFNIfqesjAYEJaEB52WhzOkBl0ASdSBHznmYZkPLlE8mYbZfm7SgFFqY EpJHhw==
ns-nw.noaa.gov. 86400 IN RRSIG A 5 3 86400 20150205145234 20150129145234 45702 noaa.gov. 2q8ipHzvJFt+ST9w83x+CvgDcRjDKUpfnCcHQAPDxi1CKrj2slwq0cDc avKkHpsSPJEfTfDe3/UXtFwJEyxYcLoVcHXL+Q8ITyabrOMbH0L0RPhR Ptpk3SIGU7kr1wi8qOGPd/oFjbNqhtCqWRcsiMNySRerC4TsSTYdNe/3 kNHubIeBaEF8BlJ3uI44rowGnEzmM5EOLfyZS5dC5ZQIIO4uIf/F0uJy 3kcSh1X8XLcXapsZ9x6bRPct9A7ia3uFHrSMVGoC8lPnJdFRjYK3JKZn fKxv6V8YjzL7vs1OoMhbjT4c6OrnpRDyeux7yZ/1cVGwfnj/UlrS5SXb vEAfpg==
ns-nw.noaa.gov. 86400 IN RRSIG AAAA 5 3 86400 20150205145234 20150129145234 45702 noaa.gov. szU3JWwU+AXmn2gZqgGgCBNOlVB1jrMRUuX277zCHa+KbstEX5DrkdGg RWCwV91zhq9LzswfykGg4MRI3n1CuZj9G2u0YD8goF5inCSYgQrF14+Y iNigxkHPEdYWyEQZeOv3jPm/nZDV9vHt8SxUxYVVEQ7Cbj9+rwxdY2n1 PA5oc5On4yvKZt96Oy1igcxiWtby5uKDhlx1e1DkoW0DFYZ5AAwF4nbQ iP5d/8qlJd8VpXigP9VxMlNtD9e1cTWgUwpv3iOEJpZRo1ey/4OfGuvP I17k64Ex/3x5FAX12FTR3z5s51HGSCTguVVZgzJsvy0DrwCIL07xZOtG zRBEXQ==
;; Query time: 265 msec
;; SERVER: 140.172.17.237#53(140.172.17.237)
;; WHEN: Fri Jan 30 08:35:08 EST 2015
;; MSG SIZE rcvd: 3419
In message <F5FC122448E1BA4A8D6D2119430B41D54724C677 at MAILMB06.swe.la.gov>, Brad
Bendily writes:
> So, for a while we have had issues with resolving www.nhc.noaa.gov.
>
> In the past, a full restart of named fixed it for some amount of time.
>
> Last week I updated our named to 9.9.6-P1, so I assumed whatever the problem
> was would be resolved by this update. Apparently not.
>
> As you can see from the dig commands below. One resolves correctly, then 2 mi
> nutes later SERVFAIL. How can I troubleshoot this further?
>
> thanks
> bb
>
> dr93la08:/var/lib/named/slave # dig www.nhc.noaa.gov
>
> ; <<>> DiG 9.9.6-P1 <<>> www.nhc.noaa.gov ;; global options: +cmd ;; Got answ
> er:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 27700 ;; flags: qr rd ra;
> QUERY: 1, ANSWER: 12, AUTHORITY: 2, ADDITIONAL: 4
>
> ;; OPT PSEUDOSECTION:
> ; EDNS: version: 0, flags:; udp: 4096
> ;; QUESTION SECTION:
> ;www.nhc.noaa.gov. IN A
>
> ;; ANSWER SECTION:
> www.nhc.noaa.gov. 300 IN CNAME edge-nws.woc.noaa.gov.
> edge-nws.woc.noaa.gov. 300 IN CNAME edge-p1.l.noaa.gov.
> edge-p1.l.noaa.gov. 30 IN A 140.172.17.11
> edge-p1.l.noaa.gov. 30 IN A 140.90.33.11
> edge-p1.l.noaa.gov. 30 IN A 140.172.17.21
> edge-p1.l.noaa.gov. 30 IN A 129.15.96.21
> edge-p1.l.noaa.gov. 30 IN A 216.38.80.71
> edge-p1.l.noaa.gov. 30 IN A 140.90.200.21
> edge-p1.l.noaa.gov. 30 IN A 140.90.33.21
> edge-p1.l.noaa.gov. 30 IN A 216.38.80.81
> edge-p1.l.noaa.gov. 30 IN A 129.15.96.11
> edge-p1.l.noaa.gov. 30 IN A 140.90.200.11
>
> ;; AUTHORITY SECTION:
> gov. 172795 IN NS a.gov-servers.net.
> gov. 172795 IN NS b.gov-servers.net.
>
> ;; ADDITIONAL SECTION:
> a.gov-servers.net. 172795 IN A 69.36.157.30
> a.gov-servers.net. 172795 IN AAAA 2001:500:4431::2:30
> b.gov-servers.net. 172795 IN A 209.112.123.30
>
> ;; Query time: 3641 msec
> ;; SERVER: 10.120.11.107#53(10.120.11.107) ;; WHEN: Thu Jan 29 11:52:24 CST 2
> 015 ;; MSG SIZE rcvd: 363
>
>
>
> dr93la08:/var/lib/named/slave # dig www.nhc.noaa.gov
>
> ; <<>> DiG 9.9.6-P1 <<>> www.nhc.noaa.gov ;; global options: +cmd ;; Got answ
> er:k ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 64437 ;; flags: qr
> rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
>
> ;; OPT PSEUDOSECTION:
> ; EDNS: version: 0, flags:; udp: 4096
> ;; QUESTION SECTION:
> ;www.nhc.noaa.gov. IN A
>
> ;; Query time: 320 msec
> ;; SERVER: 10.120.11.107#53(10.120.11.107) ;; WHEN: Thu Jan 29 11:53:59 CST 2
> 015 ;; MSG SIZE rcvd: 45
>
>
> bb
>
> Brad Bendily
> System Administrator
> Northrop Grumman Corporation
> Louisiana Dept. of
> Children and Family Services
> brad.bendily at la.gov
> 225.342.6972
>
>
> _______________________________________________
> Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
> from this list
>
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
--
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742 INTERNET: marka at isc.org
More information about the bind-users
mailing list