bind does not resolved all domains (SERVFAIL)

[Clément Fevrier]

On 01/13/2017 10:06 AM, Matus UHLAR - fantomas wrote:
> On 13.01.17 09:57, Clément Fevrier wrote:
>> I have a weird issue. I have at least one domain that bind9
>> can't resolved (phdcomics.com, so a very important one ^^), with
>> status SERVFAIL. Bind server IP is 192.168.1.8, client is
>> 192.168.1.7
>> 
>> 
>> Example #1 *client* % dig phdcomics.com
> 
> try:
> 
> dig +trace any phdcomics.com
> 
> that should help more than comparing to other nameservers if they
> can query that domain.
> 
> Note that the domain has mismatched delegation, according to some
> DNS checkers. also, the servers have very short TTLs.
> 

here the result:

% dig +trace any phdcomics.com


; <<>> DiG 9.10.3-P4-Ubuntu <<>> +trace any phdcomics.com
;; global options: +cmd
.			515404	IN	NS	j.root-servers.net.
.			515404	IN	NS	a.root-servers.net.
.			515404	IN	NS	h.root-servers.net.
.			515404	IN	NS	c.root-servers.net.
.			515404	IN	NS	m.root-servers.net.
.			515404	IN	NS	f.root-servers.net.
.			515404	IN	NS	b.root-servers.net.
.			515404	IN	NS	k.root-servers.net.
.			515404	IN	NS	i.root-servers.net.
.			515404	IN	NS	l.root-servers.net.
.			515404	IN	NS	d.root-servers.net.
.			515404	IN	NS	e.root-servers.net.
.			515404	IN	NS	g.root-servers.net.
.			516619	IN	RRSIG	NS 8 0 518400 20170125170000 20170112160000 61045
. WMKDbbdi+tIYFJJux+cz0EzwvKSQcxw/PTIIMXNiFfHtObmsI2otfaZ3
6mKMih5w+dzpBeJUHi5CaXhCETed9UxFLDeOGHMOVpDMP5xsYHkZWdu+
5uvAyukanzIJaR9TRbx793pKmv+kWr39gytZrWBUAM95Zd2A/24JCX6h
6Qp9yR1mSex2Y+w2QV1IEO1aJXM2pZxgDI++koUqTb6pT0jFVfVrWd82
x4dwIs9SQFjhvp3GjiGnksYASE4dZKplPGfvsnkuIe4vUyDWm2pQUILv
rVOknj6Hy2L1LHJbyXdZXYtqJCo6BF3FaMmm8UP0EUeg9k6jdQFDCxhI JkGD+Q==
;; Received 1097 bytes from 192.168.1.8#53(192.168.1.8) in 10 ms

com.			172800	IN	NS	a.gtld-servers.net.
com.			172800	IN	NS	b.gtld-servers.net.
com.			172800	IN	NS	c.gtld-servers.net.
com.			172800	IN	NS	d.gtld-servers.net.
com.			172800	IN	NS	e.gtld-servers.net.
com.			172800	IN	NS	f.gtld-servers.net.
com.			172800	IN	NS	g.gtld-servers.net.
com.			172800	IN	NS	h.gtld-servers.net.
com.			172800	IN	NS	i.gtld-servers.net.
com.			172800	IN	NS	j.gtld-servers.net.
com.			172800	IN	NS	k.gtld-servers.net.
com.			172800	IN	NS	l.gtld-servers.net.
com.			172800	IN	NS	m.gtld-servers.net.
com.			86400	IN	DS	30909 8 2
E2D3C916F6DEEAC73294E8268FB5885044A833FC5459588F4A9184CF C41A5766
com.			86400	IN	RRSIG	DS 8 1 86400 20170125170000 20170112160000 61045
. b5wTIFsPZnX8NZCa0YMrY6lBsiYHifpT9dKQWO0M9df9k2wjcKmiRpo7
b3L0EnQ+S3BT2kPPFXdRc30+4hxKlNZbFo2ci3E7AVTbY2b3Cl2JurB7
3wEDd+tI7SYlJ7/crPHQjeTUXIhc+QT2BKlfNxKhe2eUvpF5TqSOaT3m
iJi9j2TanhmVyVZHfuYDoY8EzE2oqnIiu7kUOxBbsDI+MUa9j0GXVzPZ
rna3Nbl0q+mHQhxQ2lGSw8MtpzXFDmuualOi6ZhLXmD25pEcdcsXY6mT
gCrFMoZg6IyrOqOeSZKp4Enso5IHf3K6rIYn/F4HRnAP52z50RciggFq nDankQ==
;; Received 865 bytes from 192.203.230.10#53(e.root-servers.net) in 19 ms

phdcomics.com.		172800	IN	NS	ns2.speakeasy.net.
phdcomics.com.		172800	IN	NS	ns1.speakeasy.net.
CK0POJMG874LJREF7EFN8430QVIT8BSM.com. 86400 IN NSEC3 1 1 0 -
CK0Q1GIN43N1ARRC9OSM6QPQR81H5M9A NS SOA RRSIG DNSKEY NSEC3PARAM
CK0POJMG874LJREF7EFN8430QVIT8BSM.com. 86400 IN RRSIG NSEC3 8 2 86400
20170117054831 20170110043831 6404 com.
c/zPRDrQtCoVh+htMF53DvkVesgW326ejQ5wIewgCPiBoKeEbqIMK+Kx
grKC4X74EdrgxCZj9kyv8tktEPsfDhNO0tOHX9Cll2crC3Me5IsDOpqE
PFCeRg/t7ToelaG2EgsftqPYGXAM9W83JhhBCjI+4QMAkDLx+LIn1osY gY8=
B7DI2Q1SAO6INJMOD4C3LIMV9US3S8SV.com. 86400 IN NSEC3 1 1 0 -
B7DNPO8AU6JBOMQ8E9HM02MIH4V2REKE NS DS RRSIG
B7DI2Q1SAO6INJMOD4C3LIMV9US3S8SV.com. 86400 IN RRSIG NSEC3 8 2 86400
20170118054114 20170111043114 6404 com.
cYE8YzLv0mdE+mmBT1PgwhxHbxHQVgnJdGN0YWvyUJc2BX8567nzlMMS
q8lrremlw+Gpzby7SlrMrvS2Od4QgZVIgG6i9Y0QuqN4pMtSC63CoDxZ
U2zl2e+kvv59ubm2lvnWx69s+dTBZO6d4KJXGG0DeKd0Neq+HWYM/D0r Nbc=
;; Received 608 bytes from 192.31.80.30#53(d.gtld-servers.net) in 33 ms

;; connection timed out; no servers could be reached



Clément