unable to resolve *.irs.gov at local bind 9.12.0 server ?
PGNet Dev
pgnet.dev at gmail.com
Sat Jan 27 17:58:41 UTC 2018
I've a local bind 9.12.0 server. Works for virtually all domains.
For "irs.gov", it fails,
dig A irs.gov
; <<>> DiG 9.12.0 <<>> A irs.gov
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 2101
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
; COOKIE: 924396a00e82e7e6cb3a18495a6cb893e564a4fc00f78373 (good)
;; QUESTION SECTION:
;irs.gov. IN A
;; Query time: 2706 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Sat Jan 27 09:36:19 PST 2018
;; MSG SIZE rcvd: 64
Resolution is fine at offsite servers
dig A irs.gov @8.8.8.8
; <<>> DiG 9.12.0 <<>> A irs.gov @8.8.8.8
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 56261
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; QUESTION SECTION:
;irs.gov. IN A
;; ANSWER SECTION:
irs.gov. 236 IN A 166.123.218.220
;; Query time: 43 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Sat Jan 27 09:36:29 PST 2018
;; MSG SIZE rcvd: 52
looking at local server trace,
dig +trace irs.gov
; <<>> DiG 9.12.0 <<>> +trace irs.gov
;; global options: +cmd
. 3328 IN NS a.root-servers.net.
. 3328 IN NS b.root-servers.net.
. 3328 IN NS c.root-servers.net.
. 3328 IN NS d.root-servers.net.
. 3328 IN NS e.root-servers.net.
. 3328 IN NS f.root-servers.net.
. 3328 IN NS g.root-servers.net.
. 3328 IN NS h.root-servers.net.
. 3328 IN NS i.root-servers.net.
. 3328 IN NS j.root-servers.net.
. 3328 IN NS k.root-servers.net.
. 3328 IN NS l.root-servers.net.
. 3328 IN NS m.root-servers.net.
. 3328 IN RRSIG NS 8 0 518400 20180209050000 20180127040000 41824 . DkeMZSxEcmxZ78udDb9pw7HxLylmNUJb4utqwV206pQ+ItBvuuJzMnmY pboHDZPEn15xUcGTmnAmDfpX1fhoHPYuBiXC3DmO/gwRG1ktl/xRKbjE m9E9PDvUmd1F+/FCcexTFsFm0RU/EMiziKIYJL1ttj2+Ozjc/j+ii6I9 cOVwjH8DE+3XqGjti803qu4Ycr3MQYcPxQiO6NckxoidZM3GxZRkunmr mOz5bBDFfOBMbgC4uYGpfVuJ1OysDRzniNuFQXkftIlpFHmgeIi3U/GR RoeIuOip9YaJRiUfnK1V8iFaff/70YvPr6PQkpmb8NpayLdfDqQdsK3D 8rJORA==
;; Received 565 bytes from 127.0.0.1#53(127.0.0.1) in 1 ms
gov. 172800 IN NS a.gov-servers.net.
gov. 172800 IN NS b.gov-servers.net.
gov. 172800 IN NS c.gov-servers.net.
gov. 172800 IN NS d.gov-servers.net.
gov. 86400 IN DS 7698 8 1 6F109B46A80CEA9613DC86D5A3E065520505AAFE
gov. 86400 IN DS 7698 8 2 6BC949E638442EAD0BDAF0935763C8D003760384FF15EBBD5CE86BB5 559561F0
gov. 86400 IN RRSIG DS 8 1 86400 20180209050000 20180127040000 41824 . jqlemnm+YBXTy0W+akzROVZNlZBsvyVnDOyCONEyDiOn4fXWTrFiDdXD lvq60ytuyQpaevkMQHC360Z5CIU4GRqODFom0G/v1whZOS140lBiqPVb f9xpX29Fx/RjEekGNXMlzXyrzXCtvy2yFQ7jcUYwl/JJ5DFRZerjAAt8 7v/CdHrF42E5ocjcSnxMZ1EaUFBMAm549lYRVSOG4h6SSlfos4R/G8GF VKXs2JE27/EWXdIw0uMZKU88ExLdY6TVpCNHrrJ29W6CIT5JO59sI8GO woML2fwF7+gfM5zbNM5geHdOvAVh0KY1mhCRT8cln5r8maazH4ih+jvV akgTRQ==
;; Received 662 bytes from 199.7.83.42#53(l.root-servers.net) in 28 ms
irs.gov. 86400 IN NS ns1.irs.gov.
irs.gov. 86400 IN NS ns2.irs.gov.
irs.gov. 86400 IN NS ns3.irs.gov.
irs.gov. 86400 IN NS ns4.irs.gov.
irs.gov. 3600 IN DS 29552 8 2 A9B81C7EDC4E5DBEF97991A812FCE87E82E80BF2330C3FB75C36DBFE 665745A3
irs.gov. 3600 IN RRSIG DS 8 2 3600 20180203161006 20180127161006 21179 gov. LNdq0+IpiPLViVoHC/UU4mCtQquIGY/BRMxWWsZ07UbTa6q7ZkVRIvwM RRLZz4lUb8pOddpuRqoqcVtbCL9hTfUHexxOsRUGdZOxDpfR5iIgKqcQ dTd/R6oyUqM9vbHu5u5S9MSlzN0ZWHcqxiIlpG7UL2TenZcugLkjEwT+ hdE=
couldn't get address for 'ns1.irs.gov': not found
couldn't get address for 'ns2.irs.gov': not found
couldn't get address for 'ns3.irs.gov': not found
couldn't get address for 'ns4.irs.gov': not found
dig: couldn't get address for 'ns1.irs.gov': no more
checking
ns1.irs.gov
ns2.irs.gov
ns3.irs.gov
ns4.irs.gov
the issue's the same -- no resolution at the local server, just fine offsite.
What's going on here, specific to *irs.gov?
Is it 'them'? Is there something we can remediate at the local server?
More information about the bind-users
mailing list