unable to resolve *.irs.gov at local bind 9.12.0 server ?
Lee
ler762 at gmail.com
Sat Jan 27 19:33:55 UTC 2018
On 1/27/18, PGNet Dev <pgnet.dev at gmail.com> wrote:
> I've a local bind 9.12.0 server. Works for virtually all domains.
>
> For "irs.gov", it fails,
works for me on a local bind 9.11.2 server:
$ dig a irs.gov.
; <<>> DiG 9.11.2 <<>> a irs.gov.
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 5748
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
; COOKIE: ba2783422f7bc02f18d2058f5a6cd030cce6c0dbeac35ac5 (good)
;; QUESTION SECTION:
;irs.gov. IN A
;; ANSWER SECTION:
irs.gov. 600 IN A 166.123.218.220
;; AUTHORITY SECTION:
irs.gov. 7200 IN NS ns2.irs.gov.
irs.gov. 7200 IN NS ns4.irs.gov.
irs.gov. 7200 IN NS ns3.irs.gov.
irs.gov. 7200 IN NS ns1.irs.gov.
;; Query time: 140 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Sat Jan 27 19:17:04 Ame 2018
;; MSG SIZE rcvd: 152
$ dig +trace irs.gov.
; <<>> DiG 9.11.2 <<>> +trace irs.gov.
;; global options: +cmd
. 401538 IN NS b.root-servers.net.
. 401538 IN NS h.root-servers.net.
. 401538 IN NS k.root-servers.net.
. 401538 IN NS i.root-servers.net.
. 401538 IN NS d.root-servers.net.
. 401538 IN NS l.root-servers.net.
. 401538 IN NS f.root-servers.net.
. 401538 IN NS c.root-servers.net.
. 401538 IN NS e.root-servers.net.
. 401538 IN NS j.root-servers.net.
. 401538 IN NS a.root-servers.net.
. 401538 IN NS m.root-servers.net.
. 401538 IN NS g.root-servers.net.
. 518068 IN RRSIG NS 8 0 518400
20180209170000 20180127160000 41824 .
Ju2j+R7q7yw7+ibiRfuYrAx1CJzbz8xiP7AKFqe/I6wQBF1i+yY9dB4a
VvDdY5cGsPeSjaoIvLY6BOlNCTeSJBTIrmL7+mKBd+ZASJAAZ2Nr5RhA
+5aWIZlGvp1z0ElEkbAb3Lq/NXdYGerRmNPuppZ2E7jgSbauQdxLjG3Q
/q94p9aX2wImvG4tT3ud15BEZN8Pe/2Rf/CMz126OrH/vv5LAkofOneL
OPsaI+l8mor2iDiY5znO0phwqPJ4tYf+c/EdJGb6Yx7fBw6EVsr2Nxf8
dX2uMh5IdYyYT2OSkPisEDqvSrV9nwnnLkUliGailPL+OQkeZgj3I851 wSiAEQ==
;; Received 553 bytes from 127.0.0.1#53(127.0.0.1) in 0 ms
gov. 172800 IN NS d.gov-servers.net.
gov. 172800 IN NS c.gov-servers.net.
gov. 172800 IN NS b.gov-servers.net.
gov. 172800 IN NS a.gov-servers.net.
gov. 86400 IN DS 7698 8 2
6BC949E638442EAD0BDAF0935763C8D003760384FF15EBBD5CE86BB5 559561F0
gov. 86400 IN DS 7698 8 1
6F109B46A80CEA9613DC86D5A3E065520505AAFE
gov. 86400 IN RRSIG DS 8 1 86400
20180209170000 20180127160000 41824 .
PMUO1B/Cap+WBI40qtzJIiUL2/UToEfpvg76sip1dnCLnmML6aU3wwoz
tXjr/9uZVQnK1xA5nKuc+Ox9GcGl9oIrb9SqrPiDtNW64PRVINDGnpoC
MUioPrdhep65hdrwN1A3we2XAdAanEDTcCivV6Gsf+lun9tDkvGjaYt+
Bub/1Am/BlC8odckQrvTYSJSatlK6XpGNRk7Hj5UMQ4DBoLJOVWLDvhj
rq/z7ow8IlZGARNSbGGMkgjoWPPLbyTKSQ2W6StbQ7cXaOjod8eUp8q+
eEwSMO+Cp5JuGEgM26oZ6yfxmGZwwrQZJ6mcIQ5gGLaEpl1An+RmxBQc /iH6ug==
;; Received 662 bytes from 192.36.148.17#53(i.root-servers.net) in 0 ms
irs.gov. 86400 IN NS ns1.irs.gov.
irs.gov. 86400 IN NS ns2.irs.gov.
irs.gov. 86400 IN NS ns3.irs.gov.
irs.gov. 86400 IN NS ns4.irs.gov.
irs.gov. 3600 IN DS 29552 8 2
A9B81C7EDC4E5DBEF97991A812FCE87E82E80BF2330C3FB75C36DBFE 665745A3
irs.gov. 3600 IN RRSIG DS 8 2 3600
20180203161006 20180127161006 21179 gov.
LNdq0+IpiPLViVoHC/UU4mCtQquIGY/BRMxWWsZ07UbTa6q7ZkVRIvwM
RRLZz4lUb8pOddpuRqoqcVtbCL9hTfUHexxOsRUGdZOxDpfR5iIgKqcQ
dTd/R6oyUqM9vbHu5u5S9MSlzN0ZWHcqxiIlpG7UL2TenZcugLkjEwT+ hdE=
;; Received 495 bytes from 209.112.123.30#53(b.gov-servers.net) in 15 ms
irs.gov. 600 IN A 166.123.218.220
irs.gov. 600 IN RRSIG A 8 2 600
20180203180320 20180127170320 48205 irs.gov.
dZa5nqq03GaaBUvMaW/EwFSpcwFR6RYcyvaSpiMKPtpIigZnXbHZG5NK
QKtNpOYZEY2j/STf5huO8M9zqfX9aD0/Z7cuoljmAjPsJN+Nhr/5hVUB
1d9tvpnDCPcpGqz7jPQ++oMaMQStdkUB+ZaIleLbw5/vFr40bYHurVtD
YScu8v5PkR+omkk6vCiC3azU6pa58WID+63nh9BNY0u20MoyFN9vxC0Q
FpXjgn6uw5vbAA/ty6lLZwgwf4SIcrXBVS+BJ8a1n/j4M6edA1DcDaRs
zwvJGuJOnv3nvzIuWndtWiTUpgkOFr0RBIxpOIgr/rmyt2LMUWiEq7go 1md+YA==
irs.gov. 7200 IN NS ns1.irs.gov.
irs.gov. 7200 IN NS ns2.irs.gov.
irs.gov. 7200 IN NS ns3.irs.gov.
irs.gov. 7200 IN NS ns4.irs.gov.
irs.gov. 7200 IN RRSIG NS 8 2 7200
20180203180320 20180127170320 48205 irs.gov.
UaVHSmN/2XebI8mPuW+QB5CjWyhQOoJsREx+HbxY6Ud6lOG3auf+V4Xx
y8Iga+XF6P5TLpPVecBac0zxcObhDezAz3Th8mxRRbaoB0GcjGWqUEQu
ecx+2z7npqyQPLZz8T89ng3+mPs0x2PWPww0H+YAtiB8XYdGzwLM+Uxv
Bv2Ui1EhZdVZrn7BhLZeztbg/YetYOYG8OXWS6FBrcdYaQ6trnmhL9hm
1e5ik3hYWTBo0TSDN7UgdHpGQEvDF5A/f8fHg+MRvZp9RzmXs9/toIm8
TVGm8mcFZPY04AhKU6YE+uzAn4Bfc716qiBebB1XTwrz5XKpvNYEY3i1 2BaXvw==
;; Received 2955 bytes from 152.216.7.164#53(ns1.irs.gov) in 15 ms
$
Regards,
Lee
>
> dig A irs.gov
>
> ; <<>> DiG 9.12.0 <<>> A irs.gov
> ;; global options: +cmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 2101
> ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
>
> ;; OPT PSEUDOSECTION:
> ; EDNS: version: 0, flags:; udp: 4096
> ; COOKIE: 924396a00e82e7e6cb3a18495a6cb893e564a4fc00f78373 (good)
> ;; QUESTION SECTION:
> ;irs.gov. IN A
>
> ;; Query time: 2706 msec
> ;; SERVER: 127.0.0.1#53(127.0.0.1)
> ;; WHEN: Sat Jan 27 09:36:19 PST 2018
> ;; MSG SIZE rcvd: 64
>
> Resolution is fine at offsite servers
>
> dig A irs.gov @8.8.8.8
>
> ; <<>> DiG 9.12.0 <<>> A irs.gov @8.8.8.8
> ;; global options: +cmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 56261
> ;; flags: qr rd ra ad; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
>
> ;; OPT PSEUDOSECTION:
> ; EDNS: version: 0, flags:; udp: 512
> ;; QUESTION SECTION:
> ;irs.gov. IN A
>
> ;; ANSWER SECTION:
> irs.gov. 236 IN A 166.123.218.220
>
> ;; Query time: 43 msec
> ;; SERVER: 8.8.8.8#53(8.8.8.8)
> ;; WHEN: Sat Jan 27 09:36:29 PST 2018
> ;; MSG SIZE rcvd: 52
>
> looking at local server trace,
>
> dig +trace irs.gov
>
> ; <<>> DiG 9.12.0 <<>> +trace irs.gov
> ;; global options: +cmd
> . 3328 IN NS a.root-servers.net.
> . 3328 IN NS b.root-servers.net.
> . 3328 IN NS c.root-servers.net.
> . 3328 IN NS d.root-servers.net.
> . 3328 IN NS e.root-servers.net.
> . 3328 IN NS f.root-servers.net.
> . 3328 IN NS g.root-servers.net.
> . 3328 IN NS h.root-servers.net.
> . 3328 IN NS i.root-servers.net.
> . 3328 IN NS j.root-servers.net.
> . 3328 IN NS k.root-servers.net.
> . 3328 IN NS l.root-servers.net.
> . 3328 IN NS m.root-servers.net.
> . 3328 IN RRSIG NS 8 0 518400
> 20180209050000 20180127040000 41824 .
> DkeMZSxEcmxZ78udDb9pw7HxLylmNUJb4utqwV206pQ+ItBvuuJzMnmY
> pboHDZPEn15xUcGTmnAmDfpX1fhoHPYuBiXC3DmO/gwRG1ktl/xRKbjE
> m9E9PDvUmd1F+/FCcexTFsFm0RU/EMiziKIYJL1ttj2+Ozjc/j+ii6I9
> cOVwjH8DE+3XqGjti803qu4Ycr3MQYcPxQiO6NckxoidZM3GxZRkunmr
> mOz5bBDFfOBMbgC4uYGpfVuJ1OysDRzniNuFQXkftIlpFHmgeIi3U/GR
> RoeIuOip9YaJRiUfnK1V8iFaff/70YvPr6PQkpmb8NpayLdfDqQdsK3D 8rJORA==
> ;; Received 565 bytes from 127.0.0.1#53(127.0.0.1) in 1 ms
>
> gov. 172800 IN NS a.gov-servers.net.
> gov. 172800 IN NS b.gov-servers.net.
> gov. 172800 IN NS c.gov-servers.net.
> gov. 172800 IN NS d.gov-servers.net.
> gov. 86400 IN DS 7698 8 1
> 6F109B46A80CEA9613DC86D5A3E065520505AAFE
> gov. 86400 IN DS 7698 8 2
> 6BC949E638442EAD0BDAF0935763C8D003760384FF15EBBD5CE86BB5 559561F0
> gov. 86400 IN RRSIG DS 8 1 86400
> 20180209050000 20180127040000 41824 .
> jqlemnm+YBXTy0W+akzROVZNlZBsvyVnDOyCONEyDiOn4fXWTrFiDdXD
> lvq60ytuyQpaevkMQHC360Z5CIU4GRqODFom0G/v1whZOS140lBiqPVb
> f9xpX29Fx/RjEekGNXMlzXyrzXCtvy2yFQ7jcUYwl/JJ5DFRZerjAAt8
> 7v/CdHrF42E5ocjcSnxMZ1EaUFBMAm549lYRVSOG4h6SSlfos4R/G8GF
> VKXs2JE27/EWXdIw0uMZKU88ExLdY6TVpCNHrrJ29W6CIT5JO59sI8GO
> woML2fwF7+gfM5zbNM5geHdOvAVh0KY1mhCRT8cln5r8maazH4ih+jvV akgTRQ==
> ;; Received 662 bytes from 199.7.83.42#53(l.root-servers.net) in 28 ms
>
> irs.gov. 86400 IN NS ns1.irs.gov.
> irs.gov. 86400 IN NS ns2.irs.gov.
> irs.gov. 86400 IN NS ns3.irs.gov.
> irs.gov. 86400 IN NS ns4.irs.gov.
> irs.gov. 3600 IN DS 29552 8 2
> A9B81C7EDC4E5DBEF97991A812FCE87E82E80BF2330C3FB75C36DBFE 665745A3
> irs.gov. 3600 IN RRSIG DS 8 2 3600 20180203161006
> 20180127161006 21179 gov.
> LNdq0+IpiPLViVoHC/UU4mCtQquIGY/BRMxWWsZ07UbTa6q7ZkVRIvwM
> RRLZz4lUb8pOddpuRqoqcVtbCL9hTfUHexxOsRUGdZOxDpfR5iIgKqcQ
> dTd/R6oyUqM9vbHu5u5S9MSlzN0ZWHcqxiIlpG7UL2TenZcugLkjEwT+ hdE=
> couldn't get address for 'ns1.irs.gov': not found
> couldn't get address for 'ns2.irs.gov': not found
> couldn't get address for 'ns3.irs.gov': not found
> couldn't get address for 'ns4.irs.gov': not found
> dig: couldn't get address for 'ns1.irs.gov': no more
>
> checking
>
> ns1.irs.gov
> ns2.irs.gov
> ns3.irs.gov
> ns4.irs.gov
>
> the issue's the same -- no resolution at the local server, just fine
> offsite.
>
> What's going on here, specific to *irs.gov?
>
> Is it 'them'? Is there something we can remediate at the local server?
> _______________________________________________
> Please visit https://lists.isc.org/mailman/listinfo/bind-users to
> unsubscribe from this list
>
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
>
More information about the bind-users
mailing list