extranet.aro.army.mil - not resolving

Mark Andrews marka at isc.org
Fri Jun 1 00:29:10 UTC 2018

Well the first thing is that dig +trace is making queries from the machine it is running on and not the name server unless they are one and the same.  The @ns2.service.uci.edu is only used to lookup the root nameservers.  Dig +trace is also not performing DNSSEC validation on the answers.

Dig on a CNAME chain requires the entire lookup chain to complete unless you ask for ANY or CNAME both of which don’t follow the CNAME target as per STD 13.

Named also logs errors it detects. Have you looked at the logs?

Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742              INTERNET: marka at isc.org

More information about the bind-users mailing list