Error "Query section mismatch : got"

Mark Andrews marka at isc.org
Wed Aug 19 14:59:56 UTC 2020



> On 20 Aug 2020, at 00:41, Matus UHLAR - fantomas <uhlar at fantomas.sk> wrote:
> 
>> On Wed, Aug 19, 2020 at 7:42 AM Matus UHLAR - fantomas
>> <uhlar at fantomas.sk> wrote:
>>> again, why you query for 250.0-24.199.212.125.in-addr.arpa
>>> under normal circumstances there's no point of querying that name.
> 
> On 19.08.20 10:05, tale via bind-users wrote:
>> Well yes and no.   While an individual user would typically not,
>> resolvers sure will.  While trying to resolve
>> 250.199.212.125.in-addr.arpa, it will eventually get to
>> 250.199.212.125.in-addr.arpa CNAME 250.0-24.199.212.125.in-addr.arpa.
> 
> my question is why would anyone do this, as this apparently does not make
> sense.

Presumably because they don’t know that APNIC can delegate the /24s that make
up the /17 independently of each other.

> someone (vietel) illogically delegated whole /24 subnet to broken servers:
> 
> 199.212.125.in-addr.arpa. 86400 IN      NS      dns2.vietel.com.vn.
> 199.212.125.in-addr.arpa. 86400 IN      NS      dns1.vietel.com.vn.
> 
> 0.199.212.125.in-addr.arpa has address 125.235.4.59
> 1.199.212.125.in-addr.arpa is an alias for 1.0-24.199.212.125.in-addr.arpa.
> ...
> 255.199.212.125.in-addr.arpa is an alias for 255.0-24.199.212.125.in-addr.arpa.
> 
> 
>> Then it will need to resolve the canonical name, and a response like
>> the original one that was shown will be clearly buggy.
>> 
>> I say "possibly" because from my vantage, all three of
>> ns{,1,2}.viettelidc.com.vn, the authorities for
>> 0-24.199.212.125.in-addr.arpa, are giving fine answers right now (on
>> udp; blocked on tcp).   This includes the originally reported problem
>> IP, 115.84.177.8
> 
> 
> 
> -- 
> Matus UHLAR - fantomas, uhlar at fantomas.sk ; http://www.fantomas.sk/
> Warning: I wish NOT to receive e-mail advertising to this address.
> Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
> Fucking windows! Bring Bill Gates! (Southpark the movie)
> _______________________________________________
> Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list
> 
> ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information.
> 
> 
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users

-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742              INTERNET: marka at isc.org



More information about the bind-users mailing list