bind v6 record

Mark Andrews marka at isc.org
Tue Sep 15 05:39:10 UTC 2020


So have the AAAA records been added to both instances of the zone?

Have you told one view to filter AAAA records?  Look in named.conf.

        filter-aaaa { <address_match_element>; ... };
        filter-aaaa-on-v4 ( break-dnssec | <boolean> );
	filter-aaaa-on-v6 ( break-dnssec | <boolean> );

filter-aaaa support is compiled out by default.

Mark

> On 15 Sep 2020, at 14:01, Nyamkhand Buluukhuu <nyamkhand at mobicom.mn> wrote:
> 
> Hello,
> 
> I have internal and external views of mobinet.mn.
> And as I can see, serial became different when signed. Look below:
> 
> 15-Sep-2020 11:56:03.624 general: info: zone mobinet.mn/IN/external (unsigned): loaded serial 2020080310
> 15-Sep-2020 11:56:03.627 general: info: zone mobinet.mn/IN/external (signed): loaded serial 2020080364 (DNSSEC signed)
> 
> 15-Sep-2020 11:56:03.578 general: info: zone mobinet.mn/IN/internal (unsigned): loaded serial 2020080310
> 15-Sep-2020 11:56:03.587 general: info: zone mobinet.mn/IN/internal (signed): loaded serial 2020080310 (DNSSEC signed)
> 
> It has anything to do with IPv6 records. I can't query PTR and some other records too
> 
> Have a nice day :)
> BR, NYAMKHAND Buluukhuu
>  
> Engineer
> TPD/ETSD
> UNESCO street - 28, MPM Complex
> Ulaanbaatar -14220, Mongolia
> Mobile:   (976) 94081017
> Web:       www.mobicom.mn
>  
> Before you start - Be safety smart
>  
> <Outlook-lyjualhh.png>
> 
> From: Mark Andrews <marka at isc.org>
> Sent: Tuesday, September 15, 2020 9:09 AM
> To: Nyamkhand Buluukhuu <nyamkhand at mobicom.mn>
> Cc: bind-users at lists.isc.org <bind-users at lists.isc.org>
> Subject: Re: bind v6 record
>  
> Look at the serial numbers in the answer below (2020080309) and the one I reported being available publicly ( 2020080363).  Wherever you are getting the contents of mobinet.mn from it is out-of-date.  You have the necessary tools and information to figure out where the problem is.  Just work the problem logically.  If you are in sync with your upstream, where is your upstream getting its copy of the zone from?
> 
> > On 15 Sep 2020, at 10:47, Nyamkhand Buluukhuu <nyamkhand at mobicom.mn> wrote:
> > 
> > Hi,
> > 
> > I've updated the zone and it looks like isn't the reason.
> > 
> > 
> > [root at mdns ~]# dig mobinet.mn @2407:6400:0:400::12 AAAA
> > 
> > ; <<>> DiG 9.11.19 <<>> mobinet.mn @2407:6400:0:400::12 AAAA
> > ;; global options: +cmd
> > ;; Got answer:
> > ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 61375
> > ;; flags: qr aa rd; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
> > ;; WARNING: recursion requested but not available
> > 
> > ;; OPT PSEUDOSECTION:
> > ; EDNS: version: 0, flags:; udp: 4096
> > ; COOKIE: d3f19a6790ccacf86751427c5f600e421fb3ca5191f8d954 (good)
> > ;; QUESTION SECTION:
> > ;mobinet.mn. IN AAAA
> > 
> > ;; AUTHORITY SECTION:
> > mobinet.mn. 3600 IN SOA mdns.mobinet.mn. administrator.mobinet.mn. 2020080309 10800 3600 1209600 38400
> > 
> > ;; Query time: 1 msec
> > ;; SERVER: 2407:6400:0:400::12#53(2407:6400:0:400::12)
> > ;; WHEN: Tue Sep 15 08:43:46 +08 2020
> > ;; MSG SIZE  rcvd: 122
> > 
> > 
> > 
> > 
> > Have a nice day :)
> > BR, NYAMKHAND Buluukhuu
> >  
> > Engineer
> > TPD/ETSD
> > UNESCO street - 28, MPM Complex
> > Ulaanbaatar -14220, Mongolia
> > Mobile:   (976) 94081017
> > Web:       https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fprotect2.fireeye.com%2Fv1%2Furl%3Fk%3D207bc64e-7ee5c56d-207cff91-86aa398f0cb5-87bbde4da6478cc5%26q%3D1%26e%3Dccc340b7-93dc-46d2-b88a-eaa2f70a7766%26u%3Dhttp%253A%252F%252Fwww.mobicom.mn%252F&data=02%7C01%7Cnyamkhand%40mobicom.mn%7Ca7f1650dbf784dc59b7408d859141819%7Cca63e6528b2e4e0e8b691fd46774bdeb%7C1%7C0%7C637357290146281627&sdata=SgzoTmerqkeUewwlOw5gq6SNTRkWhRt2JU5QY2PuQ3o%3D&reserved=0
> >  
> > Before you start - Be safety smart
> >  
> > <Outlook-srxscytr.png>
> > 
> > From: Mark Andrews <marka at isc.org>
> > Sent: Tuesday, September 15, 2020 8:37 AM
> > To: Nyamkhand Buluukhuu <nyamkhand at mobicom.mn>
> > Cc: bind-users at lists.isc.org <bind-users at lists.isc.org>
> > Subject: Re: bind v6 record
> >  
> > You have a out-of-date local copy of the zone.
> > 
> > Look for ‘zone “mobinet.mn” {‘ in named.conf in 2407:6400:0:400::12.
> > 
> > 
> > Mark
> > 
> > > On 15 Sep 2020, at 10:31, Nyamkhand Buluukhuu <nyamkhand at mobicom.mn> wrote:
> > > 
> > > 
> > > Ah, I see,
> > > the cache on the resolver is out of date?
> > > I restarted the named but it's still the same.
> > > 
> > > I restarted named on authoritative /mdns.mobinet.mn/ too.
> > > 
> > > Have a nice day :)
> > > BR, NYAMKHAND Buluukhuu
> > >  
> > > Engineer
> > > TPD/ETSD
> > > UNESCO street - 28, MPM Complex
> > > Ulaanbaatar -14220, Mongolia
> > > Mobile:   (976) 94081017
> > > Web:       https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fprotect2.fireeye.com%2Fv1%2Furl%3Fk%3D3fbf8990-61218ab3-3fb8b04f-86aa398f0cb5-052f8c9100fb9fa9%26q%3D1%26e%3Dccc340b7-93dc-46d2-b88a-eaa2f70a7766%26u%3Dhttps%253A%252F%252Fapc01.safelinks.protection.outlook.com%252F%253Furl%253Dhttps%25253A%25252F%25252Fprotect2.fireeye.com%25252Fv1%25252Furl%25253Fk%25253Dbd3b3a73-e3a3b728-bd3c03ac-86712524712d-5f828f2831ac9e2c%252526q%25253D1%252526e%25253Dc30e2080-8aa3-451b-a73d-c0f0df178779%252526u%25253Dhttp%2525253A%2525252F%2525252Fwww.mobicom.mn%2525252F%2526amp%253Bdata%253D02%25257C01%25257Cnyamkhand%252540mobicom.mn%25257C5c59b511438140b09fec08d8590fdf2c%25257Cca63e6528b2e4e0e8b691fd46774bdeb%25257C1%25257C0%25257C637357272008808425%2526amp%253Bsdata%253D%25252FSYpr%25252BK7kdpjwxI73ta6xZgPJBDynr%25252FiFmi%25252BLooMSc0%25253D%2526amp%253Breserved%253D0&data=02%7C01%7Cnyamkhand%40mobicom.mn%7Ca7f1650dbf784dc59b7408d859141819%7Cca63e6528b2e4e0e8b691fd46774bdeb%7C1%7C0%7C637357290146281627&sdata=m2HCihGut7%2FdZF28yqVhk0cNmcpodV3HmKMv0ueWH0E%3D&reserved=0
> > >  
> > > Before you start - Be safety smart
> > >  
> > > <Outlook-avyx2ajz.png>
> > > 
> > > From: Mark Andrews <marka at isc.org>
> > > Sent: Monday, September 14, 2020 5:22 PM
> > > To: Nyamkhand Buluukhuu <nyamkhand at mobicom.mn>
> > > Cc: bind-users at lists.isc.org <bind-users at lists.isc.org>
> > > Subject: Re: bind v6 record
> > >  
> > > You have a out-of-date local copy of the zone.
> > > 
> > > The zone’s contents publicly available have a serial of 2020080363.  Your copy of the zone has a serial of 2020042290.
> > > 
> > > mobinet.mn.             3600    IN      SOA     mdns.mobinet.mn. administrator.mobinet.mn. 2020080363 10800 3600 1209600 38400
> > > 
> > > 
> > > > On 14 Sep 2020, at 18:54, Nyamkhand Buluukhuu <nyamkhand at mobicom.mn> wrote:
> > > > 
> > > > Dears,
> > > > 
> > > > What might be the reason of resolver couldn't get the AAAA record of the domain?  /Other records are fine/
> > > > No answer but no error too.
> > > > 
> > > > =================================
> > > > ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 11256
> > > > ;; flags: qr aa rd; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
> > > > ;; WARNING: recursion requested but not available
> > > > 
> > > > ;; QUESTION SECTION:
> > > > ;mobinet.mn.                    IN      AAAA
> > > > 
> > > > ;; AUTHORITY SECTION:
> > > > mobinet.mn.             3600    IN      SOA     mdns.mobinet.mn. administrator.mobinet.mn. 2020042290 10800 3600 1209600 38400
> > > > 
> > > > ;; Query time: 1 msec
> > > > ;; SERVER: 2407:6400:0:400::12#53(2407:6400:0:400::12)
> > > > ;; WHEN: Mon Sep 14 16:48:01 2020
> > > > ;; MSG SIZE  rcvd: 83
> > > > ===================================
> > > > 
> > > > I tried between master and slave authoritative servers, tried from the allowed resolvers. SAME
> > > > 
> > > > BUT, when I use online dig tools and run query from authoritative servers, I get answers.
> > > > Also, when I use OpenDNS, I get answers normally.
> > > > 
> > > > I'm stuck here, any advice is appreciated.
> > > > Thanks :)
> > > > 
> > > > Have a nice day :)
> > > > BR, NYAMKHAND Buluukhuu
> > > >  
> > > > Engineer
> > > > TPD/ETSD
> > > > UNESCO street - 28, MPM Complex
> > > > Ulaanbaatar -14220, Mongolia
> > > > Mobile:   (976) 94081017
> > > > Web:       https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fprotect2.fireeye.com%2Fv1%2Furl%3Fk%3Dcbecd976-9572da55-cbebe0a9-86aa398f0cb5-651db099b8e695e3%26q%3D1%26e%3Dccc340b7-93dc-46d2-b88a-eaa2f70a7766%26u%3Dhttps%253A%252F%252Fapc01.safelinks.protection.outlook.com%252F%253Furl%253Dhttps%25253A%25252F%25252Fprotect2.fireeye.com%25252Fv1%25252Furl%25253Fk%25253Dfac3a5d1-a45b288a-fac49c0e-86712524712d-1622e0230b269617%252526q%25253D1%252526e%25253Dc30e2080-8aa3-451b-a73d-c0f0df178779%252526u%25253Dhttps%2525253A%2525252F%2525252Fapc01.safelinks.protection.outlook.com%2525252F%2525253Furl%2525253Dhttps%252525253A%252525252F%252525252Fprotect2.fireeye.com%252525252Fv1%252525252Furl%252525253Fk%252525253D592547a1-07b27edb-59227e7e-86757b2df0b7-775def2156b0c797%2525252526q%252525253D1%2525252526e%252525253Deef8a575-636f-46cb-bbee-d64381996add%2525252526u%252525253Dhttp%25252525253A%25252525252F%25252525252Fwww.mobicom.mn%25252525252F%25252526amp%2525253Bdata%2525253D02%252525257C01%252525257Cnyamkhand%2525252540mobicom.mn%252525257C659742d03c6943d30e4008d8588fd199%252525257Cca63e6528b2e4e0e8b691fd46774bdeb%252525257C1%252525257C0%252525257C637356722028072013%25252526amp%2525253Bsdata%2525253DqCjjMAPGhEumDClHNZWZ0F9bMLdS4cq5WMyN%252525252FOZ3%252525252B2I%252525253D%25252526amp%2525253Breserved%2525253D0%2526amp%253Bdata%253D02%25257C01%25257Cnyamkhand%252540mobicom.mn%25257C5c59b511438140b09fec08d8590fdf2c%25257Cca63e6528b2e4e0e8b691fd46774bdeb%25257C1%25257C0%25257C637357272008808425%2526amp%253Bsdata%253D86mYXNYrcTAa0byobaKneQ%25252BVX824yaH%25252FihjueA8bDK8%25253D%2526amp%253Breserved%253D0&data=02%7C01%7Cnyamkhand%40mobicom.mn%7Ca7f1650dbf784dc59b7408d859141819%7Cca63e6528b2e4e0e8b691fd46774bdeb%7C1%7C0%7C637357290146291620&sdata=4XbVPjaZJVF98c1UKSOGMsEXZ0GSPI1huwOKp%2FJOPns%3D&reserved=0
> > > >  
> > > > Before you start - Be safety smart
> > > >  
> > > > <Outlook-wy1bstc5.png>
> > > > 
> > > > _______________________________________________
> > > > Please visit https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fprotect2.fireeye.com%2Fv1%2Furl%3Fk%3Dfb22a0f4-a5bca3d7-fb25992b-86aa398f0cb5-005628c1ce59beb8%26q%3D1%26e%3Dccc340b7-93dc-46d2-b88a-eaa2f70a7766%26u%3Dhttps%253A%252F%252Fapc01.safelinks.protection.outlook.com%252F%253Furl%253Dhttps%25253A%25252F%25252Fprotect2.fireeye.com%25252Fv1%25252Furl%25253Fk%25253D2a93444f-740bc914-2a947d90-86712524712d-9f9bb43262cd91d2%252526q%25253D1%252526e%25253Dc30e2080-8aa3-451b-a73d-c0f0df178779%252526u%25253Dhttps%2525253A%2525252F%2525252Fapc01.safelinks.protection.outlook.com%2525252F%2525253Furl%2525253Dhttps%252525253A%252525252F%252525252Fprotect2.fireeye.com%252525252Fv1%252525252Furl%252525253Fk%252525253D9920fa7d-c7b7c307-9927c3a2-86757b2df0b7-fb3bf9a85504a4aa%2525252526q%252525253D1%2525252526e%252525253Deef8a575-636f-46cb-bbee-d64381996add%2525252526u%252525253Dhttps%25252525253A%25252525252F%25252525252Flists.isc.org%25252525252Fmailman%25252525252Flistinfo%25252525252Fbind-users%25252526amp%2525253Bdata%2525253D02%252525257C01%252525257Cnyamkhand%2525252540mobicom.mn%252525257C659742d03c6943d30e4008d8588fd199%252525257Cca63e6528b2e4e0e8b691fd46774bdeb%252525257C1%252525257C0%252525257C637356722028072013%25252526amp%2525253Bsdata%2525253DMKgqqzAJKBvucf94V7spdWtKRQRu9sEIl3y3qigj7aU%252525253D%25252526amp%2525253Breserved%2525253D0%2526amp%253Bdata%253D02%25257C01%25257Cnyamkhand%252540mobicom.mn%25257C5c59b511438140b09fec08d8590fdf2c%25257Cca63e6528b2e4e0e8b691fd46774bdeb%25257C1%25257C0%25257C637357272008808425%2526amp%253Bsdata%253D0IKf0Z0TXSAY%25252BVOn9P4PAj9SONP7zF8odwnw%25252Fk8ZnCQ%25253D%2526amp%253Breserved%253D0&data=02%7C01%7Cnyamkhand%40mobicom.mn%7Ca7f1650dbf784dc59b7408d859141819%7Cca63e6528b2e4e0e8b691fd46774bdeb%7C1%7C0%7C637357290146291620&sdata=knaMGbyzP8ZIWk7YL%2BY2SrzgKb5iEcNmpq5g%2BXYFdlU%3D&reserved=0 to unsubscribe from this list
> > > > 
> > > > ISC funds the development of this software with paid support subscriptions. Contact us athttps://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fprotect2.fireeye.com%2Fv1%2Furl%3Fk%3D35a7e834-6b39eb17-35a0d1eb-86aa398f0cb5-88d4cc7e4c07ac4a%26q%3D1%26e%3Dccc340b7-93dc-46d2-b88a-eaa2f70a7766%26u%3Dhttps%253A%252F%252Fapc01.safelinks.protection.outlook.com%252F%253Furl%253Dhttps%25253A%25252F%25252Fprotect2.fireeye.com%25252Fv1%25252Furl%25253Fk%25253Df7221464-a9ba993f-f7252dbb-86712524712d-031a2d756199f725%252526q%25253D1%252526e%25253Dc30e2080-8aa3-451b-a73d-c0f0df178779%252526u%25253Dhttps%2525253A%2525252F%2525252Fapc01.safelinks.protection.outlook.com%2525252F%2525253Furl%2525253Dhttps%252525253A%252525252F%252525252Fprotect2.fireeye.com%252525252Fv1%252525252Furl%252525253Fk%252525253D87789dbb-d9efa4c1-877fa464-86757b2df0b7-508a53faca6a64d7%2525252526q%252525253D1%2525252526e%252525253Deef8a575-636f-46cb-bbee-d64381996add%2525252526u%252525253Dhttps%25252525253A%25252525252F%25252525252Fwww.isc.org%25252525252Fcontact%25252525252F%25252526amp%2525253Bdata%2525253D02%252525257C01%252525257Cnyamkhand%2525252540mobicom.mn%252525257C659742d03c6943d30e4008d8588fd199%252525257Cca63e6528b2e4e0e8b691fd46774bdeb%252525257C1%252525257C0%252525257C637356722028072013%25252526amp%2525253Bsdata%2525253DT21cTWRpNqL8EOHuaRfMPaCnGU%252525252BlgfcGZS2kpy5UzWI%252525253D%25252526amp%2525253Breserved%2525253D0%2526amp%253Bdata%253D02%25257C01%25257Cnyamkhand%252540mobicom.mn%25257C5c59b511438140b09fec08d8590fdf2c%25257Cca63e6528b2e4e0e8b691fd46774bdeb%25257C1%25257C0%25257C637357272008808425%2526amp%253Bsdata%253DBHX%25252B9hcTJAgjavpmKLaOKiJJGe5CeRSrU0oaE7HCzNA%25253D%2526amp%253Breserved%253D0&data=02%7C01%7Cnyamkhand%40mobicom.mn%7Ca7f1650dbf784dc59b7408d859141819%7Cca63e6528b2e4e0e8b691fd46774bdeb%7C1%7C0%7C637357290146291620&sdata=0JLeCdU05NyzQwOhqIRlw1H5iR1UMndG5cTmYV%2FFWB0%3D&reserved=0 for more information.
> > > > 
> > > > 
> > > > bind-users mailing list
> > > > bind-users at lists.isc.org
> > > > https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fprotect2.fireeye.com%2Fv1%2Furl%3Fk%3Db4d0368d-ea4e35ae-b4d70f52-86aa398f0cb5-9bb55df75dff83ac%26q%3D1%26e%3Dccc340b7-93dc-46d2-b88a-eaa2f70a7766%26u%3Dhttps%253A%252F%252Fapc01.safelinks.protection.outlook.com%252F%253Furl%253Dhttps%25253A%25252F%25252Fprotect2.fireeye.com%25252Fv1%25252Furl%25253Fk%25253D71f6555d-2f6ed806-71f16c82-86712524712d-603bd5e00801b8e1%252526q%25253D1%252526e%25253Dc30e2080-8aa3-451b-a73d-c0f0df178779%252526u%25253Dhttps%2525253A%2525252F%2525252Fapc01.safelinks.protection.outlook.com%2525252F%2525253Furl%2525253Dhttps%252525253A%252525252F%252525252Fprotect2.fireeye.com%252525252Fv1%252525252Furl%252525253Fk%252525253Df4955b61-aa02621b-f49262be-86757b2df0b7-1af1e1f4e8da1b96%2525252526q%252525253D1%2525252526e%252525253Deef8a575-636f-46cb-bbee-d64381996add%2525252526u%252525253Dhttps%25252525253A%25252525252F%25252525252Flists.isc.org%25252525252Fmailman%25252525252Flistinfo%25252525252Fbind-users%25252526amp%2525253Bdata%2525253D02%252525257C01%252525257Cnyamkhand%2525252540mobicom.mn%252525257C659742d03c6943d30e4008d8588fd199%252525257Cca63e6528b2e4e0e8b691fd46774bdeb%252525257C1%252525257C0%252525257C637356722028072013%25252526amp%2525253Bsdata%2525253DEmCGam028Oan8Ucm1Csc4XqiNptAvISUlewxFXM2rac%252525253D%25252526amp%2525253Breserved%2525253D0%2526amp%253Bdata%253D02%25257C01%25257Cnyamkhand%252540mobicom.mn%25257C5c59b511438140b09fec08d8590fdf2c%25257Cca63e6528b2e4e0e8b691fd46774bdeb%25257C1%25257C0%25257C637357272008808425%2526amp%253Bsdata%253Dtz9ZAObRzv4KyTBIg2QBKaWGxHRYN0tQWlXYLlAM3Rs%25253D%2526amp%253Breserved%253D0&data=02%7C01%7Cnyamkhand%40mobicom.mn%7Ca7f1650dbf784dc59b7408d859141819%7Cca63e6528b2e4e0e8b691fd46774bdeb%7C1%7C0%7C637357290146301618&sdata=nNOjtYyaSHNN1M7C9S3JGKO5rjSCoFXUhEyNHo9eDvI%3D&reserved=0
> > > 
> > > -- 
> > > Mark Andrews, ISC
> > > 1 Seymour St., Dundas Valley, NSW 2117, Australia
> > > PHONE: +61 2 9871 4742              INTERNET: marka at isc.org
> > 
> > -- 
> > Mark Andrews, ISC
> > 1 Seymour St., Dundas Valley, NSW 2117, Australia
> > PHONE: +61 2 9871 4742              INTERNET: marka at isc.org
> > 
> 
> -- 
> Mark Andrews, ISC
> 1 Seymour St., Dundas Valley, NSW 2117, Australia
> PHONE: +61 2 9871 4742              INTERNET: marka at isc.org
> 

-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742              INTERNET: marka at isc.org



More information about the bind-users mailing list