<html><head><style type='text/css'>p { margin: 0; }</style></head><body><div style='font-family: Verdana; font-size: 12pt; color: #000000'><meta charset="utf-8"><div><font class="Apple-style-span" face="verdana, helvetica, sans-serif">Bind Users:</font></div><div><font class="Apple-style-span" face="verdana, helvetica, sans-serif"><br></font></div><div><font class="Apple-style-span" face="verdana, helvetica, sans-serif">Wonder if anyone has seen this, and can offer an insight? We've recently installed BIND-9.7.0 onto a server who's configuration under BIND-9.3.6-p1 had been working AOK. It is a pretty simple 'Split View' server - problem is that a DIG request on the 'INTERNAL' view - which does have recursion available - receives no response, while the log transcript indicates something weird is going on.</font></div><div><font class="Apple-style-span" face="verdana, helvetica, sans-serif"><br></font></div><div><font class="Apple-style-span" face="verdana, helvetica, sans-serif">Apparently, our server forwards out the request, receives an apparently(?) correct response, then, in rapid succession:</font></div><div><font class="Apple-style-span" face="verdana, helvetica, sans-serif">noanswer_response</font></div><div><font class="Apple-style-span" face="verdana, helvetica, sans-serif">invalid response</font></div><div><font class="Apple-style-span" face="verdana, helvetica, sans-serif">noanswer_response</font></div><div><font class="Apple-style-span" face="verdana, helvetica, sans-serif">sideways referral</font></div><div><font class="Apple-style-span" face="verdana, helvetica, sans-serif"><br></font></div><div><font class="Apple-style-span" face="verdana, helvetica, sans-serif">Must admit, we've never had to pore over BIND logs this much, so don't know what our next step might be. Any ideas?</font></div><div><font class="Apple-style-span" face="verdana, helvetica, sans-serif"><br></font></div><div><font class="Apple-style-span" face="verdana, helvetica, sans-serif">Many thanks, Lou</font></div><div><font class="Apple-style-span" face="verdana, helvetica, sans-serif"><br></font></div><div><font class="Apple-style-span" face="verdana, helvetica, sans-serif"><br></font></div><div><font class="Apple-style-span" face="verdana, helvetica, sans-serif"><br></font></div><div><font class="Apple-style-span" face="verdana, helvetica, sans-serif">A (profoundly) redacted snip of our log follows below:</font></div><div><font class="Apple-style-span" face="'Courier New', courier, monaco, monospace, sans-serif"><br></font></div><blockquote class="webkit-indent-blockquote" style="margin: 0 0 0 40px; border: none; padding: 0px;"><div><font class="Apple-style-span" face="'Courier New', courier, monaco, monospace, sans-serif">22-Apr-2010 12:06:42.058 general: info: flushing caches in all views succeeded</font></div><div><font class="Apple-style-span" face="'Courier New', courier, monaco, monospace, sans-serif">...</font></div><div><font class="Apple-style-span" face="'Courier New', courier, monaco, monospace, sans-serif">22-Apr-2010 12:06:52.058 client: debug 3: client 192.168.42.10#61339: UDP request</font></div><div><font class="Apple-style-span" face="'Courier New', courier, monaco, monospace, sans-serif">22-Apr-2010 12:06:52.058 client: debug 5: client 192.168.42.10#61339: view INTERNAL: using view 'INTERNAL'</font></div><div><font class="Apple-style-span" face="'Courier New', courier, monaco, monospace, sans-serif">22-Apr-2010 12:06:52.058 security: debug 3: client 192.168.42.10#61339: view INTERNAL: request is not signed</font></div><div><font class="Apple-style-span" face="'Courier New', courier, monaco, monospace, sans-serif">22-Apr-2010 12:06:52.058 security: debug 3: client 192.168.42.10#61339: view INTERNAL: recursion available</font></div><div><font class="Apple-style-span" face="'Courier New', courier, monaco, monospace, sans-serif">...</font></div><div><font class="Apple-style-span" face="'Courier New', courier, monaco, monospace, sans-serif">22-Apr-2010 12:06:52.083 resolver: debug 10: received packet:</font></div><div><font class="Apple-style-span" face="'Courier New', courier, monaco, monospace, sans-serif">;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 60591</font></div><div><font class="Apple-style-span" face="'Courier New', courier, monaco, monospace, sans-serif">;; flags: qr ra ; QUESTION: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 1</font></div><div><font class="Apple-style-span" face="'Courier New', courier, monaco, monospace, sans-serif">;; OPT PSEUDOSECTION:</font></div><div><font class="Apple-style-span" face="'Courier New', courier, monaco, monospace, sans-serif">; EDNS: version: 0, flags: do; udp: 4000</font></div><div><font class="Apple-style-span" face="'Courier New', courier, monaco, monospace, sans-serif">;; QUESTION SECTION:</font></div><div><font class="Apple-style-span" face="'Courier New', courier, monaco, monospace, sans-serif">;ibm.com. IN A</font></div><div><font class="Apple-style-span" face="'Courier New', courier, monaco, monospace, sans-serif"><br></font></div><div><font class="Apple-style-span" face="'Courier New', courier, monaco, monospace, sans-serif">;; ANSWER SECTION:</font></div><div><font class="Apple-style-span" face="'Courier New', courier, monaco, monospace, sans-serif">ibm.com. 21578 IN A 129.42.17.103</font></div><div><font class="Apple-style-span" face="'Courier New', courier, monaco, monospace, sans-serif">ibm.com. 21578 IN A 129.42.18.103</font></div><div><font class="Apple-style-span" face="'Courier New', courier, monaco, monospace, sans-serif">ibm.com. 21578 IN A 129.42.16.103</font></div><div><font class="Apple-style-span" face="'Courier New', courier, monaco, monospace, sans-serif"><br></font></div><div><font class="Apple-style-span" face="'Courier New', courier, monaco, monospace, sans-serif"><br></font></div><div><font class="Apple-style-span" face="'Courier New', courier, monaco, monospace, sans-serif">22-Apr-2010 12:06:52.083 resolver: debug 3: fctx 88ee290(ibm.com/A'): <b>noanswer_response</b></font></div><div><font class="Apple-style-span" face="'Courier New', courier, monaco, monospace, sans-serif">22-Apr-2010 12:06:52.083 resolver: notice: DNS format error from 192.33.4.12#53 resolving ibm.com/A for client 192.168.42.10#61339: <b>invalid response</b></font></div><div><font class="Apple-style-span" face="'Courier New', courier, monaco, monospace, sans-serif">22-Apr-2010 12:06:52.083 resolver: debug 3: fctx 88ee290(ibm.com/A'): cancelquery</font></div><div><font class="Apple-style-span" face="'Courier New', courier, monaco, monospace, sans-serif">22-Apr-2010 12:06:52.083 resolver: debug 3: fctx 88ee290(ibm.com/A'): add_bad</font></div><div><font class="Apple-style-span" face="'Courier New', courier, monaco, monospace, sans-serif">22-Apr-2010 12:06:52.083 lame-servers: info: error (<b>FORMERR</b>) resolving 'ibm.com/A/IN': 192.33.4.12#53</font></div><div><font class="Apple-style-span" face="'Courier New', courier, monaco, monospace, sans-serif">...</font></div><div><font class="Apple-style-span" face="'Courier New', courier, monaco, monospace, sans-serif">;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 12144</font></div><div><font class="Apple-style-span" face="'Courier New', courier, monaco, monospace, sans-serif">;; flags: qr ra ; QUESTION: 1, ANSWER: 13, AUTHORITY: 0, ADDITIONAL: 13</font></div><div><font class="Apple-style-span" face="'Courier New', courier, monaco, monospace, sans-serif">;; QUESTION SECTION:</font></div><div><font class="Apple-style-span" face="'Courier New', courier, monaco, monospace, sans-serif">;. IN NS</font></div><div><font class="Apple-style-span" face="'Courier New', courier, monaco, monospace, sans-serif"><br></font></div><div><font class="Apple-style-span" face="'Courier New', courier, monaco, monospace, sans-serif">;; ANSWER SECTION:</font></div><div><font class="Apple-style-span" face="'Courier New', courier, monaco, monospace, sans-serif">. 72889 IN NS e.root-servers.net.</font></div><div><font class="Apple-style-span" face="'Courier New', courier, monaco, monospace, sans-serif">. 72889 IN NS f.root-servers.net.</font></div><div><font class="Apple-style-span" face="'Courier New', courier, monaco, monospace, sans-serif">...ALL THE ROOT SERVERS</font></div><div><font class="Apple-style-span" face="'Courier New', courier, monaco, monospace, sans-serif"><br></font></div><div><font class="Apple-style-span" face="'Courier New', courier, monaco, monospace, sans-serif"><br></font></div><div><font class="Apple-style-span" face="'Courier New', courier, monaco, monospace, sans-serif">22-Apr-2010 12:06:52.120 resolver: debug 3: fctx 8eeb0e8(./NS'): <b>noanswer_response</b></font></div><div><font class="Apple-style-span" face="'Courier New', courier, monaco, monospace, sans-serif">22-Apr-2010 12:06:52.120 resolver: notice: DNS format error from 192.228.79.201#53 resolving ./NS: <b>sideways</b>referral</font></div></blockquote></div></body></html>