<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META content="text/html; charset=iso-8859-1" http-equiv=Content-Type>
<META name=GENERATOR content="MSHTML 8.00.6001.19019">
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT size=2 face=Arial>Ryan,</FONT></DIV>
<DIV><FONT size=2 face=Arial></FONT> </DIV>
<DIV><FONT size=2 face=Arial>Have you solved your problem? I have similar
problems. I run BIND 9.6..1-P3 on my Solaris 10 and can not resolve anything in
domain nyc.gov. One thing I noticed is: BIND 9.3 send query to
b.gov-servers.net with no Additional records and got a response
with A records for the nyc.gov NS servers in the Additional records;
but BIND 9.6 send query with type OPT Additional records and got a response with
also a type OPT but no A in the Additional records. So the BIND 9.6 can
not find the IP addresses of the nyc.gov NS servers and therefore can not
resolve anything in that domain. Using options "<FONT
size=3>max-udp-size 512" and "edns-udp-size 512" does not
solve the problem.</FONT></FONT></DIV>
<DIV><FONT face=Arial></FONT> </DIV>
<DIV><FONT face=Arial>The following are the what I captured. Anyone have
any suggestions to solve the
problem? </FONT></DIV>
<DIV><FONT face=Arial></FONT> </DIV>
<DIV><FONT face=Arial>Shaoquan Lin</FONT></DIV>
<DIV><FONT face=Arial></FONT> </DIV>
<DIV><FONT face=Arial>BIND 9.3 query:</FONT></DIV>
<DIV><FONT size=2 face=Arial><SPAN lang=EN>
<P>Domain Name System (query)</P>
<P>Transaction ID: 0x94ca</P>
<P>Flags: 0x0000 (Standard query)</P>
<P>0... .... .... .... = Response: Message is a query</P>
<P>.000 0... .... .... = Opcode: Standard query (0)</P>
<P>.... ..0. .... .... = Truncated: Message is not truncated</P>
<P>.... ...0 .... .... = Recursion desired: Don't do query recursively</P>
<P>.... .... .0.. .... = Z: reserved (0)</P>
<P>.... .... ...0 .... = Non-authenticated data OK: Non-authenticated data is
unacceptable</P>
<P>Questions: 1</P>
<P>Answer RRs: 0</P>
<P>Authority RRs: 0</P>
<P>Additional RRs: 0</P>
<P>Queries</P>
<P>vwall4a.nyc.gov: type A, class IN</P>
<P>Name: vwall4a.nyc.gov</P>
<P>Type: A (Host address)</P>
<P>Class: IN (0x0001)</P>
<P>BIND 9.3 response:</P><SPAN lang=EN>
<P>Domain Name System (response)</P>
<P>Transaction ID: 0x94ca</P>
<P>Flags: 0x8000 (Standard query response, No error)</P>
<P>1... .... .... .... = Response: Message is a response</P>
<P>.000 0... .... .... = Opcode: Standard query (0)</P>
<P>.... .0.. .... .... = Authoritative: Server is not an authority for
domain</P>
<P>.... ..0. .... .... = Truncated: Message is not truncated</P>
<P>.... ...0 .... .... = Recursion desired: Don't do query recursively</P>
<P>.... .... 0... .... = Recursion available: Server can't do recursive
queries</P>
<P>.... .... .0.. .... = Z: reserved (0)</P>
<P>.... .... ..0. .... = Answer authenticated: Answer/authority portion was not
authenticated by the server</P>
<P>.... .... .... 0000 = Reply code: No error (0)</P>
<P>Questions: 1</P>
<P>Answer RRs: 0</P>
<P>Authority RRs: 4</P>
<P>Additional RRs: 4</P>
<P>Queries</P>
<P>vwall4a.nyc.gov: type A, class IN</P>
<P>Name: vwall4a.nyc.gov</P>
<P>Type: A (Host address)</P>
<P>Class: IN (0x0001)</P>
<P>Authoritative nameservers</P>
<P>nyc.gov: type NS, class IN, ns vwall1a.nyc.gov</P>
<P>Name: nyc.gov</P>
<P>Type: NS (Authoritative name server)</P>
<P>Class: IN (0x0001)</P>
<P>Time to live: 1 day</P>
<P>Data length: 10</P>
<P>Name server: vwall1a.nyc.gov</P>
<P>nyc.gov: type NS, class IN, ns vwall2a.nyc.gov</P>
<P>Name: nyc.gov</P>
<P>Type: NS (Authoritative name server)</P>
<P>Class: IN (0x0001)</P>
<P>Time to live: 1 day</P>
<P>Data length: 10</P>
<P>Name server: vwall2a.nyc.gov</P>
<P>nyc.gov: type NS, class IN, ns vwall3a.nyc.gov</P>
<P>Name: nyc.gov</P>
<P>Type: NS (Authoritative name server)</P>
<P>Class: IN (0x0001)</P>
<P>Time to live: 1 day</P>
<P>Data length: 10</P>
<P>Name server: vwall3a.nyc.gov</P>
<P>nyc.gov: type NS, class IN, ns vwall4a.nyc.gov</P>
<P>Name: nyc.gov</P>
<P>Type: NS (Authoritative name server)</P>
<P>Class: IN (0x0001)</P>
<P>Time to live: 1 day</P>
<P>Data length: 10</P>
<P>Name server: vwall4a.nyc.gov</P>
<P>Additional records</P>
<P>vwall1a.nyc.gov: type A, class IN, addr 161.185.1.3</P>
<P>Name: vwall1a.nyc.gov</P>
<P>Type: A (Host address)</P>
<P>Class: IN (0x0001)</P>
<P>Time to live: 1 day</P>
<P>Data length: 4</P>
<P>Addr: 161.185.1.3</P>
<P>vwall2a.nyc.gov: type A, class IN, addr 161.185.1.12</P>
<P>Name: vwall2a.nyc.gov</P>
<P>Type: A (Host address)</P>
<P>Class: IN (0x0001)</P>
<P>Time to live: 1 day</P>
<P>Data length: 4</P>
<P>Addr: 161.185.1.12</P>
<P>vwall3a.nyc.gov: type A, class IN, addr 167.153.130.12</P>
<P>Name: vwall3a.nyc.gov</P>
<P>Type: A (Host address)</P>
<P>Class: IN (0x0001)</P>
<P>Time to live: 1 day</P>
<P>Data length: 4</P>
<P>Addr: 167.153.130.12</P>
<P>vwall4a.nyc.gov: type A, class IN, addr 167.153.130.13</P>
<P>Name: vwall4a.nyc.gov</P>
<P>Type: A (Host address)</P>
<P>Class: IN (0x0001)</P>
<P>Time to live: 1 day</P>
<P>Data length: 4</P>
<P>Addr: 167.153.130.13</P></SPAN></SPAN></FONT></DIV>
<DIV><FONT size=2 face=Arial>BIND 9.6 query:</FONT></DIV>
<DIV> </DIV>
<DIV><SPAN lang=EN>
<P>Domain Name System (query)</P>
<P>Transaction ID: 0x6427</P>
<P>Flags: 0x0000 (Standard query)</P>
<P>0... .... .... .... = Response: Message is a query</P>
<P>.000 0... .... .... = Opcode: Standard query (0)</P>
<P>.... ..0. .... .... = Truncated: Message is not truncated</P>
<P>.... ...0 .... .... = Recursion desired: Don't do query recursively</P>
<P>.... .... .0.. .... = Z: reserved (0)</P>
<P>.... .... ...0 .... = Non-authenticated data OK: Non-authenticated data is
unacceptable</P>
<P>Questions: 1</P>
<P>Answer RRs: 0</P>
<P>Authority RRs: 0</P>
<P>Additional RRs: 1</P>
<P>Queries</P>
<P>vwall4a.nyc.gov: type A, class IN</P>
<P>Name: vwall4a.nyc.gov</P>
<P>Type: A (Host address)</P>
<P>Class: IN (0x0001)</P>
<P>Additional records</P>
<P><Root>: type OPT</P>
<P>Name: <Root></P>
<P>Type: OPT (EDNS0 option)</P>
<P>UDP payload size: 512</P>
<P>Higher bits in extended RCODE: 0x0</P>
<P>EDNS0 version: 0</P>
<P>Z: 0x8000</P>
<P>Bit 0 (DO bit): 1 (Accepts DNSSEC security RRs)</P>
<P>Bits 1-15: 0x0 (reserved)</P>
<P>Data length: 0</P>
<P>BIND 9.6 response:</P><SPAN lang=EN>
<P>Domain Name System (response)</P>
<P>Transaction ID: 0x6427</P>
<P>Flags: 0x8000 (Standard query response, No error)</P>
<P>1... .... .... .... = Response: Message is a response</P>
<P>.000 0... .... .... = Opcode: Standard query (0)</P>
<P>.... .0.. .... .... = Authoritative: Server is not an authority for
domain</P>
<P>.... ..0. .... .... = Truncated: Message is not truncated</P>
<P>.... ...0 .... .... = Recursion desired: Don't do query recursively</P>
<P>.... .... 0... .... = Recursion available: Server can't do recursive
queries</P>
<P>.... .... .0.. .... = Z: reserved (0)</P>
<P>.... .... ..0. .... = Answer authenticated: Answer/authority portion was not
authenticated by the server</P>
<P>.... .... .... 0000 = Reply code: No error (0)</P>
<P>Questions: 1</P>
<P>Answer RRs: 0</P>
<P>Authority RRs: 6</P>
<P>Additional RRs: 1</P>
<P>Queries</P>
<P>vwall4a.nyc.gov: type A, class IN</P>
<P>Name: vwall4a.nyc.gov</P>
<P>Type: A (Host address)</P>
<P>Class: IN (0x0001)</P>
<P>Authoritative nameservers</P>
<P>nyc.gov: type NS, class IN, ns vwall1a.nyc.gov</P>
<P>Name: nyc.gov</P>
<P>Type: NS (Authoritative name server)</P>
<P>Class: IN (0x0001)</P>
<P>Time to live: 1 day</P>
<P>Data length: 10</P>
<P>Name server: vwall1a.nyc.gov</P>
<P>nyc.gov: type NS, class IN, ns vwall2a.nyc.gov</P>
<P>Name: nyc.gov</P>
<P>Type: NS (Authoritative name server)</P>
<P>Class: IN (0x0001)</P>
<P>Time to live: 1 day</P>
<P>Data length: 10</P>
<P>Name server: vwall2a.nyc.gov</P>
<P>nyc.gov: type NS, class IN, ns vwall3a.nyc.gov</P>
<P>Name: nyc.gov</P>
<P>Type: NS (Authoritative name server)</P>
<P>Class: IN (0x0001)</P>
<P>Time to live: 1 day</P>
<P>Data length: 10</P>
<P>Name server: vwall3a.nyc.gov</P>
<P>nyc.gov: type NS, class IN, ns vwall4a.nyc.gov</P>
<P>Name: nyc.gov</P>
<P>Type: NS (Authoritative name server)</P>
<P>Class: IN (0x0001)</P>
<P>Time to live: 1 day</P>
<P>Data length: 10</P>
<P>Name server: vwall4a.nyc.gov</P>
<P>rq2651faaj4nen6tfis8ju5005qccn8j.gov: type Unknown (50), class IN</P>
<P>Name: rq2651faaj4nen6tfis8ju5005qccn8j.gov</P>
<P>Type: Unknown (50)</P>
<P>Class: IN (0x0001)</P>
<P>Time to live: 1 day</P>
<P>Data length: 35</P>
<P>Data</P>
<P>rq2651faaj4nen6tfis8ju5005qccn8j.gov: type RRSIG, class IN</P>
<P>Name: rq2651faaj4nen6tfis8ju5005qccn8j.gov</P>
<P>Type: RRSIG (RR signature)</P>
<P>Class: IN (0x0001)</P>
<P>Time to live: 1 day</P>
<P>Data length: 279</P>
<P>Type covered: Unknown (50)</P>
<P>Algorithm: Unknown (0x07)</P>
<P>Labels: 2</P>
<P>Original TTL: 1 day</P>
<P>Signature expiration: Feb 22, 2011 05:00:22.000000000</P>
<P>Time signed: Feb 17, 2011 05:00:22.000000000</P>
<P>Id of signing key(footprint): 47602</P>
<P>Signer's name: gov</P>
<P>Signature</P>
<P>Additional records</P>
<P><Root>: type OPT</P>
<P>Name: <Root></P>
<P>Type: OPT (EDNS0 option)</P>
<P>UDP payload size: 1472</P>
<P>Higher bits in extended RCODE: 0x0</P>
<P>EDNS0 version: 0</P>
<P>Z: 0x0</P>
<P>Data length: 0</P></SPAN></SPAN></DIV></BODY></HTML>