<html><head><base href="x-msg://73/"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><div>Info at the authoritative servers doesn't match the glue records.</div><div><br></div><div>We see this all the time on our recursive resolvers.</div><div><br></div><div>rich-goodsons-computer:~ rgoodson$ dig +norec @ns1.thehartford.com <a href="http://thehartford.com">thehartford.com</a> NS</div><div><br></div><div>; <<>> DiG 9.6.0-APPLE-P2 <<>> +norec @ns1.thehartford.com <a href="http://thehartford.com">thehartford.com</a> NS</div><div>; (1 server found)</div><div>;; global options: +cmd</div><div>;; Got answer:</div><div>;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 43188</div><div>;; flags: qr aa; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 4</div><div><br></div><div>;; QUESTION SECTION:</div><div>;thehartford.com.<span class="Apple-tab-span" style="white-space:pre"> </span>IN<span class="Apple-tab-span" style="white-space:pre"> </span>NS</div><div><br></div><div>;; ANSWER SECTION:</div><div><a href="http://thehartford.com">thehartford.com</a>.<span class="Apple-tab-span" style="white-space:pre"> </span>120<span class="Apple-tab-span" style="white-space:pre"> </span>IN<span class="Apple-tab-span" style="white-space:pre"> </span>NS<span class="Apple-tab-span" style="white-space:pre"> </span><a href="http://hfdns4.thehartford.com">hfdns4.thehartford.com</a>.</div><div><a href="http://thehartford.com">thehartford.com</a>.<span class="Apple-tab-span" style="white-space:pre"> </span>120<span class="Apple-tab-span" style="white-space:pre"> </span>IN<span class="Apple-tab-span" style="white-space:pre"> </span>NS<span class="Apple-tab-span" style="white-space:pre"> </span><a href="http://simns3.thehartford.com">simns3.thehartford.com</a>.</div><div><a href="http://thehartford.com">thehartford.com</a>.<span class="Apple-tab-span" style="white-space:pre"> </span>120<span class="Apple-tab-span" style="white-space:pre"> </span>IN<span class="Apple-tab-span" style="white-space:pre"> </span>NS<span class="Apple-tab-span" style="white-space:pre"> </span><a href="http://simns4.thehartford.com">simns4.thehartford.com</a>.</div><div><a href="http://thehartford.com">thehartford.com</a>.<span class="Apple-tab-span" style="white-space:pre"> </span>120<span class="Apple-tab-span" style="white-space:pre"> </span>IN<span class="Apple-tab-span" style="white-space:pre"> </span>NS<span class="Apple-tab-span" style="white-space:pre"> </span><a href="http://hfdns3.thehartford.com">hfdns3.thehartford.com</a>.</div><div><br></div><div>;; ADDITIONAL SECTION:</div><div><a href="http://hfdns4.thehartford.com">hfdns4.thehartford.com</a>.<span class="Apple-tab-span" style="white-space:pre"> </span>120<span class="Apple-tab-span" style="white-space:pre"> </span>IN<span class="Apple-tab-span" style="white-space:pre"> </span>A<span class="Apple-tab-span" style="white-space:pre"> </span>162.136.188.4</div><div><a href="http://simns3.thehartford.com">simns3.thehartford.com</a>.<span class="Apple-tab-span" style="white-space:pre"> </span>120<span class="Apple-tab-span" style="white-space:pre"> </span>IN<span class="Apple-tab-span" style="white-space:pre"> </span>A<span class="Apple-tab-span" style="white-space:pre"> </span>162.136.190.3</div><div><a href="http://simns4.thehartford.com">simns4.thehartford.com</a>.<span class="Apple-tab-span" style="white-space:pre"> </span>120<span class="Apple-tab-span" style="white-space:pre"> </span>IN<span class="Apple-tab-span" style="white-space:pre"> </span>A<span class="Apple-tab-span" style="white-space:pre"> </span>162.136.190.4</div><div><a href="http://hfdns3.thehartford.com">hfdns3.thehartford.com</a>.<span class="Apple-tab-span" style="white-space:pre"> </span>120<span class="Apple-tab-span" style="white-space:pre"> </span>IN<span class="Apple-tab-span" style="white-space:pre"> </span>A<span class="Apple-tab-span" style="white-space:pre"> </span>162.136.188.3</div><div><br></div><div>;; Query time: 39 msec</div><div>;; SERVER: 162.136.188.1#53(162.136.188.1)</div><div>;; WHEN: Wed Jun 15 08:55:41 2011</div><div>;; MSG SIZE rcvd: 181</div><div><br></div><div>rich-goodsons-computer:~ rgoodson$ dig +norec @f.gtld-servers.net <a href="http://thehartford.com">thehartford.com</a> NS</div><div><br></div><div>; <<>> DiG 9.6.0-APPLE-P2 <<>> +norec @f.gtld-servers.net <a href="http://thehartford.com">thehartford.com</a> NS</div><div>; (1 server found)</div><div>;; global options: +cmd</div><div>;; Got answer:</div><div>;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 3174</div><div>;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 2, ADDITIONAL: 2</div><div><br></div><div>;; QUESTION SECTION:</div><div>;thehartford.com.<span class="Apple-tab-span" style="white-space:pre"> </span>IN<span class="Apple-tab-span" style="white-space:pre"> </span>NS</div><div><br></div><div>;; AUTHORITY SECTION:</div><div><a href="http://thehartford.com">thehartford.com</a>.<span class="Apple-tab-span" style="white-space:pre"> </span>172800<span class="Apple-tab-span" style="white-space:pre"> </span>IN<span class="Apple-tab-span" style="white-space:pre"> </span>NS<span class="Apple-tab-span" style="white-space:pre"> </span><a href="http://ns1.thehartford.com">ns1.thehartford.com</a>.</div><div><a href="http://thehartford.com">thehartford.com</a>.<span class="Apple-tab-span" style="white-space:pre"> </span>172800<span class="Apple-tab-span" style="white-space:pre"> </span>IN<span class="Apple-tab-span" style="white-space:pre"> </span>NS<span class="Apple-tab-span" style="white-space:pre"> </span><a href="http://ns2.thehartford.com">ns2.thehartford.com</a>.</div><div><br></div><div>;; ADDITIONAL SECTION:</div><div><a href="http://ns1.thehartford.com">ns1.thehartford.com</a>.<span class="Apple-tab-span" style="white-space:pre"> </span>172800<span class="Apple-tab-span" style="white-space:pre"> </span>IN<span class="Apple-tab-span" style="white-space:pre"> </span>A<span class="Apple-tab-span" style="white-space:pre"> </span>162.136.188.1</div><div><a href="http://ns2.thehartford.com">ns2.thehartford.com</a>.<span class="Apple-tab-span" style="white-space:pre"> </span>172800<span class="Apple-tab-span" style="white-space:pre"> </span>IN<span class="Apple-tab-span" style="white-space:pre"> </span>A<span class="Apple-tab-span" style="white-space:pre"> </span>162.136.190.1</div><div><br></div><div>;; Query time: 94 msec</div><div>;; SERVER: 192.35.51.30#53(192.35.51.30)</div><div>;; WHEN: Wed Jun 15 08:55:49 2011</div><div>;; MSG SIZE rcvd: 101</div><div><br></div><div><br></div><div><br></div><div><div>On Jun 15, 2011, at 7:28 AM, M. Meadows wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><div class="hmmessage" style="font-size: 10pt; font-family: Tahoma; "><br> <br><div id="SkyDrivePlaceholder">Good morning.</div><div> </div><div>We sent the following email to the dns managers at<span class="Apple-converted-space"> </span><a href="http://thehartford.com">thehartford.com</a><span class="Apple-converted-space"> </span>this morning:</div><div> </div><div><div style="margin-top: 0in; margin-right: 0in; margin-bottom: 0pt; margin-left: 0in; "><o:p><font size="3" face="Calibri">--------------------------------------------------------------------------------- </font></o:p></div><div style="margin-top: 0in; margin-right: 0in; margin-bottom: 0pt; margin-left: 0in; "><font face="Calibri"><font size="3"> Hi. We’re experiencing some issues with address record lookups for<span class="Apple-converted-space"> </span><a href="http://eftc.thehartford.com">eftc.thehartford.com</a>. We’ve got a couple questions about how this address record is set up.<o:p></o:p></font></font></div><div style="margin-top: 0in; margin-right: 0in; margin-bottom: 0pt; margin-left: 0in; "><o:p><font size="3" face="Calibri"> </font></o:p></div><div style="margin-top: 0in; margin-right: 0in; margin-bottom: 0pt; margin-left: 0in; "><font face="Calibri"><font size="3">Question : why does eftc as an address record in the<span class="Apple-converted-space"> </span><a href="http://thehartford.com">thehartford.com</a><span class="Apple-converted-space"> </span>zone file have a 30 second TTL? Seems … very … short. I think most nameservers won’t do less than a minute for an address record. Right?<o:p></o:p></font></font></div><div style="margin-top: 0in; margin-right: 0in; margin-bottom: 0pt; margin-left: 0in; "><o:p><font size="3" face="Calibri"> </font></o:p></div><div style="margin-top: 0in; margin-right: 0in; margin-bottom: 0pt; margin-left: 0in; "><font size="3" face="Calibri">Question : our check of whois indicates that<span class="Apple-converted-space"> </span><a href="http://ns1.thehartford.com">ns1.thehartford.com</a><span class="Apple-converted-space"> </span>and<span class="Apple-converted-space"> </span><a href="http://ns2.thehartford.com">ns2.thehartford.com</a><span class="Apple-converted-space"> </span>are the authoritative nameservers for<span class="Apple-converted-space"> </span><a href="http://thehartford.com">thehartford.com</a>. A dig with a +trace for<span class="Apple-converted-space"> </span><a href="http://eftc.thehartford.com">eftc.thehartford.com</a><span class="Apple-converted-space"> </span>seems to indicate that they are indeed the auth nameservers. It’s interesting, though, that an<span class="Apple-converted-space"> </span></font><a href="http://www.kloth.net/services/nslookup.php%20lookup%20for%20thehartford.com"><font color="#0000ff" size="3" face="Calibri">http://www.kloth.net/services/nslookup.php lookup for thehartford.com</font></a><font face="Calibri"><font size="3"><span class="Apple-converted-space"> </span>query for NS records shows a non-authoritative answer of<span class="Apple-converted-space"> </span><a href="http://hfdns3.thehartford.com">hfdns3.thehartford.com</a>,<span class="Apple-converted-space"> </span><a href="http://hfdns4.thehartford.com">hfdns4.thehartford.com</a>,<span class="Apple-converted-space"> </span><a href="http://simns3.thehartford.com">simns3.thehartford.com</a>,<a href="http://simns3.thehartford.com">simns3.thehartford.com</a><span class="Apple-converted-space"> </span>and<span class="Apple-converted-space"> </span><a href="http://simns4.thehartford.com">simns4.thehartford.com</a>. We’re unsure what’s going on with that.<o:p></o:p></font></font></div><div style="margin-top: 0in; margin-right: 0in; margin-bottom: 0pt; margin-left: 0in; "><o:p><font size="3" face="Calibri"> </font></o:p></div><div style="margin-top: 0in; margin-right: 0in; margin-bottom: 0pt; margin-left: 0in; "><font size="3"><font face="Calibri"> So we have a Microsoft set of DNS servers that seem to get confused<span class="Apple-converted-space"> </span></font><span style="font-family: Wingdings; ">J</span><font face="Calibri"><span class="Apple-converted-space"> </span>by this somehow. Not really clear to us what’s going on with it … but it’s sort of like there’s some negative caching going on for hfdns3, hfdns4, simns3 and simns4 … at some point … where these Microsoft DNS servers think those 4 servers are the authorities for the<span class="Apple-converted-space"> </span><a href="http://thehartford.com">thehartford.com</a><span class="Apple-converted-space"> </span>domain … and those auth nameserver names … can’t be found … resolved. Then for a period … until the Microsoft DNS servers have their cache cleared … they say … NOPE … no such servers out there. Can’t get to hfdns4, hfdns3, simns3 or simns4 at all … so we can’t resolve<a href="http://eftc.thehartford.com">eftc.thehartford.com</a>.<o:p></o:p></font></font></div><div style="margin-top: 0in; margin-right: 0in; margin-bottom: 0pt; margin-left: 0in; "><o:p><font size="3" face="Calibri"> </font></o:p></div><div style="margin-top: 0in; margin-right: 0in; margin-bottom: 0pt; margin-left: 0in; "><font size="3"><font face="Calibri"> Can you help us understand what’s going on?<o:p></o:p></font></font></div><div style="margin-top: 0in; margin-right: 0in; margin-bottom: 0pt; margin-left: 0in; "><o:p><font size="3" face="Calibri"> </font></o:p></div><div style="margin-top: 0in; margin-right: 0in; margin-bottom: 0pt; margin-left: 0in; "><font size="3"><font face="Calibri">Thanks!<o:p></o:p></font></font></div><font size="3"><font face="Calibri"><div style="margin-top: 0in; margin-right: 0in; margin-bottom: 0pt; margin-left: 0in; "><o:p><font size="3" face="Calibri">--------------------------------------------------------------------------------- </font></o:p></div><div style="margin-top: 0in; margin-right: 0in; margin-bottom: 0pt; margin-left: 0in; "><o:p></o:p> </div><div style="margin-top: 0in; margin-right: 0in; margin-bottom: 0pt; margin-left: 0in; "><o:p>So now ... just in case we don't hear back from the dns folks at<span class="Apple-converted-space"> </span><a href="http://thehartford.com">thehartford.com</a><span class="Apple-converted-space"> </span>... I'm wondering if any of the experts on this mailing list can help us understand this?</o:p></div><div style="margin-top: 0in; margin-right: 0in; margin-bottom: 0pt; margin-left: 0in; "><o:p></o:p> </div><div style="margin-top: 0in; margin-right: 0in; margin-bottom: 0pt; margin-left: 0in; "><o:p></o:p> </div></font></font><div style="margin-top: 0in; margin-right: 0in; margin-bottom: 0pt; margin-left: 0in; "><o:p><font size="3" face="Calibri"> </font></o:p></div></div>_______________________________________________<br>bind-users mailing list<br><a href="mailto:bind-users@lists.isc.org">bind-users@lists.isc.org</a><br><a href="https://lists.isc.org/mailman/listinfo/bind-users">https://lists.isc.org/mailman/listinfo/bind-users</a></div></blockquote></div><br></body></html>