<div dir="ltr">Ok! Thank you all!<br><br>My router doesn't maintain a DNS cache, so it must be my IPS's fault.<br><br>The last questions, if it's possible: what happens when my 'named' starts an iterative query? Does it arrive to the real root-server (first of all), or is it processed by some other cache-server on the path? And why 'named' doesn't "understand" the responses from these cache-servers?</div>
<div class="gmail_extra"><br><br><div class="gmail_quote">2013/1/18 Mark Andrews <span dir="ltr"><<a href="mailto:marka@isc.org" target="_blank">marka@isc.org</a>></span><br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div class="HOEnZb"><div class="h5"><br>
In message <<a href="mailto:CAL_2sc1sZsTUMPMfCeUqrF87nqWE%2B5N30qVGudS7q-4g6vaLvA@mail.gmail.com">CAL_2sc1sZsTUMPMfCeUqrF87nqWE+5N30qVGudS7q-4g6vaLvA@mail.gmail.com</a>>, Daniele writes:<br>
> These are the outputs. I also attach the file containing them.<br>
><br>
><br>
> ; <<>> DiG 9.8.1-P1 <<>> ns . +norec +noedns @<a href="http://198.41.0.4" target="_blank">198.41.0.4</a><br>
> ;; global options: +cmd<br>
> ;; Got answer:<br>
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 25625<br>
> ;; flags: qr ra; QUERY: 1, ANSWER: 13, AUTHORITY: 0, ADDITIONAL: 14<br>
><br>
> ;; QUESTION SECTION:<br>
> ;. IN NS<br>
><br>
> ;; ANSWER SECTION:<br>
> . 243196 IN NS <a href="http://l.root-servers.net" target="_blank">l.root-servers.net</a>.<br>
> . 243196 IN NS <a href="http://g.root-servers.net" target="_blank">g.root-servers.net</a>.<br>
> . 243196 IN NS <a href="http://k.root-servers.net" target="_blank">k.root-servers.net</a>.<br>
> . 243196 IN NS <a href="http://a.root-servers.net" target="_blank">a.root-servers.net</a>.<br>
> . 243196 IN NS <a href="http://e.root-servers.net" target="_blank">e.root-servers.net</a>.<br>
> . 243196 IN NS <a href="http://d.root-servers.net" target="_blank">d.root-servers.net</a>.<br>
> . 243196 IN NS <a href="http://c.root-servers.net" target="_blank">c.root-servers.net</a>.<br>
> . 243196 IN NS <a href="http://i.root-servers.net" target="_blank">i.root-servers.net</a>.<br>
> . 243196 IN NS <a href="http://f.root-servers.net" target="_blank">f.root-servers.net</a>.<br>
> . 243196 IN NS <a href="http://h.root-servers.net" target="_blank">h.root-servers.net</a>.<br>
> . 243196 IN NS <a href="http://j.root-servers.net" target="_blank">j.root-servers.net</a>.<br>
> . 243196 IN NS <a href="http://b.root-servers.net" target="_blank">b.root-servers.net</a>.<br>
> . 243196 IN NS <a href="http://m.root-servers.net" target="_blank">m.root-servers.net</a>.<br>
><br>
> ;; ADDITIONAL SECTION:<br>
> <a href="http://a.root-servers.net" target="_blank">a.root-servers.net</a>. 502389 IN A 198.41.0.4<br>
> <a href="http://a.root-servers.net" target="_blank">a.root-servers.net</a>. 508720 IN AAAA 2001:503:ba3e::2:30<br>
> <a href="http://b.root-servers.net" target="_blank">b.root-servers.net</a>. 502640 IN A 192.228.79.201<br>
> <a href="http://c.root-servers.net" target="_blank">c.root-servers.net</a>. 502640 IN A 192.33.4.12<br>
> <a href="http://d.root-servers.net" target="_blank">d.root-servers.net</a>. 523851 IN A 199.7.91.13<br>
> <a href="http://e.root-servers.net" target="_blank">e.root-servers.net</a>. 502640 IN A 192.203.230.10<br>
> <a href="http://f.root-servers.net" target="_blank">f.root-servers.net</a>. 581030 IN A 192.5.5.241<br>
> <a href="http://f.root-servers.net" target="_blank">f.root-servers.net</a>. 236384 IN AAAA 2001:500:2f::f<br>
> <a href="http://g.root-servers.net" target="_blank">g.root-servers.net</a>. 502640 IN A 192.112.36.4<br>
> <a href="http://i.root-servers.net" target="_blank">i.root-servers.net</a>. 502640 IN A 192.36.148.17<br>
> <a href="http://i.root-servers.net" target="_blank">i.root-servers.net</a>. 555890 IN AAAA 2001:7fe::53<br>
> <a href="http://j.root-servers.net" target="_blank">j.root-servers.net</a>. 537043 IN A 192.58.128.30<br>
> <a href="http://j.root-servers.net" target="_blank">j.root-servers.net</a>. 236384 IN AAAA 2001:503:c27::2:30<br>
> <a href="http://k.root-servers.net" target="_blank">k.root-servers.net</a>. 502394 IN A 193.0.14.129<br>
><br>
> ;; Query time: 62 msec<br>
> ;; SERVER: 198.41.0.4#53(198.41.0.4)<br>
> ;; WHEN: Fri Jan 18 15:38:42 2013<br>
> ;; MSG SIZE rcvd: 500<br>
<br>
</div></div>Below is what the answer should look like. The TTLs should be these<br>
values shown below (6 days and 1000 hours) and "aa" should be set<br>
in the flags and "ra" should NOT be set in the flags. You have a<br>
"transparent" DNS caching proxy between you and the Internet as a<br>
whole.<br>
<br>
Some routers try to be "helpful" by maintaining a DNS cache. You<br>
need to turn the "feature" off. Otherwise it is your ISP doing it<br>
and you need to get them to stop mucking with your DNS queries.<br>
<br>
Named issues non-recursive queries and sticking a normal recursive<br>
server in the path that pays attention to the setting of "rd" doesn't<br>
result in getting the required answers back.<br>
<br>
Mark<br>
<br>
; <<>> DiG 9.10.0pre-alpha <<>> ns . +norec +noedns @<a href="http://198.41.0.4" target="_blank">198.41.0.4</a><br>
<div class="im">;; global options: +cmd<br>
;; Got answer:<br>
</div>;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 18118<br>
<div class="im">;; flags: qr aa; QUERY: 1, ANSWER: 13, AUTHORITY: 0, ADDITIONAL: 14<br>
<br>
;; QUESTION SECTION:<br>
;. IN NS<br>
<br>
;; ANSWER SECTION:<br>
</div>. 518400 IN NS <a href="http://c.root-servers.net" target="_blank">c.root-servers.net</a>.<br>
. 518400 IN NS <a href="http://m.root-servers.net" target="_blank">m.root-servers.net</a>.<br>
. 518400 IN NS <a href="http://b.root-servers.net" target="_blank">b.root-servers.net</a>.<br>
. 518400 IN NS <a href="http://f.root-servers.net" target="_blank">f.root-servers.net</a>.<br>
. 518400 IN NS <a href="http://j.root-servers.net" target="_blank">j.root-servers.net</a>.<br>
. 518400 IN NS <a href="http://g.root-servers.net" target="_blank">g.root-servers.net</a>.<br>
. 518400 IN NS <a href="http://i.root-servers.net" target="_blank">i.root-servers.net</a>.<br>
. 518400 IN NS <a href="http://h.root-servers.net" target="_blank">h.root-servers.net</a>.<br>
. 518400 IN NS <a href="http://d.root-servers.net" target="_blank">d.root-servers.net</a>.<br>
. 518400 IN NS <a href="http://l.root-servers.net" target="_blank">l.root-servers.net</a>.<br>
. 518400 IN NS <a href="http://a.root-servers.net" target="_blank">a.root-servers.net</a>.<br>
. 518400 IN NS <a href="http://e.root-servers.net" target="_blank">e.root-servers.net</a>.<br>
. 518400 IN NS <a href="http://k.root-servers.net" target="_blank">k.root-servers.net</a>.<br>
<br>
;; ADDITIONAL SECTION:<br>
<a href="http://a.root-servers.net" target="_blank">a.root-servers.net</a>. 3600000 IN A 198.41.0.4<br>
<a href="http://a.root-servers.net" target="_blank">a.root-servers.net</a>. 3600000 IN AAAA 2001:503:ba3e::2:30<br>
<a href="http://b.root-servers.net" target="_blank">b.root-servers.net</a>. 3600000 IN A 192.228.79.201<br>
<a href="http://c.root-servers.net" target="_blank">c.root-servers.net</a>. 3600000 IN A 192.33.4.12<br>
<a href="http://d.root-servers.net" target="_blank">d.root-servers.net</a>. 3600000 IN A 199.7.91.13<br>
<a href="http://d.root-servers.net" target="_blank">d.root-servers.net</a>. 3600000 IN AAAA 2001:500:2d::d<br>
<a href="http://e.root-servers.net" target="_blank">e.root-servers.net</a>. 3600000 IN A 192.203.230.10<br>
<a href="http://f.root-servers.net" target="_blank">f.root-servers.net</a>. 3600000 IN A 192.5.5.241<br>
<a href="http://f.root-servers.net" target="_blank">f.root-servers.net</a>. 3600000 IN AAAA 2001:500:2f::f<br>
<a href="http://g.root-servers.net" target="_blank">g.root-servers.net</a>. 3600000 IN A 192.112.36.4<br>
<a href="http://h.root-servers.net" target="_blank">h.root-servers.net</a>. 3600000 IN A 128.63.2.53<br>
<a href="http://h.root-servers.net" target="_blank">h.root-servers.net</a>. 3600000 IN AAAA 2001:500:1::803f:235<br>
<a href="http://i.root-servers.net" target="_blank">i.root-servers.net</a>. 3600000 IN A 192.36.148.17<br>
<a href="http://i.root-servers.net" target="_blank">i.root-servers.net</a>. 3600000 IN AAAA 2001:7fe::53<br>
<br>
;; Query time: 182 msec<br>
;; SERVER: 198.41.0.4#53(198.41.0.4)<br>
;; WHEN: Sat Jan 19 08:06:22 EST 2013<br>
;; MSG SIZE rcvd: 512<br>
<div class="HOEnZb"><div class="h5"><br>
--<br>
Mark Andrews, ISC<br>
1 Seymour St., Dundas Valley, NSW 2117, Australia<br>
PHONE: <a href="tel:%2B61%202%209871%204742" value="+61298714742">+61 2 9871 4742</a> INTERNET: <a href="mailto:marka@isc.org">marka@isc.org</a><br>
</div></div></blockquote></div><br></div>