odd behavior in bind-8.2.2_P3 (fwd)

[jlewis at lewis.org]

Can anyone suggest what may have lead to one of my caching DNS servers to
do the following:

# dig @localhost www.webmastermatrix.com.

; <<>> DiG 8.2 <<>> @localhost www.webmastermatrix.com.
; (1 server found)
;; res options: init recurs defnam dnsrch
;; got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 6
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUERY SECTION:
;;      www.webmastermatrix.com, type = A, class = IN

;; AUTHORITY SECTION:
com.                    2h12m2s IN SOA  webpower.com.
postmaster.webpower.com. (
                                        175             ; serial
                                        3H              ; refresh
                                        15M             ; retry
                                        1W              ; expiry
                                        1D )            ; minimum

It was spitting out similar cached NXDOMAIN results for a number of other
hosts in other .com domains, but with this same bogus SOA record.  I did a
dumpdb (still have it) and if I'm reading it right, the server really
thought this was the SOA for com.

com     81138   IN      NS      myifriendsns1.webpower.com.     ;Cr=auth
        86312   IN      SOA     webpower.com. postmaster.webpower.com. (
                175 10800 900 604800 86400 )    ;Cr=auth

The only $ORIGIN above this is '$ORIGIN .'.

This is from bind-8.2.2_P3-0.5.2 on a Red Hat 5.2 system with a very
simple caching only setup.

----------------------------------------------------------------------
 Jon Lewis *jlewis at lewis.org*|  I route
 System Administrator        |  therefore you are
 Atlantic Net                |  
_________ http://www.lewis.org/~jlewis/pgp for PGP public key_________