Re: Dig ANY gives SERVFAIL / FORMERR

2009-09-29 Thread Stephane Bortzmeyer
On Thu, Sep 24, 2009 at 07:16:35AM +1000, Mark Andrews ma...@isc.org wrote a message of 77 lines which said: It's a pity registries are not required to verify correct operation of the nameservers they are delegating to before accepting the delegation. Some do!

Re: Dig ANY gives SERVFAIL / FORMERR

2009-09-29 Thread Mark Andrews
In message 20090929122845.ga13...@nic.fr, Stephane Bortzmeyer writes: On Thu, Sep 24, 2009 at 07:16:35AM +1000, Mark Andrews ma...@isc.org wrote a message of 77 lines which said: It's a pity registries are not required to verify correct operation of the nameservers they are delegating

Re: Dig ANY gives SERVFAIL / FORMERR

2009-09-29 Thread Paul Wouters
On Wed, 30 Sep 2009, Mark Andrews wrote: http://www.afnic.fr/outils/zonecheck/_en The key word is required. I know some do, I just wish more did. I for one, welcome our new named-checkzone overlords. (especially if named-checkzone would fail to OK a zone with NSEC3RSASHA1 keys and re-used

Re: Dig ANY gives SERVFAIL / FORMERR

2009-09-29 Thread Mark Andrews
In message alpine.lfd.1.10.0909291125070.11...@newtla.xelerance.com, Paul Wou ters writes: On Wed, 30 Sep 2009, Mark Andrews wrote: http://www.afnic.fr/outils/zonecheck/_en The key word is required. I know some do, I just wish more did. I for one, welcome our new named-checkzone

Dig ANY gives SERVFAIL / FORMERR

2009-09-23 Thread Patrick Yu
Hi, I operate a caching naming server version 9.5.0-P1 for a small work group that includes an email server. From the server log file, there are occasional DNS error messages. Upon closer examination using a packet sniffer, the email server sends out queries of type ANY for all sender/recipient

Re: Dig ANY gives SERVFAIL / FORMERR

2009-09-23 Thread Jeremy C. Reed
It looks like that the authoritative name server for youbei.cc actually did return some answers, but somehow bind gave a FORMERR for some unknown reasons, which I think it caused a SERVFAIL to be reported in turn. Interestingly, dig any youbei.cc +trace ran successfully and did not report any

Re: Dig ANY gives SERVFAIL / FORMERR

2009-09-23 Thread Mark Andrews
In message alpine.neb.2.01.0909231442321@t1.m.reedmedia.net, Jeremy C. Re ed writes: It looks like that the authoritative name server for youbei.cc actually did return some answers, but somehow bind gave a FORMERR for some unknown reasons, which I think it caused a SERVFAIL to be