In message <20100220192646.gb14...@fantomas.sk>, Matus UHLAR - fantomas writes: > > Marco Davids (SIDN) wrote: > > > > > Anyone any clue? I am trying to understand why some resolvers handle > > > this query well, while BIND 9.7.x returns a SERVFAIL. > > On 19.02.10 13:21, Alan Clegg wrote: > > acl...@yellow:~$ dig +short airfrance.fr ns > > webaf1.airfrance.fr. > > lasvegas.airfrance.fr. > > proof.rain.fr. > > > > acl...@yellow:~$ dig +short @webaf1.airfrance.fr. www.airfrance.fr > > acl...@yellow:~$ dig +short @lasvegas.airfrance.fr. www.airfrance.fr > > acl...@yellow:~$ dig +short @proof.rain.fr. www.airfrance.fr > > > > All three of these servers, however, provide NS responses: > > > > www.airfrance.fr. 87600 IN NS ns2isp2.airfrance.fr. > > www.airfrance.fr. 87600 IN NS ns2isp1.airfrance.fr. > > > > That's not right... all three of the servers are "lame" (as you noted > > from your logfile). > > > > airfrance.fr needs to fix their delegations. > > like other domains I have seen before, they delegated the "www.airfrance.fr" > record to broken nameservers that can not return proper answers for ANY or > NS requests. ryanair.com is one of those, ccs.cz/ccs.sk are another. > > I have no idea what kind of nameservers are they, but they're either broken o > r > their admins do not know how to properly configure zone delegation. > No, NS delegations ni parent zones are NOT enough.
Yet another misconfigured load balancer. When will DNS admins learn that the net has not been just A queries and you actually need to test that the load balancer can answer queries other that A queries. Mark ; <<>> DiG 9.3.6-P1 <<>> www.airfrance.fr @ns2isp2.airfrance.fr +norec +dnssec ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 56821 ;; flags: qr aa; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 2048 ;; QUESTION SECTION: ;www.airfrance.fr. IN A ;; ANSWER SECTION: www.airfrance.fr. 60 IN A 193.57.244.36 ;; Query time: 351 msec ;; SERVER: 193.57.219.253#53(193.57.219.253) ;; WHEN: Sun Feb 21 09:46:07 2010 ;; MSG SIZE rcvd: 61 ; <<>> DiG 9.3.6-P1 <<>> www.airfrance.fr @ns2isp2.airfrance.fr +norec +dnssec aaaa ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 48998 ;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 13, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags: do; udp: 4096 ;; QUESTION SECTION: ;www.airfrance.fr. IN AAAA ;; AUTHORITY SECTION: . 518400 IN NS G.ROOT-SERVERS.NET. . 518400 IN NS H.ROOT-SERVERS.NET. . 518400 IN NS I.ROOT-SERVERS.NET. . 518400 IN NS J.ROOT-SERVERS.NET. . 518400 IN NS K.ROOT-SERVERS.NET. . 518400 IN NS L.ROOT-SERVERS.NET. . 518400 IN NS M.ROOT-SERVERS.NET. . 518400 IN NS A.ROOT-SERVERS.NET. . 518400 IN NS B.ROOT-SERVERS.NET. . 518400 IN NS C.ROOT-SERVERS.NET. . 518400 IN NS D.ROOT-SERVERS.NET. . 518400 IN NS E.ROOT-SERVERS.NET. . 518400 IN NS F.ROOT-SERVERS.NET. ;; Query time: 353 msec ;; SERVER: 193.57.219.253#53(193.57.219.253) ;; WHEN: Sun Feb 21 09:46:12 2010 ;; MSG SIZE rcvd: 256 > -- > Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ > Warning: I wish NOT to receive e-mail advertising to this address. > Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. > Spam = (S)tupid (P)eople's (A)dvertising (M)ethod > _______________________________________________ > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org _______________________________________________ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
