http://www.vip.icann.org/DS?

The http:// and /DS wouldn't be part of DNS name itself so you can't dig for 
that.   You'd have to point a browser (or command line tool like wget or curl) 
to get that web page.

The vip IS part of the DNS name.  Did you try "dig www.vip.icann.org"?   It 
works for me.

Also nmap confirms port 80 is open for the above so http traffic should work 
assuming the web page is up.


-----Original Message-----
From: [email protected] 
[mailto:[email protected]] On Behalf Of Yang Yu
Sent: Tuesday, July 28, 2015 12:10 PM
To: [email protected]
Subject: DNS format error

I spotted DNS format error in bind 9.9.5 log

queries
28-Jul-2015 23:19:27.198 client client_IP #50270 (www.icann.org):
query: www.icann.org IN AAAA + (client_IP)
28-Jul-2015 23:19:29.872 client client_IP #46483 (www.icann.org):
query: www.icann.org IN A + (client_IP)


resolver
28-Jul-2015 23:19:35.621 DNS format error from 192.0.32.252#53 resolving 
www.vip.icann.org/DS: inval id response
28-Jul-2015 23:19:35.789 DNS format error from 192.0.36.252#53 resolving 
www.vip.icann.org/DS: inval id response
28-Jul-2015 23:19:36.022 DNS format error from 192.0.47.252#53 resolving 
www.vip.icann.org/DS: inval id response

I am unable to replicate this issue with dig www.icann.org. What could have 
bind received that resulted in DNS format error in this particular case?

Yang
_______________________________________________
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
[email protected]
https://lists.isc.org/mailman/listinfo/bind-users
_______________________________________________
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
[email protected]
https://lists.isc.org/mailman/listinfo/bind-users

Reply via email to