On 3/6/11 12:06 AM, Dan wrote:

I have never seen a dns that gave a partial response as above,
containing both the response header *and* a trailer , that actually
meant that I should fark off because I'm not a valid user. There is a
BIG difference between a lookup failure, such as seen, vs a connection
refused error.

- Dan.


When querying against 205.233.35.3 (which I've configured to not allow recursive queries from the test box, specifically for this test):


============================================
dig @205.233.35.3 www.google.com

; <<>> DiG 9.6.0-APPLE-P2 <<>> @205.233.35.3 www.google.com
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 43413
;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
;; WARNING: recursion requested but not available

;; QUESTION SECTION:
;www.google.com.                        IN      A

;; Query time: 59 msec
;; SERVER: 205.233.35.3#53(205.233.35.3)
;; WHEN: Sun Mar  6 00:44:15 2011
;; MSG SIZE  rcvd: 32
============================================


Like I said, some servers will just drop the queries on the floor. Others, like my powerdns server, in this case, does exactly the same thing that his provider's did for you (and me).

============================================
dig @216.68.4.10 www.google.com

; <<>> DiG 9.6.0-APPLE-P2 <<>> @216.68.4.10 www.google.com
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: REFUSED, id: 19854
;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
;; WARNING: recursion requested but not available

;; QUESTION SECTION:
;www.google.com.                        IN      A

;; Query time: 113 msec
;; SERVER: 216.68.4.10#53(216.68.4.10)
;; WHEN: Sun Mar  6 00:47:46 2011
;; MSG SIZE  rcvd: 32
============================================

Only difference is that mine does SERVFAIL, where this one did REFUSED.

We need him to do the query on a machine on his network, to eliminate us being outside of his provider's network as being the cause.

--
Brielle Bruns
The Summit Open Source Development Group
http://www.sosdg.org    /     http://www.ahbl.org

--
You received this message because you are a member of G-Group, a group for 
those using G3, G4, and G5 desktop Macs - with a particular focus on Power Macs.
The list FAQ is at http://lowendmac.com/lists/g-list.shtml and our netiquette 
guide is at http://www.lowendmac.com/lists/netiquette.shtml
To post to this group, send email to [email protected]
For more options, visit this group at http://groups.google.com/group/g3-5-list

Reply via email to