Sprint is authoritative for citravelc.com, and they are putting PTR records in the ctravel.com zone.
correction: Sprint IS authoritative for citravel.com and they are answering for it:
# dig citravel.com. @ns1-auth.sprintlink.net.
; <<>> DiG 9.2.3rc3 <<>> citravel.com. @ns1-auth.sprintlink.net. ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 52238 ;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 3, ADDITIONAL: 3
;; QUESTION SECTION: ;citravel.com. IN A
;; ANSWER SECTION: citravel.com. 86400 IN A 208.34.41.163
;; AUTHORITY SECTION: citravel.com. 86400 IN NS ns1-auth.sprintlink.net. citravel.com. 86400 IN NS ns2-auth.sprintlink.net. citravel.com. 86400 IN NS ns3-auth.sprintlink.net.
, but the are spoofing the auhtority since they are not delegated with citravel.com:
# dig citravel.com. @a.gtld-servers.net any
; <<>> DiG 9.2.3rc3 <<>> citravel.com. @a.gtld-servers.net any ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 49344 ;; flags: qr rd; QUERY: 1, ANSWER: 5, AUTHORITY: 5, ADDITIONAL: 8
;; QUESTION SECTION: ;citravel.com. IN ANY
;; ANSWER SECTION: citravel.com. 172800 IN NS dns1.name-services.com. citravel.com. 172800 IN NS dns2.name-services.com. citravel.com. 172800 IN NS dns3.name-services.com. citravel.com. 172800 IN NS dns4.name-services.com. citravel.com. 172800 IN NS dns5.name-services.com.
and name-services are bot delegated AND authoritative:
# dig citravel.com. @dns1.name-services.com.
; <<>> DiG 9.2.3rc3 <<>> citravel.com. @dns1.name-services.com. ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 4288 ;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 5, ADDITIONAL: 5
;; QUESTION SECTION: ;citravel.com. IN A
;; ANSWER SECTION: citravel.com. 1800 IN A 208.34.41.163
;; AUTHORITY SECTION: citravel.com. 3600 IN NS dns1.name-services.com. citravel.com. 3600 IN NS dns2.name-services.com. citravel.com. 3600 IN NS dns3.name-services.com. citravel.com. 3600 IN NS dns4.name-services.com. citravel.com. 3600 IN NS dns5.name-services.com.
so Sprint is playing games here, spoofing authority for your citravel.com one and putting PTR records in that zone, so it's no wonder that your PTR queries result in funny stuff.
Len
_____________________________________________________________________ http://MenAndMice.com/DNS-training: Wash DC; Dallas; Atlanta IMGate.MEIway.com: anti-spam gateway, effective on 1000's of sites, free
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
