Re: bind v6 record

2020-09-15 Thread Nyamkhand Buluukhuu
Hi,

Yeah, on both.
I didn't configure to filter  records, is it necessary?

Have a nice day :)
BR, NYAMKHAND Buluukhuu

Engineer
TPD/ETSD

UNESCO street - 28, MPM Complex

Ulaanbaatar -14220, Mongolia

Mobile:   (976) 94081017
Web:   www.mobicom.mn<http://www.newcom.mn/>

Before you start - Be safety smart

[cid:aa9585fa-21d9-446c-82dc-e3152d932606]



From: Mark Andrews 
Sent: Tuesday, September 15, 2020 1:39 PM
To: Nyamkhand Buluukhuu 
Cc: bind-users@lists.isc.org 
Subject: Re: bind v6 record

So have the  records been added to both instances of the zone?

Have you told one view to filter  records?  Look in named.conf.

filter- { ; ... };
filter--on-v4 ( break-dnssec |  );
filter--on-v6 ( break-dnssec |  );

filter- support is compiled out by default.

Mark

> On 15 Sep 2020, at 14:01, Nyamkhand Buluukhuu  wrote:
>
> Hello,
>
> I have internal and external views of mobinet.mn.
> And as I can see, serial became different when signed. Look below:
>
> 15-Sep-2020 11:56:03.624 general: info: zone mobinet.mn/IN/external 
> (unsigned): loaded serial 2020080310
> 15-Sep-2020 11:56:03.627 general: info: zone mobinet.mn/IN/external (signed): 
> loaded serial 2020080364 (DNSSEC signed)
>
> 15-Sep-2020 11:56:03.578 general: info: zone mobinet.mn/IN/internal 
> (unsigned): loaded serial 2020080310
> 15-Sep-2020 11:56:03.587 general: info: zone mobinet.mn/IN/internal (signed): 
> loaded serial 2020080310 (DNSSEC signed)
>
> It has anything to do with IPv6 records. I can't query PTR and some other 
> records too
>
> Have a nice day :)
> BR, NYAMKHAND Buluukhuu
>
> Engineer
> TPD/ETSD
> UNESCO street - 28, MPM Complex
> Ulaanbaatar -14220, Mongolia
> Mobile:   (976) 94081017
> Web:   
> https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fprotect2.fireeye.com%2Fv1%2Furl%3Fk%3Da57ddba3-fbe3ddbc-a57ae27c-86861b72af13-0a7345b04d5418e9%26q%3D1%26e%3Df0fa3840-828b-4f46-8045-761e222a99fb%26u%3Dhttp%253A%252F%252Fwww.mobicom.mn%252Fdata=02%7C01%7Cnyamkhand%40mobicom.mn%7Cf0de4bd53de94c0df63808d85939ba52%7Cca63e6528b2e4e0e8b691fd46774bdeb%7C1%7C0%7C637357451769948577sdata=E7LwHPyZv%2FADYyVvLFsJ96LCK6YPF7KrMvQ9IRvPWVE%3Dreserved=0
>
> Before you start - Be safety smart
>
> 
>
> From: Mark Andrews 
> Sent: Tuesday, September 15, 2020 9:09 AM
> To: Nyamkhand Buluukhuu 
> Cc: bind-users@lists.isc.org 
> Subject: Re: bind v6 record
>
> Look at the serial numbers in the answer below (2020080309) and the one I 
> reported being available publicly ( 2020080363).  Wherever you are getting 
> the contents of mobinet.mn from it is out-of-date.  You have the necessary 
> tools and information to figure out where the problem is.  Just work the 
> problem logically.  If you are in sync with your upstream, where is your 
> upstream getting its copy of the zone from?
>
> > On 15 Sep 2020, at 10:47, Nyamkhand Buluukhuu  wrote:
> >
> > Hi,
> >
> > I've updated the zone and it looks like isn't the reason.
> >
> >
> > [root@mdns ~]# dig mobinet.mn @2407:6400:0:400::12 
> >
> > ; <<>> DiG 9.11.19 <<>> mobinet.mn @2407:6400:0:400::12 
> > ;; global options: +cmd
> > ;; Got answer:
> > ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 61375
> > ;; flags: qr aa rd; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
> > ;; WARNING: recursion requested but not available
> >
> > ;; OPT PSEUDOSECTION:
> > ; EDNS: version: 0, flags:; udp: 4096
> > ; COOKIE: d3f19a6790ccacf86751427c5f600e421fb3ca5191f8d954 (good)
> > ;; QUESTION SECTION:
> > ;mobinet.mn. IN 
> >
> > ;; AUTHORITY SECTION:
> > mobinet.mn. 3600 IN SOA mdns.mobinet.mn. administrator.mobinet.mn. 
> > 2020080309 10800 3600 1209600 38400
> >
> > ;; Query time: 1 msec
> > ;; SERVER: 2407:6400:0:400::12#53(2407:6400:0:400::12)
> > ;; WHEN: Tue Sep 15 08:43:46 +08 2020
> > ;; MSG SIZE  rcvd: 122
> >
> >
> >
> >
> > Have a nice day :)
> > BR, NYAMKHAND Buluukhuu
> >
> > Engineer
> > TPD/ETSD
> > UNESCO street - 28, MPM Complex
> > Ulaanbaatar -14220, Mongolia
> > Mobile:   (976) 94081017
> > Web:   
> > https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fprotect2.fireeye.com%2Fv1%2Furl%3Fk%3D35b5b580-6b2bb39f-35b28c5f-86861b72af13-f75666fb488c5202%26q%3D1%26e%3Df0fa3840-828b-4f46-8045-761e222a99fb%26u%3Dhttps%253A%252F%252Fapc01.safelinks.protection.outlook.com%252F%253Furl%253Dhttps%25253A%25252F%25252Fprotect2.fireeye.com%25252Fv1%25252Furl%25253Fk%25253D207bc64e-7ee5c56d-207cff91-86aa398f0cb5-87bbde4da6478cc5%252526q

Re: bind v6 record

2020-09-14 Thread Mark Andrews
So have the  records been added to both instances of the zone?

Have you told one view to filter  records?  Look in named.conf.

filter- { ; ... };
filter--on-v4 ( break-dnssec |  );
filter--on-v6 ( break-dnssec |  );

filter- support is compiled out by default.

Mark

> On 15 Sep 2020, at 14:01, Nyamkhand Buluukhuu  wrote:
> 
> Hello,
> 
> I have internal and external views of mobinet.mn.
> And as I can see, serial became different when signed. Look below:
> 
> 15-Sep-2020 11:56:03.624 general: info: zone mobinet.mn/IN/external 
> (unsigned): loaded serial 2020080310
> 15-Sep-2020 11:56:03.627 general: info: zone mobinet.mn/IN/external (signed): 
> loaded serial 2020080364 (DNSSEC signed)
> 
> 15-Sep-2020 11:56:03.578 general: info: zone mobinet.mn/IN/internal 
> (unsigned): loaded serial 2020080310
> 15-Sep-2020 11:56:03.587 general: info: zone mobinet.mn/IN/internal (signed): 
> loaded serial 2020080310 (DNSSEC signed)
> 
> It has anything to do with IPv6 records. I can't query PTR and some other 
> records too
> 
> Have a nice day :)
> BR, NYAMKHAND Buluukhuu
>  
> Engineer
> TPD/ETSD
> UNESCO street - 28, MPM Complex
> Ulaanbaatar -14220, Mongolia
> Mobile:   (976) 94081017
> Web:   www.mobicom.mn
>  
> Before you start - Be safety smart
>  
> 
> 
> From: Mark Andrews 
> Sent: Tuesday, September 15, 2020 9:09 AM
> To: Nyamkhand Buluukhuu 
> Cc: bind-users@lists.isc.org 
> Subject: Re: bind v6 record
>  
> Look at the serial numbers in the answer below (2020080309) and the one I 
> reported being available publicly ( 2020080363).  Wherever you are getting 
> the contents of mobinet.mn from it is out-of-date.  You have the necessary 
> tools and information to figure out where the problem is.  Just work the 
> problem logically.  If you are in sync with your upstream, where is your 
> upstream getting its copy of the zone from?
> 
> > On 15 Sep 2020, at 10:47, Nyamkhand Buluukhuu  wrote:
> > 
> > Hi,
> > 
> > I've updated the zone and it looks like isn't the reason.
> > 
> > 
> > [root@mdns ~]# dig mobinet.mn @2407:6400:0:400::12 
> > 
> > ; <<>> DiG 9.11.19 <<>> mobinet.mn @2407:6400:0:400::12 
> > ;; global options: +cmd
> > ;; Got answer:
> > ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 61375
> > ;; flags: qr aa rd; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
> > ;; WARNING: recursion requested but not available
> > 
> > ;; OPT PSEUDOSECTION:
> > ; EDNS: version: 0, flags:; udp: 4096
> > ; COOKIE: d3f19a6790ccacf86751427c5f600e421fb3ca5191f8d954 (good)
> > ;; QUESTION SECTION:
> > ;mobinet.mn. IN 
> > 
> > ;; AUTHORITY SECTION:
> > mobinet.mn. 3600 IN SOA mdns.mobinet.mn. administrator.mobinet.mn. 
> > 2020080309 10800 3600 1209600 38400
> > 
> > ;; Query time: 1 msec
> > ;; SERVER: 2407:6400:0:400::12#53(2407:6400:0:400::12)
> > ;; WHEN: Tue Sep 15 08:43:46 +08 2020
> > ;; MSG SIZE  rcvd: 122
> > 
> > 
> > 
> > 
> > Have a nice day :)
> > BR, NYAMKHAND Buluukhuu
> >  
> > Engineer
> > TPD/ETSD
> > UNESCO street - 28, MPM Complex
> > Ulaanbaatar -14220, Mongolia
> > Mobile:   (976) 94081017
> > Web:   
> > https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fprotect2.fireeye.com%2Fv1%2Furl%3Fk%3D207bc64e-7ee5c56d-207cff91-86aa398f0cb5-87bbde4da6478cc5%26q%3D1%26e%3Dccc340b7-93dc-46d2-b88a-eaa2f70a7766%26u%3Dhttp%253A%252F%252Fwww.mobicom.mn%252Fdata=02%7C01%7Cnyamkhand%40mobicom.mn%7Ca7f1650dbf784dc59b7408d859141819%7Cca63e6528b2e4e0e8b691fd46774bdeb%7C1%7C0%7C637357290146281627sdata=SgzoTmerqkeUewwlOw5gq6SNTRkWhRt2JU5QY2PuQ3o%3Dreserved=0
> >  
> > Before you start - Be safety smart
> >  
> > 
> > 
> > From: Mark Andrews 
> > Sent: Tuesday, September 15, 2020 8:37 AM
> > To: Nyamkhand Buluukhuu 
> > Cc: bind-users@lists.isc.org 
> > Subject: Re: bind v6 record
> >  
> > You have a out-of-date local copy of the zone.
> > 
> > Look for ‘zone “mobinet.mn” {‘ in named.conf in 2407:6400:0:400::12.
> > 
> > 
> > Mark
> > 
> > > On 15 Sep 2020, at 10:31, Nyamkhand Buluukhuu  
> > > wrote:
> > > 
> > > 
> > > Ah, I see,
> > > the cache on the resolver is out of date?
> > > I restarted the named but it's still the same.
> > > 
> > > I restarted named on authoritative /mdns.mobinet.mn/ too.
> > > 
> > > Have a nice day :)
> > > BR, NYAMKHAND Buluukhuu
> > >

Re: bind v6 record

2020-09-14 Thread Nyamkhand Buluukhuu
Hello,

I have internal and external views of mobinet.mn.
And as I can see, serial became different when signed. Look below:

15-Sep-2020 11:56:03.624 general: info: zone mobinet.mn/IN/external (unsigned): 
loaded serial 2020080310
15-Sep-2020 11:56:03.627 general: info: zone mobinet.mn/IN/external (signed): 
loaded serial 2020080364 (DNSSEC signed)

15-Sep-2020 11:56:03.578 general: info: zone mobinet.mn/IN/internal (unsigned): 
loaded serial 2020080310
15-Sep-2020 11:56:03.587 general: info: zone mobinet.mn/IN/internal (signed): 
loaded serial 2020080310 (DNSSEC signed)

It has anything to do with IPv6 records. I can't query PTR and some other 
records too

Have a nice day :)
BR, NYAMKHAND Buluukhuu

Engineer
TPD/ETSD

UNESCO street - 28, MPM Complex

Ulaanbaatar -14220, Mongolia

Mobile:   (976) 94081017
Web:   www.mobicom.mn<http://www.newcom.mn/>

Before you start - Be safety smart

[cid:f5151531-223c-40df-9237-7de57bbe1e7b]



From: Mark Andrews 
Sent: Tuesday, September 15, 2020 9:09 AM
To: Nyamkhand Buluukhuu 
Cc: bind-users@lists.isc.org 
Subject: Re: bind v6 record

Look at the serial numbers in the answer below (2020080309) and the one I 
reported being available publicly ( 2020080363).  Wherever you are getting the 
contents of mobinet.mn from it is out-of-date.  You have the necessary tools 
and information to figure out where the problem is.  Just work the problem 
logically.  If you are in sync with your upstream, where is your upstream 
getting its copy of the zone from?

> On 15 Sep 2020, at 10:47, Nyamkhand Buluukhuu  wrote:
>
> Hi,
>
> I've updated the zone and it looks like isn't the reason.
>
>
> [root@mdns ~]# dig mobinet.mn @2407:6400:0:400::12 
>
> ; <<>> DiG 9.11.19 <<>> mobinet.mn @2407:6400:0:400::12 
> ;; global options: +cmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 61375
> ;; flags: qr aa rd; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
> ;; WARNING: recursion requested but not available
>
> ;; OPT PSEUDOSECTION:
> ; EDNS: version: 0, flags:; udp: 4096
> ; COOKIE: d3f19a6790ccacf86751427c5f600e421fb3ca5191f8d954 (good)
> ;; QUESTION SECTION:
> ;mobinet.mn. IN 
>
> ;; AUTHORITY SECTION:
> mobinet.mn. 3600 IN SOA mdns.mobinet.mn. administrator.mobinet.mn. 2020080309 
> 10800 3600 1209600 38400
>
> ;; Query time: 1 msec
> ;; SERVER: 2407:6400:0:400::12#53(2407:6400:0:400::12)
> ;; WHEN: Tue Sep 15 08:43:46 +08 2020
> ;; MSG SIZE  rcvd: 122
>
>
>
>
> Have a nice day :)
> BR, NYAMKHAND Buluukhuu
>
> Engineer
> TPD/ETSD
> UNESCO street - 28, MPM Complex
> Ulaanbaatar -14220, Mongolia
> Mobile:   (976) 94081017
> Web:   
> https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fprotect2.fireeye.com%2Fv1%2Furl%3Fk%3D207bc64e-7ee5c56d-207cff91-86aa398f0cb5-87bbde4da6478cc5%26q%3D1%26e%3Dccc340b7-93dc-46d2-b88a-eaa2f70a7766%26u%3Dhttp%253A%252F%252Fwww.mobicom.mn%252Fdata=02%7C01%7Cnyamkhand%40mobicom.mn%7Ca7f1650dbf784dc59b7408d859141819%7Cca63e6528b2e4e0e8b691fd46774bdeb%7C1%7C0%7C637357290146281627sdata=SgzoTmerqkeUewwlOw5gq6SNTRkWhRt2JU5QY2PuQ3o%3Dreserved=0
>
> Before you start - Be safety smart
>
> 
>
> From: Mark Andrews 
> Sent: Tuesday, September 15, 2020 8:37 AM
> To: Nyamkhand Buluukhuu 
> Cc: bind-users@lists.isc.org 
> Subject: Re: bind v6 record
>
> You have a out-of-date local copy of the zone.
>
> Look for ‘zone “mobinet.mn” {‘ in named.conf in 2407:6400:0:400::12.
>
>
> Mark
>
> > On 15 Sep 2020, at 10:31, Nyamkhand Buluukhuu  wrote:
> >
> >
> > Ah, I see,
> > the cache on the resolver is out of date?
> > I restarted the named but it's still the same.
> >
> > I restarted named on authoritative /mdns.mobinet.mn/ too.
> >
> > Have a nice day :)
> > BR, NYAMKHAND Buluukhuu
> >
> > Engineer
> > TPD/ETSD
> > UNESCO street - 28, MPM Complex
> > Ulaanbaatar -14220, Mongolia
> > Mobile:   (976) 94081017
> > Web:   
> > https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fprotect2.fireeye.com%2Fv1%2Furl%3Fk%3D3fbf8990-61218ab3-3fb8b04f-86aa398f0cb5-052f8c9100fb9fa9%26q%3D1%26e%3Dccc340b7-93dc-46d2-b88a-eaa2f70a7766%26u%3Dhttps%253A%252F%252Fapc01.safelinks.protection.outlook.com%252F%253Furl%253Dhttps%25253A%25252F%25252Fprotect2.fireeye.com%25252Fv1%25252Furl%25253Fk%25253Dbd3b3a73-e3a3b728-bd3c03ac-86712524712d-5f828f2831ac9e2c%252526q%25253D1%252526e%25253Dc30e2080-8aa3-451b-a73d-c0f0df178779%252526u%25253Dhttp%2525253A%2525252F%2525252Fwww.mobicom.mn%2525252F%2526amp%253Bdata%253D02%25257C01%25257Cnyamkhand%252540mobicom.mn%25257C5c59b511438140b09fec08d8590fdf2c%25257Cca63e6528b2e4e0e8b691fd46774bdeb%25257C1%25257C0%25257C

Re: bind v6 record

2020-09-14 Thread Mark Andrews
Look at the serial numbers in the answer below (2020080309) and the one I 
reported being available publicly ( 2020080363).  Wherever you are getting the 
contents of mobinet.mn from it is out-of-date.  You have the necessary tools 
and information to figure out where the problem is.  Just work the problem 
logically.  If you are in sync with your upstream, where is your upstream 
getting its copy of the zone from?

> On 15 Sep 2020, at 10:47, Nyamkhand Buluukhuu  wrote:
> 
> Hi,
> 
> I've updated the zone and it looks like isn't the reason.
> 
> 
> [root@mdns ~]# dig mobinet.mn @2407:6400:0:400::12 
> 
> ; <<>> DiG 9.11.19 <<>> mobinet.mn @2407:6400:0:400::12 
> ;; global options: +cmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 61375
> ;; flags: qr aa rd; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
> ;; WARNING: recursion requested but not available
> 
> ;; OPT PSEUDOSECTION:
> ; EDNS: version: 0, flags:; udp: 4096
> ; COOKIE: d3f19a6790ccacf86751427c5f600e421fb3ca5191f8d954 (good)
> ;; QUESTION SECTION:
> ;mobinet.mn. IN 
> 
> ;; AUTHORITY SECTION:
> mobinet.mn. 3600 IN SOA mdns.mobinet.mn. administrator.mobinet.mn. 2020080309 
> 10800 3600 1209600 38400
> 
> ;; Query time: 1 msec
> ;; SERVER: 2407:6400:0:400::12#53(2407:6400:0:400::12)
> ;; WHEN: Tue Sep 15 08:43:46 +08 2020
> ;; MSG SIZE  rcvd: 122
> 
> 
> 
> 
> Have a nice day :)
> BR, NYAMKHAND Buluukhuu
>  
> Engineer
> TPD/ETSD
> UNESCO street - 28, MPM Complex
> Ulaanbaatar -14220, Mongolia
> Mobile:   (976) 94081017
> Web:   www.mobicom.mn
>  
> Before you start - Be safety smart
>  
> 
> 
> From: Mark Andrews 
> Sent: Tuesday, September 15, 2020 8:37 AM
> To: Nyamkhand Buluukhuu 
> Cc: bind-users@lists.isc.org 
> Subject: Re: bind v6 record
>  
> You have a out-of-date local copy of the zone.
> 
> Look for ‘zone “mobinet.mn” {‘ in named.conf in 2407:6400:0:400::12.
> 
> 
> Mark
> 
> > On 15 Sep 2020, at 10:31, Nyamkhand Buluukhuu  wrote:
> > 
> > 
> > Ah, I see,
> > the cache on the resolver is out of date?
> > I restarted the named but it's still the same.
> > 
> > I restarted named on authoritative /mdns.mobinet.mn/ too.
> > 
> > Have a nice day :)
> > BR, NYAMKHAND Buluukhuu
> >  
> > Engineer
> > TPD/ETSD
> > UNESCO street - 28, MPM Complex
> > Ulaanbaatar -14220, Mongolia
> > Mobile:   (976) 94081017
> > Web:   
> > https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fprotect2.fireeye.com%2Fv1%2Furl%3Fk%3Dbd3b3a73-e3a3b728-bd3c03ac-86712524712d-5f828f2831ac9e2c%26q%3D1%26e%3Dc30e2080-8aa3-451b-a73d-c0f0df178779%26u%3Dhttp%253A%252F%252Fwww.mobicom.mn%252Fdata=02%7C01%7Cnyamkhand%40mobicom.mn%7C5c59b511438140b09fec08d8590fdf2c%7Cca63e6528b2e4e0e8b691fd46774bdeb%7C1%7C0%7C637357272008808425sdata=%2FSYpr%2BK7kdpjwxI73ta6xZgPJBDynr%2FiFmi%2BLooMSc0%3Dreserved=0
> >  
> > Before you start - Be safety smart
> >  
> > 
> > 
> > From: Mark Andrews 
> > Sent: Monday, September 14, 2020 5:22 PM
> > To: Nyamkhand Buluukhuu 
> > Cc: bind-users@lists.isc.org 
> > Subject: Re: bind v6 record
> >  
> > You have a out-of-date local copy of the zone.
> > 
> > The zone’s contents publicly available have a serial of 2020080363.  Your 
> > copy of the zone has a serial of 2020042290.
> > 
> > mobinet.mn. 3600IN  SOA mdns.mobinet.mn. 
> > administrator.mobinet.mn. 2020080363 10800 3600 1209600 38400
> > 
> > 
> > > On 14 Sep 2020, at 18:54, Nyamkhand Buluukhuu  
> > > wrote:
> > > 
> > > Dears,
> > > 
> > > What might be the reason of resolver couldn't get the  record of the 
> > > domain?  /Other records are fine/
> > > No answer but no error too.
> > > 
> > > =
> > > ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 11256
> > > ;; flags: qr aa rd; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
> > > ;; WARNING: recursion requested but not available
> > > 
> > > ;; QUESTION SECTION:
> > > ;mobinet.mn.IN  
> > > 
> > > ;; AUTHORITY SECTION:
> > > mobinet.mn. 3600IN  SOA mdns.mobinet.mn. 
> > > administrator.mobinet.mn. 2020042290 10800 3600 1209600 38400
> > > 
> > > ;; Query time: 1 msec
> > > ;; SERVER: 2407:6400:0:400::12#53(2407:6400:0:400::12)
> > > ;; WHEN: Mon Sep 14 16:48:01 2020
> > > ;; MSG

Re: bind v6 record

2020-09-14 Thread Nyamkhand Buluukhuu
Hi,

I've updated the zone and it looks like isn't the reason.


[root@mdns ~]# dig mobinet.mn @2407:6400:0:400::12 

; <<>> DiG 9.11.19 <<>> mobinet.mn @2407:6400:0:400::12 
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 61375
;; flags: qr aa rd; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; WARNING: recursion requested but not available

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
; COOKIE: d3f19a6790ccacf86751427c5f600e421fb3ca5191f8d954 (good)
;; QUESTION SECTION:
;mobinet.mn. IN 

;; AUTHORITY SECTION:
mobinet.mn. 3600 IN SOA mdns.mobinet.mn. administrator.mobinet.mn. 2020080309 
10800 3600 1209600 38400

;; Query time: 1 msec
;; SERVER: 2407:6400:0:400::12#53(2407:6400:0:400::12)
;; WHEN: Tue Sep 15 08:43:46 +08 2020
;; MSG SIZE  rcvd: 122




Have a nice day :)
BR, NYAMKHAND Buluukhuu

Engineer
TPD/ETSD

UNESCO street - 28, MPM Complex

Ulaanbaatar -14220, Mongolia

Mobile:   (976) 94081017
Web:   www.mobicom.mn<http://www.newcom.mn/>

Before you start - Be safety smart

[cid:875e9c3a-33fe-487d-9ed3-5c3031eaf604]



From: Mark Andrews 
Sent: Tuesday, September 15, 2020 8:37 AM
To: Nyamkhand Buluukhuu 
Cc: bind-users@lists.isc.org 
Subject: Re: bind v6 record

You have a out-of-date local copy of the zone.

Look for ‘zone “mobinet.mn” {‘ in named.conf in 2407:6400:0:400::12.


Mark

> On 15 Sep 2020, at 10:31, Nyamkhand Buluukhuu  wrote:
>
>
> Ah, I see,
> the cache on the resolver is out of date?
> I restarted the named but it's still the same.
>
> I restarted named on authoritative /mdns.mobinet.mn/ too.
>
> Have a nice day :)
> BR, NYAMKHAND Buluukhuu
>
> Engineer
> TPD/ETSD
> UNESCO street - 28, MPM Complex
> Ulaanbaatar -14220, Mongolia
> Mobile:   (976) 94081017
> Web:   
> https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fprotect2.fireeye.com%2Fv1%2Furl%3Fk%3Dbd3b3a73-e3a3b728-bd3c03ac-86712524712d-5f828f2831ac9e2c%26q%3D1%26e%3Dc30e2080-8aa3-451b-a73d-c0f0df178779%26u%3Dhttp%253A%252F%252Fwww.mobicom.mn%252Fdata=02%7C01%7Cnyamkhand%40mobicom.mn%7C5c59b511438140b09fec08d8590fdf2c%7Cca63e6528b2e4e0e8b691fd46774bdeb%7C1%7C0%7C637357272008808425sdata=%2FSYpr%2BK7kdpjwxI73ta6xZgPJBDynr%2FiFmi%2BLooMSc0%3Dreserved=0
>
> Before you start - Be safety smart
>
> 
>
> From: Mark Andrews 
> Sent: Monday, September 14, 2020 5:22 PM
> To: Nyamkhand Buluukhuu 
> Cc: bind-users@lists.isc.org 
> Subject: Re: bind v6 record
>
> You have a out-of-date local copy of the zone.
>
> The zone’s contents publicly available have a serial of 2020080363.  Your 
> copy of the zone has a serial of 2020042290.
>
> mobinet.mn. 3600IN  SOA mdns.mobinet.mn. 
> administrator.mobinet.mn. 2020080363 10800 3600 1209600 38400
>
>
> > On 14 Sep 2020, at 18:54, Nyamkhand Buluukhuu  wrote:
> >
> > Dears,
> >
> > What might be the reason of resolver couldn't get the  record of the 
> > domain?  /Other records are fine/
> > No answer but no error too.
> >
> > =
> > ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 11256
> > ;; flags: qr aa rd; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
> > ;; WARNING: recursion requested but not available
> >
> > ;; QUESTION SECTION:
> > ;mobinet.mn.IN  
> >
> > ;; AUTHORITY SECTION:
> > mobinet.mn. 3600IN  SOA mdns.mobinet.mn. 
> > administrator.mobinet.mn. 2020042290 10800 3600 1209600 38400
> >
> > ;; Query time: 1 msec
> > ;; SERVER: 2407:6400:0:400::12#53(2407:6400:0:400::12)
> > ;; WHEN: Mon Sep 14 16:48:01 2020
> > ;; MSG SIZE  rcvd: 83
> > ===
> >
> > I tried between master and slave authoritative servers, tried from the 
> > allowed resolvers. SAME
> >
> > BUT, when I use online dig tools and run query from authoritative servers, 
> > I get answers.
> > Also, when I use OpenDNS, I get answers normally.
> >
> > I'm stuck here, any advice is appreciated.
> > Thanks :)
> >
> > Have a nice day :)
> > BR, NYAMKHAND Buluukhuu
> >
> > Engineer
> > TPD/ETSD
> > UNESCO street - 28, MPM Complex
> > Ulaanbaatar -14220, Mongolia
> > Mobile:   (976) 94081017
> > Web:   
> > https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fprotect2.fireeye.com%2Fv1%2Furl%3Fk%3Dfac3a5d1-a45b288a-fac49c0e-86712524712d-1622e0230b269617%26q%3D1%26e%3Dc30e2080-8aa3-451b-a73d-c0f0df178779%26u%3Dhttps%253A%252F%252Fapc01.safelinks.protection.outlook.com%252F%253Furl%253Dhttps%25253A%25252

Re: bind v6 record

2020-09-14 Thread Mark Andrews
You have a out-of-date local copy of the zone.

Look for ‘zone “mobinet.mn” {‘ in named.conf in 2407:6400:0:400::12.


Mark

> On 15 Sep 2020, at 10:31, Nyamkhand Buluukhuu  wrote:
> 
> 
> Ah, I see,
> the cache on the resolver is out of date?
> I restarted the named but it's still the same.
> 
> I restarted named on authoritative /mdns.mobinet.mn/ too.
> 
> Have a nice day :)
> BR, NYAMKHAND Buluukhuu
>  
> Engineer
> TPD/ETSD
> UNESCO street - 28, MPM Complex
> Ulaanbaatar -14220, Mongolia
> Mobile:   (976) 94081017
> Web:   www.mobicom.mn
>  
> Before you start - Be safety smart
>  
> 
> 
> From: Mark Andrews 
> Sent: Monday, September 14, 2020 5:22 PM
> To: Nyamkhand Buluukhuu 
> Cc: bind-users@lists.isc.org 
> Subject: Re: bind v6 record
>  
> You have a out-of-date local copy of the zone.
> 
> The zone’s contents publicly available have a serial of 2020080363.  Your 
> copy of the zone has a serial of 2020042290.
> 
> mobinet.mn. 3600IN  SOA mdns.mobinet.mn. 
> administrator.mobinet.mn. 2020080363 10800 3600 1209600 38400
> 
> 
> > On 14 Sep 2020, at 18:54, Nyamkhand Buluukhuu  wrote:
> > 
> > Dears,
> > 
> > What might be the reason of resolver couldn't get the  record of the 
> > domain?  /Other records are fine/
> > No answer but no error too.
> > 
> > =
> > ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 11256
> > ;; flags: qr aa rd; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
> > ;; WARNING: recursion requested but not available
> > 
> > ;; QUESTION SECTION:
> > ;mobinet.mn.IN  
> > 
> > ;; AUTHORITY SECTION:
> > mobinet.mn. 3600IN  SOA mdns.mobinet.mn. 
> > administrator.mobinet.mn. 2020042290 10800 3600 1209600 38400
> > 
> > ;; Query time: 1 msec
> > ;; SERVER: 2407:6400:0:400::12#53(2407:6400:0:400::12)
> > ;; WHEN: Mon Sep 14 16:48:01 2020
> > ;; MSG SIZE  rcvd: 83
> > ===
> > 
> > I tried between master and slave authoritative servers, tried from the 
> > allowed resolvers. SAME
> > 
> > BUT, when I use online dig tools and run query from authoritative servers, 
> > I get answers.
> > Also, when I use OpenDNS, I get answers normally.
> > 
> > I'm stuck here, any advice is appreciated.
> > Thanks :)
> > 
> > Have a nice day :)
> > BR, NYAMKHAND Buluukhuu
> >  
> > Engineer
> > TPD/ETSD
> > UNESCO street - 28, MPM Complex
> > Ulaanbaatar -14220, Mongolia
> > Mobile:   (976) 94081017
> > Web:   
> > https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fprotect2.fireeye.com%2Fv1%2Furl%3Fk%3D592547a1-07b27edb-59227e7e-86757b2df0b7-775def2156b0c797%26q%3D1%26e%3Deef8a575-636f-46cb-bbee-d64381996add%26u%3Dhttp%253A%252F%252Fwww.mobicom.mn%252Fdata=02%7C01%7Cnyamkhand%40mobicom.mn%7C659742d03c6943d30e4008d8588fd199%7Cca63e6528b2e4e0e8b691fd46774bdeb%7C1%7C0%7C637356722028072013sdata=qCjjMAPGhEumDClHNZWZ0F9bMLdS4cq5WMyN%2FOZ3%2B2I%3Dreserved=0
> >  
> > Before you start - Be safety smart
> >  
> > 
> > 
> > ___
> > Please visit 
> > https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fprotect2.fireeye.com%2Fv1%2Furl%3Fk%3D9920fa7d-c7b7c307-9927c3a2-86757b2df0b7-fb3bf9a85504a4aa%26q%3D1%26e%3Deef8a575-636f-46cb-bbee-d64381996add%26u%3Dhttps%253A%252F%252Flists.isc.org%252Fmailman%252Flistinfo%252Fbind-usersdata=02%7C01%7Cnyamkhand%40mobicom.mn%7C659742d03c6943d30e4008d8588fd199%7Cca63e6528b2e4e0e8b691fd46774bdeb%7C1%7C0%7C637356722028072013sdata=MKgqqzAJKBvucf94V7spdWtKRQRu9sEIl3y3qigj7aU%3Dreserved=0
> >  to unsubscribe from this list
> > 
> > ISC funds the development of this software with paid support subscriptions. 
> > Contact us 
> > athttps://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fprotect2.fireeye.com%2Fv1%2Furl%3Fk%3D87789dbb-d9efa4c1-877fa464-86757b2df0b7-508a53faca6a64d7%26q%3D1%26e%3Deef8a575-636f-46cb-bbee-d64381996add%26u%3Dhttps%253A%252F%252Fwww.isc.org%252Fcontact%252Fdata=02%7C01%7Cnyamkhand%40mobicom.mn%7C659742d03c6943d30e4008d8588fd199%7Cca63e6528b2e4e0e8b691fd46774bdeb%7C1%7C0%7C637356722028072013sdata=T21cTWRpNqL8EOHuaRfMPaCnGU%2BlgfcGZS2kpy5UzWI%3Dreserved=0
> >  for more information.
> > 
> > 
> > bind-users mailing list
> > bind-users@lists.isc.org
> > https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fprotect2.fireeye.com%2Fv1%2Furl%3Fk%3Df4955b61-aa02621b-f49262be-86757b2df0b7-1af1e1f4e8da1b96%26q%3D1%26e%

Re: bind v6 record

2020-09-14 Thread Nyamkhand Buluukhuu

Ah, I see,
the cache on the resolver is out of date?
I restarted the named but it's still the same.

I restarted named on authoritative /mdns.mobinet.mn/ too.

Have a nice day :)
BR, NYAMKHAND Buluukhuu

Engineer
TPD/ETSD

UNESCO street - 28, MPM Complex

Ulaanbaatar -14220, Mongolia

Mobile:   (976) 94081017
Web:   www.mobicom.mn<http://www.newcom.mn/>

Before you start - Be safety smart

[cid:8be22d50-a384-435f-85f0-98307a561a81]



From: Mark Andrews 
Sent: Monday, September 14, 2020 5:22 PM
To: Nyamkhand Buluukhuu 
Cc: bind-users@lists.isc.org 
Subject: Re: bind v6 record

You have a out-of-date local copy of the zone.

The zone’s contents publicly available have a serial of 2020080363.  Your copy 
of the zone has a serial of 2020042290.

mobinet.mn. 3600IN  SOA mdns.mobinet.mn. 
administrator.mobinet.mn. 2020080363 10800 3600 1209600 38400


> On 14 Sep 2020, at 18:54, Nyamkhand Buluukhuu  wrote:
>
> Dears,
>
> What might be the reason of resolver couldn't get the  record of the 
> domain?  /Other records are fine/
> No answer but no error too.
>
> =
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 11256
> ;; flags: qr aa rd; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
> ;; WARNING: recursion requested but not available
>
> ;; QUESTION SECTION:
> ;mobinet.mn.IN  
>
> ;; AUTHORITY SECTION:
> mobinet.mn. 3600IN  SOA mdns.mobinet.mn. 
> administrator.mobinet.mn. 2020042290 10800 3600 1209600 38400
>
> ;; Query time: 1 msec
> ;; SERVER: 2407:6400:0:400::12#53(2407:6400:0:400::12)
> ;; WHEN: Mon Sep 14 16:48:01 2020
> ;; MSG SIZE  rcvd: 83
> ===
>
> I tried between master and slave authoritative servers, tried from the 
> allowed resolvers. SAME
>
> BUT, when I use online dig tools and run query from authoritative servers, I 
> get answers.
> Also, when I use OpenDNS, I get answers normally.
>
> I'm stuck here, any advice is appreciated.
> Thanks :)
>
> Have a nice day :)
> BR, NYAMKHAND Buluukhuu
>
> Engineer
> TPD/ETSD
> UNESCO street - 28, MPM Complex
> Ulaanbaatar -14220, Mongolia
> Mobile:   (976) 94081017
> Web:   
> https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fprotect2.fireeye.com%2Fv1%2Furl%3Fk%3D592547a1-07b27edb-59227e7e-86757b2df0b7-775def2156b0c797%26q%3D1%26e%3Deef8a575-636f-46cb-bbee-d64381996add%26u%3Dhttp%253A%252F%252Fwww.mobicom.mn%252Fdata=02%7C01%7Cnyamkhand%40mobicom.mn%7C659742d03c6943d30e4008d8588fd199%7Cca63e6528b2e4e0e8b691fd46774bdeb%7C1%7C0%7C637356722028072013sdata=qCjjMAPGhEumDClHNZWZ0F9bMLdS4cq5WMyN%2FOZ3%2B2I%3Dreserved=0
>
> Before you start - Be safety smart
>
> 
>
> ___
> Please visit 
> https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fprotect2.fireeye.com%2Fv1%2Furl%3Fk%3D9920fa7d-c7b7c307-9927c3a2-86757b2df0b7-fb3bf9a85504a4aa%26q%3D1%26e%3Deef8a575-636f-46cb-bbee-d64381996add%26u%3Dhttps%253A%252F%252Flists.isc.org%252Fmailman%252Flistinfo%252Fbind-usersdata=02%7C01%7Cnyamkhand%40mobicom.mn%7C659742d03c6943d30e4008d8588fd199%7Cca63e6528b2e4e0e8b691fd46774bdeb%7C1%7C0%7C637356722028072013sdata=MKgqqzAJKBvucf94V7spdWtKRQRu9sEIl3y3qigj7aU%3Dreserved=0
>  to unsubscribe from this list
>
> ISC funds the development of this software with paid support subscriptions. 
> Contact us at 
> https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fprotect2.fireeye.com%2Fv1%2Furl%3Fk%3D87789dbb-d9efa4c1-877fa464-86757b2df0b7-508a53faca6a64d7%26q%3D1%26e%3Deef8a575-636f-46cb-bbee-d64381996add%26u%3Dhttps%253A%252F%252Fwww.isc.org%252Fcontact%252Fdata=02%7C01%7Cnyamkhand%40mobicom.mn%7C659742d03c6943d30e4008d8588fd199%7Cca63e6528b2e4e0e8b691fd46774bdeb%7C1%7C0%7C637356722028072013sdata=T21cTWRpNqL8EOHuaRfMPaCnGU%2BlgfcGZS2kpy5UzWI%3Dreserved=0
>  for more information.
>
>
> bind-users mailing list
> bind-users@lists.isc.org
> https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fprotect2.fireeye.com%2Fv1%2Furl%3Fk%3Df4955b61-aa02621b-f49262be-86757b2df0b7-1af1e1f4e8da1b96%26q%3D1%26e%3Deef8a575-636f-46cb-bbee-d64381996add%26u%3Dhttps%253A%252F%252Flists.isc.org%252Fmailman%252Flistinfo%252Fbind-usersdata=02%7C01%7Cnyamkhand%40mobicom.mn%7C659742d03c6943d30e4008d8588fd199%7Cca63e6528b2e4e0e8b691fd46774bdeb%7C1%7C0%7C637356722028072013sdata=EmCGam028Oan8Ucm1Csc4XqiNptAvISUlewxFXM2rac%3Dreserved=0

--
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742  INTERNET: ma...@isc.org

___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

ISC funds the deve

Re: bind v6 record

2020-09-14 Thread Mark Andrews
You have a out-of-date local copy of the zone.

The zone’s contents publicly available have a serial of 2020080363.  Your copy 
of the zone has a serial of 2020042290.

mobinet.mn. 3600IN  SOA mdns.mobinet.mn. 
administrator.mobinet.mn. 2020080363 10800 3600 1209600 38400


> On 14 Sep 2020, at 18:54, Nyamkhand Buluukhuu  wrote:
> 
> Dears,
> 
> What might be the reason of resolver couldn't get the  record of the 
> domain?  /Other records are fine/
> No answer but no error too.
> 
> =
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 11256
> ;; flags: qr aa rd; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
> ;; WARNING: recursion requested but not available
> 
> ;; QUESTION SECTION:
> ;mobinet.mn.IN  
> 
> ;; AUTHORITY SECTION:
> mobinet.mn. 3600IN  SOA mdns.mobinet.mn. 
> administrator.mobinet.mn. 2020042290 10800 3600 1209600 38400
> 
> ;; Query time: 1 msec
> ;; SERVER: 2407:6400:0:400::12#53(2407:6400:0:400::12)
> ;; WHEN: Mon Sep 14 16:48:01 2020
> ;; MSG SIZE  rcvd: 83
> ===
> 
> I tried between master and slave authoritative servers, tried from the 
> allowed resolvers. SAME
> 
> BUT, when I use online dig tools and run query from authoritative servers, I 
> get answers.
> Also, when I use OpenDNS, I get answers normally.
> 
> I'm stuck here, any advice is appreciated.
> Thanks :)
> 
> Have a nice day :)
> BR, NYAMKHAND Buluukhuu
>  
> Engineer
> TPD/ETSD
> UNESCO street - 28, MPM Complex
> Ulaanbaatar -14220, Mongolia
> Mobile:   (976) 94081017
> Web:   www.mobicom.mn
>  
> Before you start - Be safety smart
>  
> 
> 
> ___
> Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
> from this list
> 
> ISC funds the development of this software with paid support subscriptions. 
> Contact us at https://www.isc.org/contact/ for more information.
> 
> 
> bind-users mailing list
> bind-users@lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users

-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742  INTERNET: ma...@isc.org

___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users