<div dir="ltr">Sure><div><br></div><div><div>[root@jaribu] ~wash/Tools/PDNS/pdns-recursor-3.5-rc5# dig @<a href="http://196.200.16.2">196.200.16.2</a> <a href="http://gw.cmehtanbo.com">gw.cmehtanbo.com</a> any</div><div>
<br></div><div>; <<>> DiG 9.9.2-P2 <<>> @<a href="http://196.200.16.2">196.200.16.2</a> <a href="http://gw.cmehtanbo.com">gw.cmehtanbo.com</a> any</div><div>; (1 server found)</div><div>;; global options: +cmd</div>
<div>;; Got answer:</div><div>;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 59753</div><div>;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 3, ADDITIONAL: 4</div><div><br></div><div>;; OPT PSEUDOSECTION:</div>
<div>; EDNS: version: 0, flags:; udp: 4096</div><div>;; QUESTION SECTION:</div><div>;<a href="http://gw.cmehtanbo.com">gw.cmehtanbo.com</a>. IN ANY</div><div><br></div><div>;; ANSWER SECTION:</div><div>
<a href="http://gw.cmehtanbo.com">gw.cmehtanbo.com</a>. 9687 IN A 41.215.42.238</div>
<div><br></div><div>;; AUTHORITY SECTION:</div><div><a href="http://cmehtanbo.com">cmehtanbo.com</a>. 9687 IN NS <a href="http://ns1.accesskenya.com">ns1.accesskenya.com</a>.</div><div><a href="http://cmehtanbo.com">cmehtanbo.com</a>. 9687 IN NS <a href="http://ukns1.accesskenya.com">ukns1.accesskenya.com</a>.</div>
<div><a href="http://cmehtanbo.com">cmehtanbo.com</a>. 9687 IN NS <a href="http://ns0.accesskenya.com">ns0.accesskenya.com</a>.</div><div><br></div><div>;; ADDITIONAL SECTION:</div><div><a href="http://ns0.accesskenya.com">ns0.accesskenya.com</a>. 5956 IN A 196.200.16.8</div>
<div><a href="http://ns1.accesskenya.com">ns1.accesskenya.com</a>. 6016 IN A 196.200.16.8</div><div><a href="http://ukns1.accesskenya.com">ukns1.accesskenya.com</a>. 5965 IN A 109.231.81.235</div>
<div><br></div><div>;; Query time: 87 msec</div><div>;; SERVER: 196.200.16.2#53(196.200.16.2)</div><div>;; WHEN: Mon Apr 8 17:07:01 2013</div><div>;; MSG SIZE rcvd: 177</div><div><br></div><div>[root@jaribu] ~wash/Tools/PDNS/pdns-recursor-3.5-rc5# dig @<a href="http://196.200.16.27">196.200.16.27</a> <a href="http://gw.cmehtanbo.com">gw.cmehtanbo.com</a> any</div>
<div><br></div><div>; <<>> DiG 9.9.2-P2 <<>> @<a href="http://196.200.16.27">196.200.16.27</a> <a href="http://gw.cmehtanbo.com">gw.cmehtanbo.com</a> any</div><div>; (1 server found)</div><div>;; global options: +cmd</div>
<div>;; Got answer:</div><div>;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 9816</div><div>;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 3, ADDITIONAL: 4</div><div><br></div><div>;; OPT PSEUDOSECTION:</div>
<div>; EDNS: version: 0, flags:; udp: 4096</div><div>;; QUESTION SECTION:</div><div>;<a href="http://gw.cmehtanbo.com">gw.cmehtanbo.com</a>. IN ANY</div><div><br></div><div>;; ANSWER SECTION:</div><div>
<a href="http://gw.cmehtanbo.com">gw.cmehtanbo.com</a>. 2923 IN A 41.215.42.238</div>
<div><br></div><div>;; AUTHORITY SECTION:</div><div><a href="http://cmehtanbo.com">cmehtanbo.com</a>. 2923 IN NS <a href="http://ns1.accesskenya.com">ns1.accesskenya.com</a>.</div><div><a href="http://cmehtanbo.com">cmehtanbo.com</a>. 2923 IN NS <a href="http://ukns1.accesskenya.com">ukns1.accesskenya.com</a>.</div>
<div><a href="http://cmehtanbo.com">cmehtanbo.com</a>. 2923 IN NS <a href="http://ns0.accesskenya.com">ns0.accesskenya.com</a>.</div><div><br></div><div>;; ADDITIONAL SECTION:</div><div><a href="http://ns0.accesskenya.com">ns0.accesskenya.com</a>. 6123 IN A 196.200.16.8</div>
<div><a href="http://ns1.accesskenya.com">ns1.accesskenya.com</a>. 5974 IN A 196.200.16.8</div><div><a href="http://ukns1.accesskenya.com">ukns1.accesskenya.com</a>. 6055 IN A 109.231.81.235</div>
<div><br></div><div>;; Query time: 232 msec</div><div>;; SERVER: 196.200.16.27#53(196.200.16.27)</div><div>;; WHEN: Mon Apr 8 17:07:16 2013</div><div>;; MSG SIZE rcvd: 177</div><div><br></div><div>[root@jaribu] ~wash/Tools/PDNS/pdns-recursor-3.5-rc5#</div>
</div><div><br></div><div><br></div><div style>However, a direct dig to {ns1|ukns1|ns0}.<a href="http://accesskenya.com">accesskenya.com</a> are all declined from my IP. </div><div style>I manage several Unix boxes, so I decided to try the same queries from 'outside' my ISPs network and here is what I got!</div>
<div style><br></div><div style><div>(17:11:24 <~>) 0 $ dig @<a href="http://ns1.accesskenya.com">ns1.accesskenya.com</a>. <a href="http://gw.cmehtanbo.com">gw.cmehtanbo.com</a>. any</div><div><br></div><div>; <<>> DiG 9.6.-ESV-R7-P4 <<>> @<a href="http://ns1.accesskenya.com">ns1.accesskenya.com</a>. <a href="http://gw.cmehtanbo.com">gw.cmehtanbo.com</a>. any</div>
<div>; (1 server found)</div><div>;; global options: +cmd</div><div>;; Got answer:</div><div>;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 25808</div><div>;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 3, ADDITIONAL: 3</div>
<div>;; WARNING: recursion requested but not available</div><div><br></div><div>;; QUESTION SECTION:</div><div>;<a href="http://gw.cmehtanbo.com">gw.cmehtanbo.com</a>. IN ANY</div><div><br></div><div>;; ANSWER SECTION:</div>
<div><a href="http://gw.cmehtanbo.com">gw.cmehtanbo.com</a>. 38400 IN A 41.215.42.238</div><div><br></div><div>;; AUTHORITY SECTION:</div><div><a href="http://cmehtanbo.com">cmehtanbo.com</a>. 38400 IN NS <a href="http://ukns1.accesskenya.com">ukns1.accesskenya.com</a>.</div>
<div><a href="http://cmehtanbo.com">cmehtanbo.com</a>. 38400 IN NS <a href="http://ns0.accesskenya.com">ns0.accesskenya.com</a>.</div><div><a href="http://cmehtanbo.com">cmehtanbo.com</a>. 38400 IN NS <a href="http://ns1.accesskenya.com">ns1.accesskenya.com</a>.</div>
<div><br></div><div>;; ADDITIONAL SECTION:</div><div><a href="http://ns0.accesskenya.com">ns0.accesskenya.com</a>. 38400 IN A 196.200.16.8</div><div><a href="http://ns1.accesskenya.com">ns1.accesskenya.com</a>. 38400 IN A 196.200.16.8</div>
<div><a href="http://ukns1.accesskenya.com">ukns1.accesskenya.com</a>. 38400 IN A 109.231.81.235</div><div><br></div><div>;; Query time: 3 msec</div><div>;; SERVER: 196.200.16.8#53(196.200.16.8)</div><div>;; WHEN: Mon Apr 8 17:11:27 2013</div>
<div>;; MSG SIZE rcvd: 166</div><div><br></div><div>(17:11:27 <~>) 0 $ dig @<a href="http://ukns1.accesskenya.com">ukns1.accesskenya.com</a>. <a href="http://gw.cmehtanbo.com">gw.cmehtanbo.com</a>. any</div><div><br>
</div><div>; <<>> DiG 9.6.-ESV-R7-P4 <<>> @<a href="http://ukns1.accesskenya.com">ukns1.accesskenya.com</a>. <a href="http://gw.cmehtanbo.com">gw.cmehtanbo.com</a>. any</div><div>; (1 server found)</div>
<div>;; global options: +cmd</div><div>;; Got answer:</div><div>;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 21325</div><div>;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 3, ADDITIONAL: 3</div><div>
;; WARNING: recursion requested but not available</div><div><br></div><div>;; QUESTION SECTION:</div><div>;<a href="http://gw.cmehtanbo.com">gw.cmehtanbo.com</a>. IN ANY</div><div><br></div><div>;; ANSWER SECTION:</div>
<div><a href="http://gw.cmehtanbo.com">gw.cmehtanbo.com</a>. 38400 IN A 41.215.42.238</div><div><br></div><div>;; AUTHORITY SECTION:</div><div><a href="http://cmehtanbo.com">cmehtanbo.com</a>. 38400 IN NS <a href="http://ns0.accesskenya.com">ns0.accesskenya.com</a>.</div>
<div><a href="http://cmehtanbo.com">cmehtanbo.com</a>. 38400 IN NS <a href="http://ns1.accesskenya.com">ns1.accesskenya.com</a>.</div><div><a href="http://cmehtanbo.com">cmehtanbo.com</a>. 38400 IN NS <a href="http://ukns1.accesskenya.com">ukns1.accesskenya.com</a>.</div>
<div><br></div><div>;; ADDITIONAL SECTION:</div><div><a href="http://ns0.accesskenya.com">ns0.accesskenya.com</a>. 38400 IN A 196.200.16.8</div><div><a href="http://ns1.accesskenya.com">ns1.accesskenya.com</a>. 38400 IN A 196.200.16.8</div>
<div><a href="http://ukns1.accesskenya.com">ukns1.accesskenya.com</a>. 38400 IN A 109.231.81.235</div><div><br></div><div>;; Query time: 204 msec</div><div>;; SERVER: 109.231.81.235#53(109.231.81.235)</div>
<div>
;; WHEN: Mon Apr 8 17:11:38 2013</div><div>;; MSG SIZE rcvd: 166</div><div><br></div><div>(17:11:38 <~>) 0 $ dig @<a href="http://ns0.accesskenya.com">ns0.accesskenya.com</a>. <a href="http://gw.cmehtanbo.com">gw.cmehtanbo.com</a>. any</div>
<div><br></div><div>; <<>> DiG 9.6.-ESV-R7-P4 <<>> @<a href="http://ns0.accesskenya.com">ns0.accesskenya.com</a>. <a href="http://gw.cmehtanbo.com">gw.cmehtanbo.com</a>. any</div><div>; (1 server found)</div>
<div>;; global options: +cmd</div><div>;; connection timed out; no servers could be reached</div><div>(17:12:06 <~>) 0 $</div><div><br></div><div><br></div><div style>So it would appear that my ISP allows queries to {ns1|ukns1|ns0}.<a href="http://accesskenya.com">accesskenya.com</a> from outside their network, but kinds disallow it from the servers they give to clients to use!</div>
<div style><br></div><div style><br></div></div></div><div class="gmail_extra"><br><br><div class="gmail_quote">On 8 April 2013 16:59, Peter van Dijk <span dir="ltr"><<a href="mailto:peter.van.dijk@netherlabs.nl" target="_blank">peter.van.dijk@netherlabs.nl</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hello,<br>
<br>
also, can you show the results of dig queries against the two servers you are forwarding to?<br>
<div class="HOEnZb"><div class="h5"><br>
Kind regards,<br>
--<br>
Peter van Dijk<br>
Netherlabs Computer Consulting BV - <a href="http://www.netherlabs.nl/" target="_blank">http://www.netherlabs.nl/</a><br>
<br>
<br>
_______________________________________________<br>
Pdns-users mailing list<br>
<a href="mailto:Pdns-users@mailman.powerdns.com">Pdns-users@mailman.powerdns.com</a><br>
<a href="http://mailman.powerdns.com/mailman/listinfo/pdns-users" target="_blank">http://mailman.powerdns.com/mailman/listinfo/pdns-users</a><br>
</div></div></blockquote></div><br><br clear="all"><div><br></div>-- <br>Best regards,<br>Odhiambo WASHINGTON,<br>Nairobi,KE<br>+254733744121/+254722743223<br>"I can't hear you -- I'm using the scrambler."<br>
</div>