<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml"><head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>
</head><body style=""><div> </div>
<div>Thanks, that was the problem.</div>
<div> </div>
<div>--</div>
<div>Dan Campbell</div>
<div> </div>
<div><br>> On August 14, 2015 at 12:31 PM Aki Tuomi <cmouse@youzen.ext.b2.fi> wrote:<br>> <br>> <br>> Well, you can't have CNAME and NS on same label. Just saying.<br>> <br>> That's probably one problem.<br>> <br>> Aki<br>> <br>> On Thu, Aug 13, 2015 at 09:24:36AM -0600, pdns@w3eta.net wrote:<br>> > <br>> > > On August 12, 2015 at 6:32 AM Peter van Dijk <peter.van.dijk@powerdns.com> wrote:<br>> > > <br>> > > <br>> > > Hello,<br>> > > <br>> > > On 12 Aug 2015, at 12:19, Aki Tuomi wrote:<br>> > > <br>> > > > You can replace your domain with mydomain in this case.<br>> > > <br>> > > No - please do not replace stuff. Debugging with obfuscated data is a <br>> > > major pain. We need real data to debug things.<br>> > <br>> > <br>> > Below is a log from a test server showing query and response for two queries. <br>> > The first query is for a name that exists, the second is for a name that does not exist:<br>> > <br>> > Q w3.dst.dhe.ibm.com IN SOA -1 9.17.58.71 0.0.0.0<br>> > END<br>> > Q dst.dhe.ibm.com IN SOA -1 9.17.58.71 0.0.0.0<br>> > DATA dst.dhe.ibm.com IN SOA 300 -1 lexbz98214.lexington.ibm.com. nospam.us.ibm.com. 2015051407 300 300 300 60<br>> > END<br>> > Q w3.dst.dhe.ibm.com IN NS -1 9.17.58.71 0.0.0.0<br>> > END<br>> > Q w3.dst.dhe.ibm.com IN ANY -1 9.17.58.71 0.0.0.0<br>> > DATA w3.dst.dhe.ibm.com IN CNAME 300 -1 submit.boulder.ibm.com<br>> > DATA w3.dst.dhe.ibm.com IN NS 300 -1 lexbz98214.lexington.ibm.com<br>> > DATA w3.dst.dhe.ibm.com IN NS 300 -1 lexbz98237.lexington.ibm.com<br>> > END<br>> > Q www.dst.dhe.ibm.com IN SOA -1 9.17.58.71 0.0.0.0<br>> > END<br>> > Q dst.dhe.ibm.com IN SOA -1 9.17.58.71 0.0.0.0<br>> > DATA dst.dhe.ibm.com IN SOA 300 -1 lexbz98214.lexington.ibm.com. nospam.us.ibm.com. 2015051407 300 300 300 60<br>> > END<br>> > Q www.dst.dhe.ibm.com IN NS -1 9.17.58.71 0.0.0.0<br>> > END<br>> > Q www.dst.dhe.ibm.com IN ANY -1 9.17.58.71 0.0.0.0<br>> > DATA www.dst.dhe.ibm.com IN NS 300 -1 lexbz98214.lexington.ibm.com<br>> > DATA www.dst.dhe.ibm.com IN NS 300 -1 lexbz98237.lexington.ibm.com<br>> > END<br>> > <br>> > <br>> > The second query results in the following record in /var/log/messages:<br>> > <br>> > Aug 12 11:54:55 esd05ns01d pdns[18417]: Should not get here (www.dst.dhe.ibm.com|1): please run pdnssec rectify-zone dst.dhe.ibm.com<br>> > <br>> > --<br>> > Dan Campbell<br>> > _______________________________________________<br>> > Pdns-users mailing list<br>> > Pdns-users@mailman.powerdns.com<br>> > http://mailman.powerdns.com/mailman/listinfo/pdns-users<br>> > </div></body></html>