[Pdns-users] bogus ANY query type for recursor

[Tomas Brandysky]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello,

we are using Pdns 2.9.20 with pdns-recursor enabled.

We have noticed a problem when 'ANY' type request is sent for one
specific domain besides queries for other domains are ok.


> dig seznam.cz ANY

; <<>> DiG 9.3.1 <<>> @10.20.0.2 seznam.cz any
; (1 server found)
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 18578
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;seznam.cz.                     IN      ANY

;; Query time: 38 msec
;; SERVER: 10.20.0.2#53(10.20.0.2)
;; WHEN: Thu Apr 20 09:25:54 2006
;; MSG SIZE  rcvd: 27



other domains work fine:
e.g

> dig root.cz ANY

; <<>> DiG 9.3.1 <<>> @10.20.0.2 root.cz ANY
; (1 server found)
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 46717
;; flags: qr rd ra; QUERY: 1, ANSWER: 6, AUTHORITY: 0, ADDITIONAL: 4

;; QUESTION SECTION:
;root.cz.                       IN      ANY

;; ANSWER SECTION:
root.cz.                86400   IN      MX      20 www.flamingo.cz.
root.cz.                86400   IN      MX      10 centaurus.4web.cz.
root.cz.                86400   IN      A       81.31.5.18
root.cz.                86400   IN      NS      ns2.ignum.cz.
root.cz.                86400   IN      NS      ns.iinfo.cz.
root.cz.                86400   IN      SOA     ns.iinfo.cz.
hostmaster.iinfo.cz. 2006032301 86400 3600 3600000 360000

;; ADDITIONAL SECTION:
flamingo.cz.            28269   IN      A       82.208.14.9
ns.iinfo.cz.            579     IN      A       81.31.5.5
ns2.ignum.cz.           17917   IN      A       195.47.116.37
centaurus.4web.cz.      28269   IN      A       81.31.5.5

;; Query time: 46 msec
;; SERVER: 10.20.0.2#53(10.20.0.2)
;; WHEN: Thu Apr 20 09:26:32 2006
;; MSG SIZE  rcvd: 311


In nutshell, it seems that pdns-recursor has problem asking ONLY
seznam.cz domain for ANY type. It should return something like this:

; <<>> DiG 9.2.4 <<>> seznam.cz ANY
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 16388
;; flags: qr rd ra; QUERY: 1, ANSWER: 11, AUTHORITY: 2, ADDITIONAL: 0

;; QUESTION SECTION:
;seznam.cz.                     IN      ANY

;; ANSWER SECTION:
seznam.cz.              295     IN      A       194.228.32.3
seznam.cz.              295     IN      SOA     ns.seznam.cz.
hostmaster.seznam.cz. 2006041902 10800 3600 604800 300
seznam.cz.              295     IN      TXT     "wwrr 194.228.32.18 1
http 80 30 6 3"
seznam.cz.              295     IN      TXT     "v=spf1 mx
ip4:212.80.76.26 ip4:212.80.76.42 ip4:212.80.76.43 ip4:212.80.76.44
ip4:212.80.76.45 ~all"
seznam.cz.              295     IN      TXT     "wwrr 212.80.76.3 1 http
80 30 6 3"
seznam.cz.              295     IN      TXT     "wwrr 194.228.32.3 1
http 80 30 6 3"
seznam.cz.              295     IN      TXT     "wwrr 212.80.76.18 1
http 80 30 6 3"
seznam.cz.              295     IN      MX      20 mx2.seznam.cz.
seznam.cz.              295     IN      MX      10 mx1.seznam.cz.
seznam.cz.              295     IN      NS      ns.seznam.cz.
seznam.cz.              295     IN      NS      ms.seznam.cz.

;; AUTHORITY SECTION:
seznam.cz.              295     IN      NS      ms.seznam.cz.
seznam.cz.              295     IN      NS      ns.seznam.cz.

;; Query time: 37 msec
;; SERVER: 62.24.64.2#53(62.24.64.2)
;; WHEN: Thu Apr 20 09:28:35 2006
;; MSG SIZE  rcvd: 492


Thank you very much

Best Regards,

Tomas Brandysky, Internal IT Senior Administrator
- ---------------------------------------------------------------------
SuSE CR, s.r.o. e-mail: tbrandysky at suse.cz
Drahobejlova 27 tel:+420 296 542 377
190 00 Praha 9 fax:+420 296 542 374
Czech Republic http://www.suse.cz
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFERzii0oHPSLv2K40RAgkMAJ97gYdg28Y+7wK2MjZtemfDTH9pMwCdHLIV
DukDdW/ElE4TdSJ6KHGFncA=
=Vooo
-----END PGP SIGNATURE-----