[Pdns-users] mx failure scenario

Kelsey Cummings kgc at corp.sonic.net
Fri Dec 22 18:10:02 UTC 2006


On Thu, Dec 21, 2006 at 10:40:09PM +0100, bert hubert wrote:
> On Thu, Dec 21, 2006 at 10:00:30AM -0800, gnu not unix wrote:
> 
> > I have a problem with my parent zone (sf.ca.us), where they
> > are running powerdns (they used to run bind), and this change
> > seems to have resulted in my loss of email connectivity.
> 
> Something definitely is odd:
> $ dig +norecurs -t mx wraith.sf.ca.us @B.AUTH-NS.SONIC.NET.
...
 
> This SOA record should not be there. I have no easy explanation why it is
> there.

Bert, it looks like PowerDNS is a little inconsistent about returning the
SOA along with delegation.  For delegations with glue it also returns the
SOA 

$ dig +norecurs -t mx kgctest.sf.ca.us @B.AUTH-NS.SONIC.NET.
...
sf.ca.us.               259200  IN      SOA     ns1.sonic.net.
hostmaster.sonic.net. 2006122104 3600 300 1209600 3600

Whereas if there is no glue, no SOA:

$ dig +norecurs -t mx kgctest2.sf.ca.us @B.AUTH-NS.SONIC.NET.

However, in any case if you actually ask for the SOA, you get the parent
zone's SOA.

$ dig +norecurs -t SOA kgctest.sf.ca.us @B.AUTH-NS.SONIC.NET. 
...
sf.ca.us.               259200  IN      SOA     ns1.sonic.net.
hostmaster.sonic.net. 2006122104 3600 300 1209600 3600

$ dig +norecurs -t SOA kgctest2.sf.ca.us @B.AUTH-NS.SONIC.NET. 
...
sf.ca.us.               259200  IN      SOA     ns1.sonic.net.
hostmaster.sonic.net. 2006122104 3600 300 1209600 3600

Bind, does not return SOAs for any of these queries which I belive is the
expected behavior - it just returns the NS records w/ or w/o glue as
appropriate.

>From what I can tell this does not adversely affect a bind recursive server
from being able to follow the chain of NS records correctly.  Whatever
problem wraith.sf.ca.us is having, I've seen nothing that suggests it has
anything to do with powerdns.
 
-- 
Kelsey Cummings - kgc at corp.sonic.net      sonic.net, inc.
System Architect                          2260 Apollo Way
707.522.1000                              Santa Rosa, CA 95407


More information about the Pdns-users mailing list