[Pdns-users] problems with recursor

[bert hubert]

On Sat, Oct 06, 2007 at 11:16:53AM +0200, Marko Kobal wrote:
> I have problems with recursor, but don't know exactly  what could be the 
> issue. In general, the recursor works just fine, resolves any kind of 
> domains, however, in some special cases, the resolving returns NXDOMAIN, 
> althrough it should resolve the domain. The case is this:

> 2) Try to resolve the troubled domain:
> # dig @127.0.0.1 syssvarun.infrax.si

This domain is misconfigured in one of its three nameservers. Specifically,
'sverun.infrax.si' does not know about sysvarun.infrax.si:

$ dig +norecurs syssvarun.infrax.si @perun.infrax.si
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 65447
;; flags: qr aa; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

It appears this server has an older version of the infrax.si zone. The
reason you don't notice is that if you omit the '+norecurs', it will recurse
for you and then will find the answer from the other two nameservers.

Good luck!


> 
> ; <<>> DiG 9.3.3 <<>> syssvarun.infrax.si
> ;; global options:  printcmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 64525
> ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0
> 
> ;; QUESTION SECTION:
> ;syssvarun.infrax.si.           IN      A
> 
> ;; ANSWER SECTION:
> syssvarun.infrax.si.    3461    IN      A       89.212.81.4
> 
> ;; Query time: 1 msec
> ;; SERVER: 127.0.0.1#53(127.0.0.1)
> ;; WHEN: Sat Oct  6 10:23:01 2007
> ;; MSG SIZE  rcvd: 53
> 
> 
> 
> OK, everything is cool, domain has been properly resolved.
> 
> 3) After some time, let's say, after 15 minutes I try to reslove it again:
> 
> # dig @127.0.0.1 syssvarun.infrax.si
> 
> ; <<>> DiG 9.3.3 <<>> syssvarun.infrax.si
> ;; global options:  printcmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 57947
> ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
> 
> ;; QUESTION SECTION:
> ;syssvarun.infrax.si.           IN      A
> 
> ;; AUTHORITY SECTION:
> infrax.si.              3504    IN      SOA     svarun.infrax.si. 
> hostmaster.infrax.si. 1189488858 3600 1200 604800 3600
> 
> ;; Query time: 42 msec
> ;; SERVER: 127.0.0.1#53(127.0.0.1)
> ;; WHEN: Sat Oct  6 10:24:41 2007
> ;; MSG SIZE  rcvd: 91
> 
> 
> ??? Why NXDOMAIN? If I try to reslove that same domain via some other 
> public DNS, it resloves it with NOERROR - *always*! Furthermore, it I thy 
> to resolve some other domain within the same root domain, like "dig 
> @127.0.0.1 hostsvarun.infrax.si", I *always* get NOERROR.
> 
> If I try and get back to step 1) - restart recursor, etc I always get the 
> same scenario ... are there any problems with recursors caching?
> 
> 
> 
> 
> -- 
> Kind regards, Marko Kobal.
> _______________________________________________
> Pdns-users mailing list
> Pdns-users at mailman.powerdns.com
> http://mailman.powerdns.com/mailman/listinfo/pdns-users
> 
> 
> !DSPAM:470752ab103199655121033!

-- 
http://www.PowerDNS.com      Open source, database driven DNS Software 
http://netherlabs.nl              Open and Closed source services