[Pdns-users] problems with recursor

[Marko Kobal]

Hi,

Thanks Bert, I've forwarded you comment to the admin of the troubled domain.



-- 
Kind regards, Marko Kobal.


bert hubert pravi:
> On Sat, Oct 06, 2007 at 11:16:53AM +0200, Marko Kobal wrote:
>> I have problems with recursor, but don't know exactly  what could be the 
>> issue. In general, the recursor works just fine, resolves any kind of 
>> domains, however, in some special cases, the resolving returns NXDOMAIN, 
>> althrough it should resolve the domain. The case is this:
> 
>> 2) Try to resolve the troubled domain:
>> # dig @127.0.0.1 syssvarun.infrax.si
> 
> This domain is misconfigured in one of its three nameservers. Specifically,
> 'sverun.infrax.si' does not know about sysvarun.infrax.si:
> 
> $ dig +norecurs syssvarun.infrax.si @perun.infrax.si
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 65447
> ;; flags: qr aa; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
> 
> It appears this server has an older version of the infrax.si zone. The
> reason you don't notice is that if you omit the '+norecurs', it will recurse
> for you and then will find the answer from the other two nameservers.
> 
> Good luck!
> 
> 
>> ; <<>> DiG 9.3.3 <<>> syssvarun.infrax.si
>> ;; global options:  printcmd
>> ;; Got answer:
>> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 64525
>> ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0
>>
>> ;; QUESTION SECTION:
>> ;syssvarun.infrax.si.           IN      A
>>
>> ;; ANSWER SECTION:
>> syssvarun.infrax.si.    3461    IN      A       89.212.81.4
>>
>> ;; Query time: 1 msec
>> ;; SERVER: 127.0.0.1#53(127.0.0.1)
>> ;; WHEN: Sat Oct  6 10:23:01 2007
>> ;; MSG SIZE  rcvd: 53
>>
>>
>>
>> OK, everything is cool, domain has been properly resolved.
>>
>> 3) After some time, let's say, after 15 minutes I try to reslove it again:
>>
>> # dig @127.0.0.1 syssvarun.infrax.si
>>
>> ; <<>> DiG 9.3.3 <<>> syssvarun.infrax.si
>> ;; global options:  printcmd
>> ;; Got answer:
>> ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 57947
>> ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
>>
>> ;; QUESTION SECTION:
>> ;syssvarun.infrax.si.           IN      A
>>
>> ;; AUTHORITY SECTION:
>> infrax.si.              3504    IN      SOA     svarun.infrax.si. 
>> hostmaster.infrax.si. 1189488858 3600 1200 604800 3600
>>
>> ;; Query time: 42 msec
>> ;; SERVER: 127.0.0.1#53(127.0.0.1)
>> ;; WHEN: Sat Oct  6 10:24:41 2007
>> ;; MSG SIZE  rcvd: 91
>>
>>
>> ??? Why NXDOMAIN? If I try to reslove that same domain via some other 
>> public DNS, it resloves it with NOERROR - *always*! Furthermore, it I thy 
>> to resolve some other domain within the same root domain, like "dig 
>> @127.0.0.1 hostsvarun.infrax.si", I *always* get NOERROR.
>>
>> If I try and get back to step 1) - restart recursor, etc I always get the 
>> same scenario ... are there any problems with recursors caching?
>>
>>
>>
>>
>> -- 
>> Kind regards, Marko Kobal.
>> _______________________________________________
>> Pdns-users mailing list
>> Pdns-users at mailman.powerdns.com
>> http://mailman.powerdns.com/mailman/listinfo/pdns-users
>>
>>
>> !DSPAM:470752ab103199655121033!
>