[Pdns-users] Non authoritive secondary & recursion

[Augie Schwer]

Is there IPv6 involved anywhere here? Like your client has an IPv6
link, or your server has a AAAA record?

I've seen resolvers fail in the same way you mention when they send
their query to the AAAA address but they don't have an IPv6 link, they
then send the request to the A record address, but the answer never
makes it back to the client because the client code didn't wait around
for an answer.

--Augie

On Fri, Feb 13, 2009 at 2:11 PM, Sean Boran <sean at boran.com> wrote:
> I'm still stuck with this problem and would really appreciate some help.
> Although pdns is answering a query correctly, the result is being
> ignored as "ecursion not available"
>
> I use nslookup as opposed to dig, because the OS is using the same
> resolver libs as nslookup (I believe) and it means that the pdns
> answers are being ignored.
>
> Doing a nolookup without specifying the server, for some reason the
> answer coming back is not believed. Sniffing shows the correct answer
> "A 193.5.227.236" coming back, but nslookup reports "Got recursion not
> available from 193.5.227.236"
>
> nslookup sisns3.vptt.ch
> ;; Got recursion not available from 193.5.227.236, trying next server
> 23:02:50.842166 IP 193.5.227.232.32860 > 193.5.227.236.53: 47807+ A?
> sisns3.vptt.ch. (32)
>        0x0000:  4500 003c 0000 4000 4011 f0d0 c105 e3e8  E..<.. at .@.......
>        0x0010:  c105 e3ec 805c 0035 0028 12c3 babf 0100  .....\.5.(......
>        0x0020:  0001 0000 0000 0000 0673 6973 6e73 3304  .........sisns3.
>        0x0030:  7670 7474 0263 6800 0001 0001            vptt.ch.....
> 23:02:50.842396 IP 193.5.227.236.53 > 193.5.227.232.32860: 47807*-
> 1/0/0 A 193.5.227.236 (48)
>        0x0000:  4500 004c 0000 4000 4011 f0c0 c105 e3ec  E..L.. at .@.......
>        0x0010:  c105 e3e8 0035 805c 0038 4a2a babf 8500  .....5.\.8J*....
>        0x0020:  0001 0001 0000 0000 0673 6973 6e73 3304  .........sisns3.
>        0x0030:  7670 7474 0263 6800 0001 0001 c00c 0001  vptt.ch.........
>        0x0040:  0001 0001 5180 0004 c105 e3ec            ....Q.......
>
>
> When the server is specified, nslookup believes the answer, although
> the wire packets look identical to above:
> nslookup sisns3.vptt.ch 193.5.227.236
> Server:         193.5.227.236
> Address:        193.5.227.236#53
> Name:   sisns3.vptt.ch
> Address: 193.5.227.236
>
>
> 23:02:48.092880 IP 193.5.227.232.32860 > 193.5.227.236.53: 43960+ A?
> sisns3.vptt.ch. (32)
>        0x0000:  4500 003c 0000 4000 4011 f0d0 c105 e3e8  E..<.. at .@.......
>        0x0010:  c105 e3ec 805c 0035 0028 21ca abb8 0100  .....\.5.(!.....
>        0x0020:  0001 0000 0000 0000 0673 6973 6e73 3304  .........sisns3.
>        0x0030:  7670 7474 0263 6800 0001 0001            vptt.ch.....
> 23:02:48.093761 IP 193.5.227.236.53 > 193.5.227.232.32860: 43960*-
> 1/0/0 A 193.5.227.236 (48)
>        0x0000:  4500 004c 0000 4000 4011 f0c0 c105 e3ec  E..L.. at .@.......
>        0x0010:  c105 e3e8 0035 805c 0038 4a2a abb8 8500  .....5.\.8J*....
>        0x0020:  0001 0001 0000 0000 0673 6973 6e73 3304  .........sisns3.
>        0x0030:  7670 7474 0263 6800 0001 0001 c00c 0001  vptt.ch.........
>        0x0040:  0001 0001 5180 0004 c105 e3ec            ....Q.......
>
> I've spend a lot of time googling, and related emails on this topic
> were not conclusive.
>
> Thanks in advance,
>
> Sean
>
>
> 2009/2/10 Sean Boran:
>> If I query the server with nslookup, relying on the fact that its the first
>> entry in resolv.conf, powerdns does not respond, probablybecause its a
>> recursive query?
>>
>> $ nslookup sisns3.vptt.ch
>> ;; Got recursion not available from 193.5.227.236, trying next server
>>
>> On the otherhand, an explicit nslookup to that powerdns answer, for the same
>> address, works fine:
>>
>>  nslookup sisns3.vptt.ch 193.5.227.236
>> Server:         193.5.227.236
>> Address:        193.5.227.236#53
>> Name:   sisns3.vptt.ch
>> Address: 193.5.227.236
>>
>>
>> Thanks for any tips...
>>
> _______________________________________________
> Pdns-users mailing list
> Pdns-users at mailman.powerdns.com
> http://mailman.powerdns.com/mailman/listinfo/pdns-users
>



-- 
Augie Schwer    -    Augie at Schwer.us    -    http://schwer.us
Key fingerprint = 9815 AE19 AFD1 1FE7 5DEE 2AC3 CB99 2784 27B0 C072