[Pdns-users] NXDOMAIN only to some requester

[Aleksandar Lazic]

Dear listmember,

I hope you can help me to solve this issue.

Some DNS-Server send NXDOMAIN when they request my domain.

none.at

The authorative pdns version is

###
PowerDNS 2.9.21 (C) 2001-2006 PowerDNS.COM BV (Jan 13 2010, 19:21:08,
gcc 4.2.4 (Ubuntu 4.2.4-1ubuntu3)) starting up

PowerDNS comes with ABSOLUTELY NO WARRANTY. This is free software, and
you are welcome to redistribute it according to the terms of the GPL
version 2.

Set effective group id to ...
Set effective user id to ...
DNS Proxy launched, local port 22231, remote 127.0.0.1:53
Master/slave communicator launching
Creating backend connection for TCP
gmysql Connection succesful
All slave domains are fresh
gmysql Connection succesful
No master domains need notifications
About to create 3 backend threads for UDP
gmysql Connection succesful
gmysql Connection succesful
gmysql Connection succesful
Done launching threads, ready to distribute questions
###

The recursor version is:

###
PowerDNS recursor 3.1.4 (C) 2001-2006 PowerDNS.COM BV (Apr 20 2008,
01:39:58, gcc 4.2.3 (Ubuntu 4.2.3-2ubuntu7)) starting up

PowerDNS comes with ABSOLUTELY NO WARRANTY. This is free software, and
you are welcome to redistribute it according to the terms of the GPL
version 2.

Operating in 32 bits mode
Reading random entropy from '/dev/urandom'
Only allowing queries from: 127.0.0.0/8, 10.0.0.0/8, 192.168.0.0/16, 172.16.0.0/12, ::1/128, fe80::/10
Inserting rfc 1918 private space zones
Listening for UDP queries on 127.0.0.1:53
Listening for TCP queries on 127.0.0.1:53
Done priming cache with root hints
Calling daemonize, going to background
Enabled 'epoll' multiplexer
Refreshed . records
###


Here the answer from my ns1

###
dig   @85.232.72.235 none.at  mx

; <<>> DiG 9.2.4 <<>> @85.232.72.235 none.at mx
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 24801
;; flags: qr aa rd; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 2

;; QUESTION SECTION:
;none.at.                       IN      MX

;; ANSWER SECTION:
none.at.                10800   IN      MX      300 ns1.bursik.net.
none.at.                10800   IN      MX      500 backupmx1.bitrace.net.

;; ADDITIONAL SECTION:
backupmx1.bitrace.net.  86400   IN      A       83.64.42.254
ns1.bursik.net.         10800   IN      A       85.232.72.235

;; Query time: 1 msec
;; SERVER: 85.232.72.235#53(85.232.72.235)
;; WHEN: Sun Apr 18 15:43:34 2010
;; MSG SIZE  rcvd: 121
###

When I ask now one of the ISP ns I got this:

###
dig   @dns1.inode.at none.at  mx

; <<>> DiG 9.2.4 <<>> @dns1.inode.at none.at mx
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 6256
;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;none.at.                       IN      MX

;; Query time: 3 msec
;; SERVER: 195.34.133.133#53(dns1.inode.at)
;; WHEN: Sun Apr 18 15:50:04 2010
;; MSG SIZE  rcvd: 25
###

###
pdns[9079]: Query: select content,ttl,prio,type,domain_id,name from
records where name='dns1.inode.at'

pdns_recursor[26805]: [8918] question for 'dns1.inode.at.|AAAA' from
127.0.0.1

pdns_recursor[26805]: [8918] answer to question 'dns1.inode.at.|AAAA': 0
answers, 0 additional, took 1 packets, 0 throttled, 0 timeouts, 0 tcp
connections, rcode=0

pdns[9079]: Query: select content,ttl,prio,type,domain_id,name from
records where name='dns1.inode.at.bursik.net'

pdns_recursor[26805]: [8919] question for
'dns1.inode.at.bursik.net.|AAAA' from 127.0.0.1

pdns[9079]: Query: select content,ttl,prio,type,domain_id,name from
records where type='SOA' and name='dns1.inode.at.bursik.net'

pdns[9079]: Authoritative NXDOMAIN to 85.232.72.235 for
'dns1.inode.at.bursik.net' (AAAA)

pdns_recursor[26805]: [8919] answer to question
'dns1.inode.at.bursik.net.|AAAA': 0 answers, 0 additional, took 1
packets, 0 throttled, 0 timeouts, 0 tcp connections, rcode=3

pdns_recursor[26805]: [8920] question for 'dns1.inode.at.|A' from
127.0.0.1

pdns_recursor[26805]: [8920] answer to question 'dns1.inode.at.|A': 1
answers, 0 additional, took 0 packets, 0 throttled, 0 timeouts, 0 tcp
connections, rcode=0
###

What I not understand is who/where the .bursik.net comes from?
Whay happen this only to some servers and not to all?

If you need some more information please don't hesitate to request it
from me.

Thanks for help.

Aleks