[Pdns-users] Problem with a domain

bert hubert bert.hubert at netherlabs.nl
Tue Jun 14 13:42:36 UTC 2011 

On Tue, Jun 14, 2011 at 06:01:45AM -0700, djstux wrote:
> 
> Hi all,
> 
> I experience an issue with PowerDNS recursor and the domain
> dechiffrages.blog.lemonde.fr.

$ dig dechiffrages.blog.lemonde.fr @indom10.indomco.com
;; Warning: Message parser reports malformed message packet.
;; Truncated, retrying in TCP mode.

This issue is fixed in PowerDNS Recursor 3.3.1, which has not formally been
released, but can be found on
http://svn.powerdns.com/snapshots/pdns-recursor-3.3.1.tar.bz2

The root cause is indom10.indomco.com sending out a packet that has been
truncated in mid-record, which PowerDNS Recursor 3.3 has a problem with.

	Bert


> PDNS can't find an answer for this domain, as it works if I use dig to query
> the lemonde.fr name servers or with an online lookup tool.
> Here are some traces taken on our DNS recursor :
> [root at NS1 ~]# dig dechiffrages.blog.lemonde.fr @indom20.indomco.net
> 
> ; <<>> DiG 9.3.6-P1-RedHat-9.3.6-16.P1.el5 <<>> dechiffrages.blog.lemonde.fr
> @indom20.indomco.net
> ;; global options:  printcmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 53028
> ;; flags: qr rd; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0
> 
> ;; QUESTION SECTION:
> ;dechiffrages.blog.lemonde.fr.  IN      A
> 
> ;; ANSWER SECTION:
> dechiffrages.blog.lemonde.fr. 3600 IN   CNAME  
> blog.lemonde.fr.2-01-271d-000c.cdx.cedexis.net.
> 
> ;; Query time: 111 msec
> ;; SERVER: 69.170.135.194#53(69.170.135.194)
> ;; WHEN: Fri Jun 10 13:30:28 2011
> ;; MSG SIZE  rcvd: 106
> 
> 
> [root at NS1 ~]# dig dechiffrages.blog.lemonde.fr @127.0.0.1
> 
> ; <<>> DiG 9.3.6-P1-RedHat-9.3.6-16.P1.el5 <<>> dechiffrages.blog.lemonde.fr
> @127.0.0.1
> ;; global options:  printcmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 33325
> ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
> 
> ;; QUESTION SECTION:
> ;dechiffrages.blog.lemonde.fr.  IN      A
> 
> ;; Query time: 4472 msec
> ;; SERVER: 127.0.0.1#53(127.0.0.1)
> ;; WHEN: Fri Jun 10 13:30:59 2011
> ;; MSG SIZE  rcvd: 46
> 
> 
> /var/log/messages:Jun 10 13:30:50 NS1 pdns_recursor[967]: 1 [636] question
> for 'dechiffrages.blog.lemonde.fr.|A' from 127.0.0.1
> /var/log/messages:Jun 10 13:30:50 NS1 pdns_recursor[967]: [636]
> dechiffrages.blog.lemonde.fr.: Looking for CNAME cache hit of
> 'dechiffrages.blog.lemonde.fr.|CNAME'
> /var/log/messages:Jun 10 13:30:50 NS1 pdns_recursor[967]: [636]
> dechiffrages.blog.lemonde.fr.: No CNAME cache hit of
> 'dechiffrages.blog.lemonde.fr.|CNAME' found
> /var/log/messages:Jun 10 13:30:50 NS1 pdns_recursor[967]: [636]
> dechiffrages.blog.lemonde.fr.: No cache hit for
> 'dechiffrages.blog.lemonde.fr.|A', trying to find an appropriate NS record
> /var/log/messages:Jun 10 13:30:50 NS1 pdns_recursor[967]: [636]
> dechiffrages.blog.lemonde.fr.: Checking if we have NS in cache for
> 'dechiffrages.blog.lemonde.fr.'
> /var/log/messages:Jun 10 13:30:50 NS1 pdns_recursor[967]: [636]
> dechiffrages.blog.lemonde.fr.: no valid/useful NS in cache for
> 'dechiffrages.blog.lemonde.fr.'
> /var/log/messages:Jun 10 13:30:50 NS1 pdns_recursor[967]: [636]
> dechiffrages.blog.lemonde.fr.: Checking if we have NS in cache for
> 'blog.lemonde.fr.'
> /var/log/messages:Jun 10 13:30:50 NS1 pdns_recursor[967]: [636]
> dechiffrages.blog.lemonde.fr.: no valid/useful NS in cache for
> 'blog.lemonde.fr.'
> /var/log/messages:Jun 10 13:30:50 NS1 pdns_recursor[967]: [636]
> dechiffrages.blog.lemonde.fr.: Checking if we have NS in cache for
> 'lemonde.fr.'
> /var/log/messages:Jun 10 13:30:50 NS1 pdns_recursor[967]: [636]
> dechiffrages.blog.lemonde.fr.: NS (with ip, or non-glue) in cache for
> 'lemonde.fr.' -> 'indom10.indomco.com.'
> /var/log/messages:Jun 10 13:30:50 NS1 pdns_recursor[967]: [636]
> dechiffrages.blog.lemonde.fr.: within bailiwick: 0, not in cache / did not
> look at cache
> /var/log/messages:Jun 10 13:30:50 NS1 pdns_recursor[967]: [636]
> dechiffrages.blog.lemonde.fr.: NS (with ip, or non-glue) in cache for
> 'lemonde.fr.' -> 'indom130.indomco.org.'
> /var/log/messages:Jun 10 13:30:50 NS1 pdns_recursor[967]: [636]
> dechiffrages.blog.lemonde.fr.: within bailiwick: 0, not in cache / did not
> look at cache
> /var/log/messages:Jun 10 13:30:50 NS1 pdns_recursor[967]: [636]
> dechiffrages.blog.lemonde.fr.: NS (with ip, or non-glue) in cache for
> 'lemonde.fr.' -> 'indom20.indomco.net.'
> /var/log/messages:Jun 10 13:30:50 NS1 pdns_recursor[967]: [636]
> dechiffrages.blog.lemonde.fr.: within bailiwick: 0, not in cache / did not
> look at cache
> /var/log/messages:Jun 10 13:30:50 NS1 pdns_recursor[967]: [636]
> dechiffrages.blog.lemonde.fr.: NS (with ip, or non-glue) in cache for
> 'lemonde.fr.' -> 'indom30.indomco.fr.'
> /var/log/messages:Jun 10 13:30:50 NS1 pdns_recursor[967]: [636]
> dechiffrages.blog.lemonde.fr.: within bailiwick: 0, not in cache / did not
> look at cache
> /var/log/messages:Jun 10 13:30:50 NS1 pdns_recursor[967]: [636]
> dechiffrages.blog.lemonde.fr.: NS (with ip, or non-glue) in cache for
> 'lemonde.fr.' -> 'indom80.indomco.hk.'
> /var/log/messages:Jun 10 13:30:50 NS1 pdns_recursor[967]: [636]
> dechiffrages.blog.lemonde.fr.: within bailiwick: 0, not in cache / did not
> look at cache
> /var/log/messages:Jun 10 13:30:50 NS1 pdns_recursor[967]: [636]
> dechiffrages.blog.lemonde.fr.: We have NS in cache for 'lemonde.fr.'
> (flawedNSSet=0)
> /var/log/messages:Jun 10 13:30:50 NS1 pdns_recursor[967]: [636]
> dechiffrages.blog.lemonde.fr.: Cache consultations done, have 5 NS to
> contact
> /var/log/messages:Jun 10 13:30:50 NS1 pdns_recursor[967]: [636]
> dechiffrages.blog.lemonde.fr.: Nameservers: indom30.indomco.fr.(9ms),
> indom10.indomco.com.(21ms), indom130.indomco.org.(21ms),
> /var/log/messages:Jun 10 13:30:50 NS1 pdns_recursor[967]: [636]
> dechiffrages.blog.lemonde.fr.:              indom20.indomco.net.(23ms),
> indom80.indomco.hk.(23ms)
> /var/log/messages:Jun 10 13:30:50 NS1 pdns_recursor[967]: [636]
> dechiffrages.blog.lemonde.fr.: Trying to resolve NS 'indom30.indomco.fr.'
> (1/5)
> /var/log/messages:Jun 10 13:30:50 NS1 pdns_recursor[967]: [636]
> dechiffrages.blog.lemonde.fr.: Resolved 'lemonde.fr.' NS indom30.indomco.fr.
> to: 213.205.102.3
> /var/log/messages:Jun 10 13:30:50 NS1 pdns_recursor[967]: [636]
> dechiffrages.blog.lemonde.fr.: Trying IP 213.205.102.3:53, asking
> 'dechiffrages.blog.lemonde.fr.|A'
> /var/log/messages:Jun 10 13:30:52 NS1 pdns_recursor[967]: [636]
> dechiffrages.blog.lemonde.fr.: timeout resolving
> /var/log/messages:Jun 10 13:30:52 NS1 pdns_recursor[967]: [636]
> dechiffrages.blog.lemonde.fr.: Trying to resolve NS 'indom10.indomco.com.'
> (2/5)
> /var/log/messages:Jun 10 13:30:52 NS1 pdns_recursor[967]: [636]
> dechiffrages.blog.lemonde.fr.: Resolved 'lemonde.fr.' NS
> indom10.indomco.com. to: 217.174.200.97
> /var/log/messages:Jun 10 13:30:52 NS1 pdns_recursor[967]: [636]
> dechiffrages.blog.lemonde.fr.: Trying IP 217.174.200.97:53, asking
> 'dechiffrages.blog.lemonde.fr.|A'
> /var/log/messages:Jun 10 13:30:54 NS1 pdns_recursor[967]: [636]
> dechiffrages.blog.lemonde.fr.: timeout resolving
> /var/log/messages:Jun 10 13:30:54 NS1 pdns_recursor[967]: [636]
> dechiffrages.blog.lemonde.fr.: Trying to resolve NS 'indom130.indomco.org.'
> (3/5)
> /var/log/messages:Jun 10 13:30:54 NS1 pdns_recursor[967]: [636]
> dechiffrages.blog.lemonde.fr.: Resolved 'lemonde.fr.' NS
> indom130.indomco.org. to: 209.235.192.171
> /var/log/messages:Jun 10 13:30:54 NS1 pdns_recursor[967]: [636]
> dechiffrages.blog.lemonde.fr.: Trying IP 209.235.192.171:53, asking
> 'dechiffrages.blog.lemonde.fr.|A'
> /var/log/messages:Jun 10 13:30:55 NS1 pdns_recursor[967]: 1 [637] question
> for 'dechiffrages.blog.lemonde.fr.|A' from 127.0.0.1
> /var/log/messages:Jun 10 13:30:55 NS1 pdns_recursor[967]: [637]
> dechiffrages.blog.lemonde.fr.: Looking for CNAME cache hit of
> 'dechiffrages.blog.lemonde.fr.|CNAME'
> /var/log/messages:Jun 10 13:30:55 NS1 pdns_recursor[967]: [637]
> dechiffrages.blog.lemonde.fr.: No CNAME cache hit of
> 'dechiffrages.blog.lemonde.fr.|CNAME' found
> /var/log/messages:Jun 10 13:30:55 NS1 pdns_recursor[967]: [637]
> dechiffrages.blog.lemonde.fr.: No cache hit for
> 'dechiffrages.blog.lemonde.fr.|A', trying to find an appropriate NS record
> /var/log/messages:Jun 10 13:30:55 NS1 pdns_recursor[967]: [637]
> dechiffrages.blog.lemonde.fr.: Checking if we have NS in cache for
> 'dechiffrages.blog.lemonde.fr.'
> /var/log/messages:Jun 10 13:30:55 NS1 pdns_recursor[967]: [637]
> dechiffrages.blog.lemonde.fr.: no valid/useful NS in cache for
> 'dechiffrages.blog.lemonde.fr.'
> /var/log/messages:Jun 10 13:30:55 NS1 pdns_recursor[967]: [637]
> dechiffrages.blog.lemonde.fr.: Checking if we have NS in cache for
> 'blog.lemonde.fr.'
> /var/log/messages:Jun 10 13:30:55 NS1 pdns_recursor[967]: [637]
> dechiffrages.blog.lemonde.fr.: no valid/useful NS in cache for
> 'blog.lemonde.fr.'
> /var/log/messages:Jun 10 13:30:55 NS1 pdns_recursor[967]: [637]
> dechiffrages.blog.lemonde.fr.: Checking if we have NS in cache for
> 'lemonde.fr.'
> /var/log/messages:Jun 10 13:30:55 NS1 pdns_recursor[967]: [637]
> dechiffrages.blog.lemonde.fr.: NS (with ip, or non-glue) in cache for
> 'lemonde.fr.' -> 'indom10.indomco.com.'
> /var/log/messages:Jun 10 13:30:55 NS1 pdns_recursor[967]: [637]
> dechiffrages.blog.lemonde.fr.: within bailiwick: 0, not in cache / did not
> look at cache
> /var/log/messages:Jun 10 13:30:55 NS1 pdns_recursor[967]: [637]
> dechiffrages.blog.lemonde.fr.: NS (with ip, or non-glue) in cache for
> 'lemonde.fr.' -> 'indom130.indomco.org.'
> /var/log/messages:Jun 10 13:30:55 NS1 pdns_recursor[967]: [637]
> dechiffrages.blog.lemonde.fr.: within bailiwick: 0, not in cache / did not
> look at cache
> /var/log/messages:Jun 10 13:30:55 NS1 pdns_recursor[967]: [637]
> dechiffrages.blog.lemonde.fr.: NS (with ip, or non-glue) in cache for
> 'lemonde.fr.' -> 'indom20.indomco.net.'
> /var/log/messages:Jun 10 13:30:55 NS1 pdns_recursor[967]: [637]
> dechiffrages.blog.lemonde.fr.: within bailiwick: 0, not in cache / did not
> look at cache
> /var/log/messages:Jun 10 13:30:55 NS1 pdns_recursor[967]: [637]
> dechiffrages.blog.lemonde.fr.: NS (with ip, or non-glue) in cache for
> 'lemonde.fr.' -> 'indom30.indomco.fr.'
> /var/log/messages:Jun 10 13:30:55 NS1 pdns_recursor[967]: [637]
> dechiffrages.blog.lemonde.fr.: within bailiwick: 0, not in cache / did not
> look at cache
> /var/log/messages:Jun 10 13:30:55 NS1 pdns_recursor[967]: [637]
> dechiffrages.blog.lemonde.fr.: NS (with ip, or non-glue) in cache for
> 'lemonde.fr.' -> 'indom80.indomco.hk.'
> /var/log/messages:Jun 10 13:30:55 NS1 pdns_recursor[967]: [637]
> dechiffrages.blog.lemonde.fr.: within bailiwick: 0, not in cache / did not
> look at cache
> /var/log/messages:Jun 10 13:30:55 NS1 pdns_recursor[967]: [637]
> dechiffrages.blog.lemonde.fr.: We have NS in cache for 'lemonde.fr.'
> (flawedNSSet=0)
> /var/log/messages:Jun 10 13:30:55 NS1 pdns_recursor[967]: [637]
> dechiffrages.blog.lemonde.fr.: Cache consultations done, have 5 NS to
> contact
> /var/log/messages:Jun 10 13:30:55 NS1 pdns_recursor[967]: [637]
> dechiffrages.blog.lemonde.fr.: Nameservers: indom130.indomco.org.(19ms),
> indom20.indomco.net.(21ms), indom80.indomco.hk.(21ms),
> /var/log/messages:Jun 10 13:30:55 NS1 pdns_recursor[967]: [637]
> dechiffrages.blog.lemonde.fr.:              indom10.indomco.com.(919ms),
> indom30.indomco.fr.(919ms)
> /var/log/messages:Jun 10 13:30:55 NS1 pdns_recursor[967]: [637]
> dechiffrages.blog.lemonde.fr.: Trying to resolve NS 'indom130.indomco.org.'
> (1/5)
> /var/log/messages:Jun 10 13:30:55 NS1 pdns_recursor[967]: [637]
> dechiffrages.blog.lemonde.fr.: Resolved 'lemonde.fr.' NS
> indom130.indomco.org. to: 209.235.192.171
> /var/log/messages:Jun 10 13:30:55 NS1 pdns_recursor[967]: [637]
> dechiffrages.blog.lemonde.fr.: Trying IP 209.235.192.171:53, asking
> 'dechiffrages.blog.lemonde.fr.|A'
> /var/log/messages:Jun 10 13:30:55 NS1 pdns_recursor[967]: [636]
> dechiffrages.blog.lemonde.fr.: timeout resolving
> /var/log/messages:Jun 10 13:30:55 NS1 pdns_recursor[967]: [636]
> dechiffrages.blog.lemonde.fr.: Trying to resolve NS 'indom20.indomco.net.'
> (4/5)
> /var/log/messages:Jun 10 13:30:55 NS1 pdns_recursor[967]: [636]
> dechiffrages.blog.lemonde.fr.: Resolved 'lemonde.fr.' NS
> indom20.indomco.net. to: 69.170.135.194
> /var/log/messages:Jun 10 13:30:55 NS1 pdns_recursor[967]: [636]
> dechiffrages.blog.lemonde.fr.: Trying IP 69.170.135.194:53, asking
> 'dechiffrages.blog.lemonde.fr.|A'
> /var/log/messages:Jun 10 13:30:57 NS1 pdns_recursor[967]: [637]
> dechiffrages.blog.lemonde.fr.: timeout resolving
> /var/log/messages:Jun 10 13:30:57 NS1 pdns_recursor[967]: [637]
> dechiffrages.blog.lemonde.fr.: Trying to resolve NS 'indom20.indomco.net.'
> (2/5)
> /var/log/messages:Jun 10 13:30:57 NS1 pdns_recursor[967]: [637]
> dechiffrages.blog.lemonde.fr.: Resolved 'lemonde.fr.' NS
> indom20.indomco.net. to: 69.170.135.194
> /var/log/messages:Jun 10 13:30:57 NS1 pdns_recursor[967]: [637]
> dechiffrages.blog.lemonde.fr.: Trying IP 69.170.135.194:53, asking
> 'dechiffrages.blog.lemonde.fr.|A'
> /var/log/messages:Jun 10 13:30:57 NS1 pdns_recursor[967]: [636]
> dechiffrages.blog.lemonde.fr.: timeout resolving
> /var/log/messages:Jun 10 13:30:57 NS1 pdns_recursor[967]: [636]
> dechiffrages.blog.lemonde.fr.: Trying to resolve NS 'indom80.indomco.hk.'
> (5/5)
> /var/log/messages:Jun 10 13:30:57 NS1 pdns_recursor[967]: [636]
> dechiffrages.blog.lemonde.fr.: Resolved 'lemonde.fr.' NS indom80.indomco.hk.
> to: 202.157.180.150
> /var/log/messages:Jun 10 13:30:57 NS1 pdns_recursor[967]: [636]
> dechiffrages.blog.lemonde.fr.: Trying IP 202.157.180.150:53, asking
> 'dechiffrages.blog.lemonde.fr.|A'
> /var/log/messages:Jun 10 13:30:59 NS1 pdns_recursor[967]: [637]
> dechiffrages.blog.lemonde.fr.: timeout resolving
> /var/log/messages:Jun 10 13:30:59 NS1 pdns_recursor[967]: [637]
> dechiffrages.blog.lemonde.fr.: Trying to resolve NS 'indom80.indomco.hk.'
> (3/5)
> /var/log/messages:Jun 10 13:30:59 NS1 pdns_recursor[967]: [637]
> dechiffrages.blog.lemonde.fr.: Resolved 'lemonde.fr.' NS indom80.indomco.hk.
> to: 202.157.180.150
> /var/log/messages:Jun 10 13:30:59 NS1 pdns_recursor[967]: [637]
> dechiffrages.blog.lemonde.fr.: Trying IP 202.157.180.150:53, asking
> 'dechiffrages.blog.lemonde.fr.|A'
> /var/log/messages:Jun 10 13:30:59 NS1 pdns_recursor[967]: [636]
> dechiffrages.blog.lemonde.fr.: timeout resolving
> /var/log/messages:Jun 10 13:30:59 NS1 pdns_recursor[967]: [636]
> dechiffrages.blog.lemonde.fr.: Failed to resolve via any of the 5 offered NS
> at level 'lemonde.fr.'
> /var/log/messages:Jun 10 13:30:59 NS1 pdns_recursor[967]: [636]
> dechiffrages.blog.lemonde.fr.: failed (res=-1)
> /var/log/messages:Jun 10 13:30:59 NS1 pdns_recursor[967]: 1 [636] answer to
> question 'dechiffrages.blog.lemonde.fr.|A': 0 answers, 0 additional, took 5
> packets, 0 throttled, 5 timeouts, 0 tcp connections, rcode=2
> /var/log/messages:Jun 10 13:31:01 NS1 pdns_recursor[967]: [637]
> dechiffrages.blog.lemonde.fr.: timeout resolving
> /var/log/messages:Jun 10 13:31:01 NS1 pdns_recursor[967]: [637]
> dechiffrages.blog.lemonde.fr.: Trying to resolve NS 'indom10.indomco.com.'
> (4/5)
> /var/log/messages:Jun 10 13:31:01 NS1 pdns_recursor[967]: [637]
> dechiffrages.blog.lemonde.fr.: Resolved 'lemonde.fr.' NS
> indom10.indomco.com. to: 217.174.200.97
> /var/log/messages:Jun 10 13:31:01 NS1 pdns_recursor[967]: [637]
> dechiffrages.blog.lemonde.fr.: Trying IP 217.174.200.97:53, asking
> 'dechiffrages.blog.lemonde.fr.|A'
> /var/log/messages:Jun 10 13:31:01 NS1 pdns_recursor[967]: [637]
> dechiffrages.blog.lemonde.fr.: query throttled
> /var/log/messages:Jun 10 13:31:01 NS1 pdns_recursor[967]: [637]
> dechiffrages.blog.lemonde.fr.: Trying to resolve NS 'indom30.indomco.fr.'
> (5/5)
> /var/log/messages:Jun 10 13:31:01 NS1 pdns_recursor[967]: [637]
> dechiffrages.blog.lemonde.fr.: Resolved 'lemonde.fr.' NS indom30.indomco.fr.
> to: 213.205.102.3
> /var/log/messages:Jun 10 13:31:01 NS1 pdns_recursor[967]: [637]
> dechiffrages.blog.lemonde.fr.: Trying IP 213.205.102.3:53, asking
> 'dechiffrages.blog.lemonde.fr.|A'
> /var/log/messages:Jun 10 13:31:01 NS1 pdns_recursor[967]: [637]
> dechiffrages.blog.lemonde.fr.: query throttled
> /var/log/messages:Jun 10 13:31:01 NS1 pdns_recursor[967]: [637]
> dechiffrages.blog.lemonde.fr.: Failed to resolve via any of the 5 offered NS
> at level 'lemonde.fr.'
> /var/log/messages:Jun 10 13:31:01 NS1 pdns_recursor[967]: [637]
> dechiffrages.blog.lemonde.fr.: failed (res=-1)
> /var/log/messages:Jun 10 13:31:01 NS1 pdns_recursor[967]: 1 [637] answer to
> question 'dechiffrages.blog.lemonde.fr.|A': 0 answers, 0 additional, took 3
> packets, 2 throttled, 3 timeouts, 0 tcp connections, rcode=2
> 
> I can't understand why PDNS fails to look up the record. I see the SERVFAIL
> answer, but why ?
> 
> We use PDNS Recursor 3.3.1.
> 
> Any help appreciated !
> 
> /DJ 
> -- 
> View this message in context: http://old.nabble.com/Problem-with-a-domain-tp31842549p31842549.html
> Sent from the PowerDNS mailing list archive at Nabble.com.
> 
> _______________________________________________
> Pdns-users mailing list
> Pdns-users at mailman.powerdns.com
> http://mailman.powerdns.com/mailman/listinfo/pdns-users
>

More information about the Pdns-users mailing list