[Pdns-users] problem resolving completely with pdns-recursor-3.3.1

[ktm at rice.edu]

Dear PDNS community,

Just to follow up. I went ahead and opened ticket #598 against
pdns-recursor-3.3.1 for this matter.

Regards,
Ken

On Thu, Oct 11, 2012 at 08:22:47AM -0500, ktm at rice.edu wrote:
> Hi PDNS community,
> 
> Running pdns-recursor 3.3.1 behind pdns-2.9.22 I am having
> a problem resolving the following host:
> 
> wwwa.nko.navy.mil
> 
> Here is a dig against one of the servers:
> 
> $ dig wwwa.nko.navy.mil @ns1.rice.edu
> 
> ; <<>> DiG 9.7.3-P3-RedHat-9.7.3-8.P3.el6_2.3 <<>> wwwa.nko.navy.mil @ns1.rice.edu
> ;; global options: +cmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 64096
> ;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0
> 
> ;; QUESTION SECTION:
> ;wwwa.nko.navy.mil.		IN	A
> 
> ;; ANSWER SECTION:
> wwwa.nko.navy.mil.	180	IN	CNAME	wwwa.nko.navy.mil.apps.gcds.disa.mil.
> wwwa.nko.navy.mil.apps.gcds.disa.mil. 300 IN CNAME origin-wwwa.nko.navy.mil.
> 
> ;; Query time: 164 msec
> ;; SERVER: 128.42.209.32#53(128.42.209.32)
> ;; WHEN: Thu Oct 11 08:17:53 2012
> ;; MSG SIZE  rcvd: 108
> 
> Note, that the CNAME origin-wwwa.nko.navy.mil is not looked up to
> give the hosts actual IP address:
> 
> $ dig origin-wwwa.nko.navy.mil @ns1.rice.edu
> 
> ; <<>> DiG 9.7.3-P3-RedHat-9.7.3-8.P3.el6_2.3 <<>> origin-wwwa.nko.navy.mil @ns1.rice.edu
> ;; global options: +cmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 21780
> ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0
> 
> ;; QUESTION SECTION:
> ;origin-wwwa.nko.navy.mil.	IN	A
> 
> ;; ANSWER SECTION:
> origin-wwwa.nko.navy.mil. 180	IN	A	160.125.250.20
> 
> ;; Query time: 60 msec
> ;; SERVER: 128.42.209.32#53(128.42.209.32)
> ;; WHEN: Thu Oct 11 08:20:10 2012
> ;; MSG SIZE  rcvd: 58
> 
> But sometimes, after some sequence of lookups in the chain I get
> the following:
> 
> $ dig wwwa.nko.navy.mil @ns1.rice.edu
> 
> ; <<>> DiG 9.7.3-P3-RedHat-9.7.3-8.P3.el6_2.3 <<>> wwwa.nko.navy.mil @ns1.rice.edu
> ;; global options: +cmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 56590
> ;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 0
> 
> ;; QUESTION SECTION:
> ;wwwa.nko.navy.mil.		IN	A
> 
> ;; ANSWER SECTION:
> wwwa.nko.navy.mil.	180	IN	CNAME	wwwa.nko.navy.mil.apps.gcds.disa.mil.
> wwwa.nko.navy.mil.apps.gcds.disa.mil. 120 IN CNAME origin-wwwa.nko.navy.mil.
> origin-wwwa.nko.navy.mil. 137	IN	A	160.125.250.20
> 
> ;; Query time: 58 msec
> ;; SERVER: 128.42.209.32#53(128.42.209.32)
> ;; WHEN: Thu Oct 11 08:20:53 2012
> ;; MSG SIZE  rcvd: 124
> 
> which does include the final A record information. Does anyone have an idea
> about how to fix this or provide a work-around. Any ideas would be appreciated.
> 
> Regards,
> Ken