[Pdns-users] Dig: zone queries are not answered without the ANY flag

[Nikolaos Milas]

Hello,

No one can comment/advise?

I may have not described my issue clearly enough. The problem is that 
remote slaves refuse our AXFRs because they "see" absence of NS records, 
although such records do exist.

Please advise, because it is critical for consistent zone operation.

For example, normal zone replies should be of the form:

# dig nasa.gov

; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.62.rc1.el6_9.2 <<>> nasa.gov
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 20107
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 3, ADDITIONAL: 6

;; QUESTION SECTION:
;nasa.gov.                      IN      A

;; ANSWER SECTION:
nasa.gov.               600     IN      A 23.22.39.120
nasa.gov.               600     IN      A 52.0.14.116

;; AUTHORITY SECTION:
nasa.gov.               86400   IN      NS ns1.nasa.gov.
nasa.gov.               86400   IN      NS ns2.nasa.gov.
nasa.gov.               86400   IN      NS ns3.nasa.gov.

;; ADDITIONAL SECTION:
ns1.nasa.gov.           86400   IN      A 198.116.4.189
ns1.nasa.gov.           75778   IN      AAAA 2001:4d0:8300:401::189
ns2.nasa.gov.           86400   IN      A 198.116.4.185
ns2.nasa.gov.           75778   IN      AAAA 2001:4d0:2300:401::185
ns3.nasa.gov.           86400   IN      A 198.116.4.181
ns3.nasa.gov.           75778   IN      AAAA 2001:4d0:6300:401::181

;; Query time: 327 msec
;; SERVER: 194.177.210.211#53(194.177.210.211)
;; WHEN: Wed Dec 13 00:44:16 2017
;; MSG SIZE  rcvd: 244

whereas in our case:

# dig noa.gr

; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.62.rc1.el6_9.2 <<>> noa.gr
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 39654
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;noa.gr.                                IN      A

;; AUTHORITY SECTION:
noa.gr.                 3600    IN      SOA vdns.noa.gr. 
sysadmin.noa.gr. 2017120501 7200 180 1209600 3600

;; Query time: 5 msec
;; SERVER: 194.177.210.211#53(194.177.210.211)
;; WHEN: Wed Dec 13 00:44:20 2017
;; MSG SIZE  rcvd: 74

(But we do get results when querying with the ANY flag, as I have 
demonstrated already.)

What is the real cause of the problem and how to overcome it?

Please advise!

Thanks again,
Nick


On 12/12/2017 12:50 πμ, Nikolaos Milas wrote:

> Should I configure something differently or is this a bug?