+trace forces the server to go to the root.  It doesn't necessarily
represent the path your query would normally take.  If the server you
are querying is authoritative for the zone you are querying, it will
still trace from the root.  This feature is, sadly, not as useful in an
internal DNS configuration, where recursion from the root isn't used.
That seems to be the situation you're in (not able to reach the root)

At least, that is my interpretation of it.

Todd.

-----Original Message-----
From: bind-users-boun...@lists.isc.org
[mailto:bind-users-boun...@lists.isc.org] On Behalf Of Mike Bernhardt
Sent: Thursday, May 07, 2009 3:22 PM
To: 'Chris Buxton'
Cc: bind-users@lists.isc.org
Subject: RE: Delegation not working

Reformatting the dig request gives the following:

dig +trace @athena -x 10.0.2.252

; <<>> DiG 9.3.4 <<>> +trace @athena -x 10.0.2.252 ; (1 server found) ;;
global options:  printcmd
.                       163824  IN      NS      K.ROOT-SERVERS.NET.
.                       163824  IN      NS      L.ROOT-SERVERS.NET.
.                       163824  IN      NS      M.ROOT-SERVERS.NET.
.                       163824  IN      NS      A.ROOT-SERVERS.NET.
.                       163824  IN      NS      B.ROOT-SERVERS.NET.
.                       163824  IN      NS      C.ROOT-SERVERS.NET.
.                       163824  IN      NS      D.ROOT-SERVERS.NET.
.                       163824  IN      NS      E.ROOT-SERVERS.NET.
.                       163824  IN      NS      F.ROOT-SERVERS.NET.
.                       163824  IN      NS      G.ROOT-SERVERS.NET.
.                       163824  IN      NS      H.ROOT-SERVERS.NET.
.                       163824  IN      NS      I.ROOT-SERVERS.NET.
.                       163824  IN      NS      J.ROOT-SERVERS.NET.

;; Received 500 bytes from 148.165.30.30#53(148.165.30.30) in 0 ms

;; connection timed out; no servers could be reached Since this server
can't reach the root servers, this makes sense. But apparently it isn't
following delegation.

-----Original Message-----
From: Chris Buxton [mailto:cbux...@menandmice.com]
Sent: Thursday, May 07, 2009 12:19 PM
To: Mike Bernhardt
Cc: bind-users@lists.isc.org
Subject: Re: Delegation not working

On May 7, 2009, at 12:06 PM, Mike Bernhardt wrote:
> dig -x +trace @athena 10.0.2.252
>
> ;; QUESTION SECTION:
> ;+trace.in-addr.arpa.           IN      PTR
>
> ;; QUESTION SECTION:
> ;10.0.2.252.                    IN      A

You've given dig the wrong arguments. You gave it two queries, indicated
above, neither of which is what you wanted.

Try this:

dig @athena -x 10.0.2.252

Chris Buxton
Professional Services
Men & Mice

_______________________________________________
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

---------------------------------------------------------------------
This transmission (including any attachments) may contain confidential 
information, privileged material (including material protected by the 
solicitor-client or other applicable privileges), or constitute non-public 
information. Any use of this information by anyone other than the intended 
recipient is prohibited. If you have received this transmission in error, 
please immediately reply to the sender and delete this information from your 
system. Use, dissemination, distribution, or reproduction of this transmission 
by unintended recipients is not authorized and may be unlawful.
_______________________________________________
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Reply via email to