That gave me: dig +norec -x 10.0.2.252 @148.165.126.87 dig +norec -x 10.0.2.252 @10.2.242.222 ;; connection timed out; no servers could be reached ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 34563 ;; flags: qr ra; QUERY: 1, ANSWER: 0, AUTHORITY: 13, ADDITIONAL: 14
;; QUESTION SECTION: ;dig. IN A ;; AUTHORITY SECTION: . 162058 IN NS C.ROOT-SERVERS.NET. . 162058 IN NS D.ROOT-SERVERS.NET. . 162058 IN NS E.ROOT-SERVERS.NET. . 162058 IN NS F.ROOT-SERVERS.NET. . 162058 IN NS G.ROOT-SERVERS.NET. . 162058 IN NS H.ROOT-SERVERS.NET. . 162058 IN NS I.ROOT-SERVERS.NET. . 162058 IN NS J.ROOT-SERVERS.NET. . 162058 IN NS K.ROOT-SERVERS.NET. . 162058 IN NS L.ROOT-SERVERS.NET. . 162058 IN NS M.ROOT-SERVERS.NET. . 162058 IN NS A.ROOT-SERVERS.NET. . 162058 IN NS B.ROOT-SERVERS.NET. ;; ADDITIONAL SECTION: A.ROOT-SERVERS.NET. 599086 IN A 198.41.0.4 A.ROOT-SERVERS.NET. 552012 IN AAAA 2001:503:ba3e::2:30 B.ROOT-SERVERS.NET. 35325 IN A 192.228.79.201 C.ROOT-SERVERS.NET. 599099 IN A 192.33.4.12 D.ROOT-SERVERS.NET. 599100 IN A 128.8.10.90 E.ROOT-SERVERS.NET. 599101 IN A 192.203.230.10 F.ROOT-SERVERS.NET. 599102 IN A 192.5.5.241 F.ROOT-SERVERS.NET. 552012 IN AAAA 2001:500:2f::f G.ROOT-SERVERS.NET. 599090 IN A 192.112.36.4 H.ROOT-SERVERS.NET. 599091 IN A 128.63.2.53 H.ROOT-SERVERS.NET. 552012 IN AAAA 2001:500:1::803f:235 I.ROOT-SERVERS.NET. 599092 IN A 192.36.148.17 J.ROOT-SERVERS.NET. 208142 IN A 192.58.128.30 J.ROOT-SERVERS.NET. 208142 IN AAAA 2001:503:c27::2:30 ;; Query time: 0 msec ;; SERVER: 148.165.30.30#53(148.165.30.30) ;; WHEN: Thu May 7 12:52:39 2009 ;; MSG SIZE rcvd: 504 ; <<>> DiG 9.3.4 <<>> +norec -x 10.0.2.252 @148.165.126.87 dig +norec -x 10.0.2.252 @10.2.242.222 ; (1 server found) ;; global options: printcmd ;; connection timed out; no servers could be reached -----Original Message----- From: Chris Buxton [mailto:cbux...@menandmice.com] Sent: Thursday, May 07, 2009 12:50 PM To: Mike Bernhardt Cc: bind-users@lists.isc.org Subject: Re: Delegation not working On May 7, 2009, at 12:37 PM, Mike Bernhardt wrote: > And dig gives me this: > dig +norec @athena -x 10.0.2.252 > > ;; QUESTION SECTION: > ;252.2.0.10.in-addr.arpa. IN PTR > > ;; AUTHORITY SECTION: > 0.10.in-addr.arpa. 14400 IN NS mrep-02.adm.bart.gov. > 0.10.in-addr.arpa. 14400 IN NS dhcp-01.adm.bart.gov. > > ;; ADDITIONAL SECTION: > dhcp-01.adm.bart.gov. 86400 IN A 148.165.126.87 > mrep-02.adm.bart.gov. 86400 IN A 10.2.242.222 That looks perfect. > Without +norec, it times out. OK, now we're getting somewhere. Why would the server "athena" have trouble querying those two servers? Try this from "athena" itself: dig +norec -x 10.0.2.252 @148.165.126.87 dig +norec -x 10.0.2.252 @10.2.242.222 Chris Buxton Professional Services Men & Mice _______________________________________________ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
