They have bad delegations, the parent and child zones don't match. The nameservers listed in the parent zone refer to CNAMEs.
Replacing the CNAMEs by address records or updating the delegations will fix this. Mark ns4.danielbeard.com. 86400 IN CNAME ns.danielbeard.com. ns3.danielbeard.com. 86187 IN CNAME ns.danielbeard.com. andra.com.au. 14400 IN NS ns4.danielbeard.com. andra.com.au. 14400 IN NS ns3.danielbeard.com. ;; Received 84 bytes from 156.154.102.18#53(udns3.ausregistry.net.au) in 197 ms ns.andra.com.au. 86400 IN A 203.84.232.7 andra.com.au. 86400 IN NS ns.andra.com.au. ;; Received 63 bytes from 203.84.232.7#53(ns4.danielbeard.com) in 10 ms In message <1247628115.2861.32.ca...@nickhq3>, Nick Jones writes: > We are seeing weird issues with customers domains: > www.andra.com.au and www.wsid.com.au > > Flushing the cache then doing a lookup for one then the other, often one > will succeed and the other will fail. > > [NBRS-3.0 myhost named]# host www.andra.com.au > www.andra.com.au is an alias for andra.com.au. > andra.com.au has address 203.84.232.7 > andra.com.au mail is handled by 10 mail.andra.com.au. > > [NBRS-3.0 myhost named]# host www.wsid.com.au > Host www.wsid.com.au not found: 2(SERVFAIL) > > Flush the cache again and repeat the lookup, and the result may swap. > > Putting in a forwarder for those two domains resolves the issue. > > The domain is a little weird in that the whois shows the NS records as > ns3.danielbeard.com and ns4.danielbeard.com, but the authoritative > servers list ns.andra.com.au. Also, www.andra.com.au is a cname for > andra.com.au. > > A trace shows: > > 26-Jun-2009 09:30:29.991 fctx 0xaf24578(www.andra.com.au/A'): create > 26-Jun-2009 09:30:29.991 fctx 0xaf24578(www.andra.com.au/A'): join > 26-Jun-2009 09:30:29.991 fetch 0xa0ddd60 (fctx > 0xaf24578(www.andra.com.au/A)): created > 26-Jun-2009 09:30:29.991 fctx 0xaf24578(www.andra.com.au/A'): start > 26-Jun-2009 09:30:29.991 fctx 0xaf24578(www.andra.com.au/A'): try > 26-Jun-2009 09:30:29.991 fctx 0xaf24578(www.andra.com.au/A'): > cancelqueries > 26-Jun-2009 09:30:29.991 fctx 0xaf24578(www.andra.com.au/A'): > getaddresses > 26-Jun-2009 09:30:29.991 dns_adb_createfind: name 0x9db43c8 is an alias > (cached) > 26-Jun-2009 09:30:29.991 dns_adb_destroyfind on find 0xa77d208 > 26-Jun-2009 09:30:29.991 dns_adb_createfind: name 0x9db4310 is an alias > (cached) > 26-Jun-2009 09:30:29.991 dns_adb_destroyfind on find 0xa77d208 > 26-Jun-2009 09:30:29.991 fctx 0xaf24578(www.andra.com.au/A'): no > addresses > 26-Jun-2009 09:30:29.991 fctx 0xaf24578(www.andra.com.au/A'): done > 26-Jun-2009 09:30:29.991 fctx 0xaf24578(www.andra.com.au/A'): > stopeverything > 26-Jun-2009 09:30:29.991 fctx 0xaf24578(www.andra.com.au/A'): > cancelqueries > 26-Jun-2009 09:30:29.991 fctx 0xaf24578(www.andra.com.au/A'): sendevents > 26-Jun-2009 09:30:29.991 fetch 0xa0ddd60 (fctx > 0xaf24578(www.andra.com.au/A)): destroyfetch > 26-Jun-2009 09:30:29.991 fctx 0xaf24578(www.andra.com.au/A'): shutdown > > Is this issue caused by bind caching the glue result from the root > servers, then ignoring the authoritative result or something like that? > > The bind version is: 9.3.5 > > Thanks for any suggestions > > Nick > > _______________________________________________ > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org _______________________________________________ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
