For buildcount.com Google is taking the referral and returning it
as an answer.  The authoritative servers for the zone are misconfigured.

; <<>> DiG 9.3.6-P1 <<>> buildcount.com +norec @a.gtld-servers.net
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 44142
;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 6, ADDITIONAL: 4

;; QUESTION SECTION:
;buildcount.com.                        IN      A

;; AUTHORITY SECTION:
buildcount.com.         172800  IN      NS      ns1.scalecost.com.
buildcount.com.         172800  IN      NS      ns2.scalecost.com.
buildcount.com.         172800  IN      NS      ns3.verbtake.com.
buildcount.com.         172800  IN      NS      ns4.verbtake.com.
buildcount.com.         172800  IN      NS      ns5.0ih.ru.
buildcount.com.         172800  IN      NS      ns6.0ih.ru.

;; ADDITIONAL SECTION:
ns1.scalecost.com.      172800  IN      A       121.10.106.148
ns2.scalecost.com.      172800  IN      A       61.136.59.34
ns3.verbtake.com.       172800  IN      A       11.1.1.1
ns4.verbtake.com.       172800  IN      A       11.1.1.1

;; Query time: 181 msec
;; SERVER: 2001:503:a83e::2:30#53(2001:503:a83e::2:30)
;; WHEN: Thu Feb 11 10:49:29 2010
;; MSG SIZE  rcvd: 229

% dig buildcount.com ns @ns1.scalecost.com +norec

; <<>> DiG 9.3.6-P1 <<>> buildcount.com ns @ns1.scalecost.com +norec
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 38268
;; flags: qr aa; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;buildcount.com.                        IN      NS

;; AUTHORITY SECTION:
.                       3600    IN      SOA     . root.local. 2009020411 10800 
3600 3600000 3600

;; Query time: 462 msec
;; SERVER: 121.10.106.148#53(121.10.106.148)
;; WHEN: Thu Feb 11 10:45:44 2010
;; MSG SIZE  rcvd: 76

% 

In message <183604.32013...@web57603.mail.re1.yahoo.com>, W S writes:
> Folks - my DNS slaves are flooded with these [req from corp email gateways]=
> :
>  
> query failed (SERVFAIL) for buildcount.com/IN/NS at query.c:4623
> query failed (SERVFAIL) for rss.sina.com.cn/IN/A at query.c:4623
> ...
>  
> BUT if I query the very same Domain Names within googles' DNS - it's all go=
> od:
> dig @8.8.8.8 buildcount.com
> buildcount.com.  61.136.59.34


You didn't make the same question to Google "dig @8.8.8.8 buildcount.com NS"
would be the same question.

> And of course, my systems are NOT able to resolve these and other names=20
> cause /etc/resolv.conf pointing to my local resolvers, this is just partial=
>  list:
>  
> host treesfresh.net
> host rss.sina.com.cn
> host twoproperitary.ru
> host qq.com
> host 53www.com
> host exactshy.ru
> host heldthem.ru
> 
>  
> Are these misconfigured Domains - if so - then why Google's DNS able to res=
> olve name, MX etc...and my DNS slaves=20

What does "dig +trace treesfresh.net" return? Similarly for the others.
Note dig +trace does not follow CNAMES so you will need to restart the
queries the canonical name.

What do "tcpdump -n -s 0 port 53" show when you make a query to the nameserver?

> Thanks a lot,
> --Walter Smith
> 
> --- On Tue, 2/9/10, W S <whatis...@yahoo.com> wrote:
> 
> 
> From: W S <whatis...@yahoo.com>
> Subject: Re: strange problem with "double CNAMEs" ?
> To: bind-users@lists.isc.org
> Date: Tuesday, February 9, 2010, 4:08 PM
> 
> 
> 
> 
> 
> 
> 
> Is there anything I have to enable on my side to query these "double CNAMEs=
> "?
>  
> dig @8.8.8.8 cdn2.example.com
> cdn2.example.com 3600 IN CNAME cdn2.example2.com
> cdn2.example2.com 3600 IN CNAME cdn3.example2.com
> cdn3.example2.com 3600 IN A 1.2.3.4
>  
> Thanks a lot guys,
> --WS
> 
> --- On Mon, 2/8/10, W S <whatis...@yahoo.com> wrote:
> 
> 
> From: W S <whatis...@yahoo.com>
> Subject: strange problem
> To: bind-users@lists.isc.org
> Date: Monday, February 8, 2010, 3:44 PM
> 
> 
> 
> 
> 
> 
> 
> Folks,
>  
> When I try to get an IP address for some sub-site/domain, let's say
> cdn2.example.com --- I'm getting errors, BUT when I query
> Google's DNS servers I'm getting an IP address:
>  
> dig @8.8.8.8 cdn2.example.com
> cdn2.example.com 3600 IN CNAME cdn2.example2.com
> cdn2.example2.com 3600 IN CNAME cdn3.example2.com
> cdn3.example2.com 3600 IN A 1.2.3.4
>  
> This is my DNS configurations/errors:
>  
> #############################################################
> /usr/local/bind/sbin/named -V
> BIND 9.6.1-P3 built with '--prefix=3D/usr/local/bind' '--with-openssl=3D/us=
> r/local/openssl' '--enable-fixed-rrset' '--disable-ipv6'
> #############################################################
> 08-Feb-2010 15:13:01.479 query-errors: debug 1: client <some_ip_addr>#7074:=
>  query failed (SERVFAIL) for cdn2.example.com/IN/A at query.c:4623
> 08-Feb-2010 15:13:01.479 query-errors: debug 2: fetch completed at resolver=
> .c:3119 for cdn2.example.com/A in 30.000908: timed out/success=20
> [domain:example.com,referral:1,restart:6,qrysent:13,timeout:9,lame:0,neterr=
> :0,badresp:0,adberr:0,findfail:0,valfail:0]
> #############################################################
> at query.c:4623
> ~/bind-9.6.1-P3/bin/named/query.c
>  default:
>                 /*
>                  * Something has gone wrong=
> .
>                  */
>                 QUERY_ERROR(DNS_R_SERVFAIL);
>                 goto cleanup;
>         }
> #############################################################
> at resolver.c:3119
> ~/bind-9.6.1-P3/lib/dns/resolver.c
>   if (event->ev_type =3D=3D ISC_TIMEREVENT_LIFE) {
>                 fctx->reason =3D NULL;
>                 fctx_done(fctx, ISC_R_TIMEDOU=
> T, __LINE__);
> #############################################################
>  
>  
> Thanks,
> --WS
>  
> 
> -----Inline Attachment Follows-----
> 
> 
> _______________________________________________
> bind-users mailing list
> bind-users@lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
> 
> -----Inline Attachment Follows-----
> 
> 
> _______________________________________________
> bind-users mailing list
> bind-users@lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
> =0A=0A=0A      
> --0-166099193-1265826328=:32013
> Content-Type: text/html; charset=iso-8859-1
> Content-Transfer-Encoding: quoted-printable
> 
> <table cellspacing=3D"0" cellpadding=3D"0" border=3D"0" ><tr><td valign=3D"=
> top" style=3D"font: inherit;"><BR>
> <BLOCKQUOTE style=3D"BORDER-LEFT: rgb(16,16,255) 2px solid; PADDING-LEFT: 5=
> px; MARGIN-LEFT: 5px">
> <DIV id=3Dyiv714128926>
> <TABLE border=3D0 cellSpacing=3D0 cellPadding=3D0>
> <TBODY>
> <TR>
> <TD vAlign=3Dtop>
> <DIV id=3Dyiv1520902560>
> <DIV>Folks - my DNS slaves are flooded with these [req from corp email gate=
> ways]:</DIV>
> <DIV>&nbsp;</DIV>
> <DIV>query failed (SERVFAIL) for buildcount.com/IN/NS at query.c:4623</DIV>
> <DIV>query failed (SERVFAIL) for rss.sina.com.cn/IN/A at query.c:4623</DIV>
> <DIV>...</DIV>
> <DIV>&nbsp;</DIV>
> <DIV>BUT if I query the very same Domain Names within googles' DNS - it's a=
> ll good:</DIV>
> <DIV>dig @8.8.8.8 buildcount.com</DIV>
> <DIV>buildcount.com.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 3600&n=
> bsp;&nbsp;&nbsp; IN&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; A&nbsp;&nbsp;&nbsp;&nbsp;=
> &nbsp;&nbsp; 61.136.59.34</DIV>
> <DIV>&nbsp;</DIV>
> <DIV>&nbsp;</DIV>
> <DIV>And of course, my systems are NOT able to resolve these and other name=
> s </DIV>
> <DIV>cause /etc/resolv.conf pointing to my local resolvers, this is just pa=
> rtial list:</DIV>
> <DIV>&nbsp;</DIV>
> <DIV>host treesfresh.net</DIV>
> <DIV>host rss.sina.com.cn<BR>host twoproperitary.ru<BR>host qq.com<BR>host =
> 53www.com<BR>host exactshy.ru<BR>host heldthem.ru<BR></DIV>
> <DIV>&nbsp;</DIV>
> <DIV>Are these misconfigured Domains - if so - then why Google's DNS able t=
> o resolve name, MX etc...and my DNS slaves </DIV>
> <DIV>&nbsp;</DIV>
> <DIV>&nbsp;</DIV>
> <DIV>Thanks a lot,</DIV>
> <DIV>--Walter Smith<BR><BR>--- On <B>Tue, 2/9/10, W S <I>&lt;whatis...@yaho=
> o.com&gt;</I></B> wrote:<BR></DIV>
> <BLOCKQUOTE style=3D"BORDER-LEFT: rgb(16,16,255) 2px solid; PADDING-LEFT: 5=
> px; MARGIN-LEFT: 5px"><BR>From: W S &lt;whatis...@yahoo.com&gt;<BR>Subject:=
>  Re: strange problem with "double CNAMEs" ?<BR>To: bind-us...@lists.isc.org=
> <BR>Date: Tuesday, February 9, 2010, 4:08 PM<BR><BR>
> <DIV id=3Dyiv1617457803>
> <TABLE border=3D0 cellSpacing=3D0 cellPadding=3D0>
> <TBODY>
> <TR>
> <TD vAlign=3Dtop>
> <DIV>Is there anything I have to enable on my side to query these "double C=
> NAMEs"?</DIV>
> <DIV>&nbsp;</DIV>
> <DIV>dig @8.8.8.8 cdn2.example.com</DIV>
> <DIV>cdn2.example.com 3600&nbsp;IN&nbsp;CNAME <A href=3D"http://cdn2.exampl=
> e2.com/" rel=3Dnofollow target=3D_blank><SPAN id=3Dlw_1265760430_4 class=3D=
> yshortcuts>cdn2.example2.com</SPAN></A></DIV>
> <DIV>cdn2.example2.com 3600 IN CNAME <A href=3D"http://cdn3.example2.com/"; =
> rel=3Dnofollow target=3D_blank><SPAN id=3Dlw_1265760430_5 class=3Dyshortcut=
> s>cdn3.example2.com</SPAN></A></DIV>
> <DIV>cdn3.example2.com 3600 IN A 1.2.3.4</DIV>
> <DIV>&nbsp;</DIV>
> <DIV>Thanks a lot guys,</DIV>
> <DIV>--WS<BR><BR>--- On <B>Mon, 2/8/10, W S <I>&lt;whatis...@yahoo.com&gt;<=
> /I></B> wrote:<BR></DIV>
> <BLOCKQUOTE style=3D"BORDER-LEFT: rgb(16,16,255) 2px solid; PADDING-LEFT: 5=
> px; MARGIN-LEFT: 5px"><BR>From: W S &lt;whatis...@yahoo.com&gt;<BR>Subject:=
>  strange problem<BR>To: bind-users@lists.isc.org<BR>Date: Monday, February =
> 8, 2010, 3:44 PM<BR><BR>
> <DIV id=3Dyiv1795112504>
> <TABLE border=3D0 cellSpacing=3D0 cellPadding=3D0>
> <TBODY>
> <TR>
> <TD vAlign=3Dtop>
> <DIV>Folks,</DIV>
> <DIV>&nbsp;</DIV>
> <DIV>When I try to get an IP address for some sub-site/domain, let's say</D=
> IV>
> <DIV>cdn2.example.com --- I'm getting errors, BUT when I query</DIV>
> <DIV>Google's DNS servers I'm getting an IP address:</DIV>
> <DIV>&nbsp;</DIV>
> <DIV>dig @8.8.8.8 cdn2.example.com</DIV>
> <DIV>cdn2.example.com 3600&nbsp;IN&nbsp;CNAME cdn2.example2.com</DIV>
> <DIV>cdn2.example2.com 3600 IN CNAME cdn3.example2.com</DIV>
> <DIV>cdn3.example2.com 3600 IN A 1.2.3.4</DIV>
> <DIV>&nbsp;</DIV>
> <DIV>This is my DNS configurations/errors:</DIV>
> <DIV>&nbsp;</DIV>
> <DIV>#############################################################<BR>/usr/=
> local/bind/sbin/named -V<BR>BIND 9.6.1-P3 built with '--prefix=3D/usr/local=
> /bind' '--with-openssl=3D/usr/local/openssl' '--enable-fixed-rrset' '--disa=
> ble-ipv6'<BR>#############################################################<=
> BR>08-Feb-2010 15:13:01.479 query-errors: debug 1: client &lt;some_ip_addr&=
> gt;#7074: query failed (SERVFAIL) for cdn2.example.com/IN/A at query.c:4623=
> <BR>08-Feb-2010 15:13:01.479 query-errors: debug 2: fetch completed at reso=
> lver.c:3119 for cdn2.example.com/A in 30.000908: timed out/success <BR>[dom=
> ain:example.com,referral:1,restart:6,qrysent:13,timeout:9,lame:0,neterr:0,b=
> adresp:0,adberr:0,findfail:0,valfail:0]<BR>################################=
> #############################<BR>at query.c:4623<BR>~/bind-9.6.1-P3/bin/nam=
> ed/query.c<BR>&nbsp;default:<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&=
> nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
>  /*<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&n=
> bsp;&nbsp;&nbsp;&nbsp;&nbsp; * Something has gone wrong.<BR>&nbsp;&nbsp;&nb=
> sp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;=
> &nbsp; */<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&n=
> bsp;&nbsp;&nbsp;&nbsp;&nbsp; QUERY_ERROR(DNS_R_SERVFAIL);<BR>&nbsp;&nbsp;&n=
> bsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp=
> ; goto cleanup;<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; }<BR>########=
> #####################################################<BR>at resolver.c:3119=
> <BR>~/bind-9.6.1-P3/lib/dns/resolver.c</DIV>
> <DIV>&nbsp; if (event-&gt;ev_type =3D=3D ISC_TIMEREVENT_LIFE) {<BR>&nbsp;&n=
> bsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp=
> ;&nbsp; fctx-&gt;reason =3D NULL;<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&n=
> bsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; fctx_done(fctx, ISC_R_=
> TIMEDOUT, __LINE__);<BR>###################################################=
> ##########</DIV>
> <DIV>&nbsp;</DIV>
> <DIV>&nbsp;</DIV>
> <DIV>Thanks,</DIV>
> <DIV>--WS</DIV>
> <DIV>&nbsp;</DIV></TD></TR></TBODY></TABLE><BR></DIV><BR>-----Inline Attach=
> ment Follows-----<BR><BR>
> <DIV class=3DplainMail>_______________________________________________<BR>b=
> ind-users mailing list<BR><A href=3D"http://us.mc576.mail.yahoo.com/mc/comp=
> ose?to=3dbind-us...@lists.isc.org" rel=3Dnofollow target=3D_blank>bind-user=
> s...@lists.isc.org</A><BR><A 
> href=3D"https://lists.isc.org/mailman/listinfo/bi=
> nd-users" rel=3Dnofollow target=3D_blank>https://lists.isc.org/mailman/list=
> info/bind-users</A></DIV></BLOCKQUOTE></TD></TR></TBODY></TABLE><BR></DIV><=
> BR>-----Inline Attachment Follows-----<BR><BR>
> <DIV class=3DplainMail>_______________________________________________<BR>b=
> ind-users mailing list<BR><A href=3D"http://us.mc576.mail.yahoo.com/mc/comp=
> ose?to=3dbind-us...@lists.isc.org" rel=3Dnofollow target=3D_blank>bind-user=
> s...@lists.isc.org</A><BR><A 
> href=3D"https://lists.isc.org/mailman/listinfo/bi=
> nd-users" rel=3Dnofollow target=3D_blank>https://lists.isc.org/mailman/list=
> info/bind-users</A></DIV></BLOCKQUOTE></DIV></TD></TR></TBODY></TABLE><BR><=
> /DIV></BLOCKQUOTE></td></tr></table><br>=0A=0A      
> --0-166099193-1265826328=:32013--
> 
> --===============6772155986104046454==
> Content-Type: text/plain; charset="us-ascii"
> MIME-Version: 1.0
> Content-Transfer-Encoding: 7bit
> Content-Disposition: inline
> 
> _______________________________________________
> bind-users mailing list
> bind-users@lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
> --===============6772155986104046454==--
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: ma...@isc.org
_______________________________________________
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Reply via email to