For buildcount.com Google is taking the referral and returning it as an answer. The authoritative servers for the zone are misconfigured.
; <<>> DiG 9.3.6-P1 <<>> buildcount.com +norec @a.gtld-servers.net ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 44142 ;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 6, ADDITIONAL: 4 ;; QUESTION SECTION: ;buildcount.com. IN A ;; AUTHORITY SECTION: buildcount.com. 172800 IN NS ns1.scalecost.com. buildcount.com. 172800 IN NS ns2.scalecost.com. buildcount.com. 172800 IN NS ns3.verbtake.com. buildcount.com. 172800 IN NS ns4.verbtake.com. buildcount.com. 172800 IN NS ns5.0ih.ru. buildcount.com. 172800 IN NS ns6.0ih.ru. ;; ADDITIONAL SECTION: ns1.scalecost.com. 172800 IN A 121.10.106.148 ns2.scalecost.com. 172800 IN A 61.136.59.34 ns3.verbtake.com. 172800 IN A 11.1.1.1 ns4.verbtake.com. 172800 IN A 11.1.1.1 ;; Query time: 181 msec ;; SERVER: 2001:503:a83e::2:30#53(2001:503:a83e::2:30) ;; WHEN: Thu Feb 11 10:49:29 2010 ;; MSG SIZE rcvd: 229 % dig buildcount.com ns @ns1.scalecost.com +norec ; <<>> DiG 9.3.6-P1 <<>> buildcount.com ns @ns1.scalecost.com +norec ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 38268 ;; flags: qr aa; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0 ;; QUESTION SECTION: ;buildcount.com. IN NS ;; AUTHORITY SECTION: . 3600 IN SOA . root.local. 2009020411 10800 3600 3600000 3600 ;; Query time: 462 msec ;; SERVER: 121.10.106.148#53(121.10.106.148) ;; WHEN: Thu Feb 11 10:45:44 2010 ;; MSG SIZE rcvd: 76 % In message <183604.32013...@web57603.mail.re1.yahoo.com>, W S writes: > Folks - my DNS slaves are flooded with these [req from corp email gateways]= > : > > query failed (SERVFAIL) for buildcount.com/IN/NS at query.c:4623 > query failed (SERVFAIL) for rss.sina.com.cn/IN/A at query.c:4623 > ... > > BUT if I query the very same Domain Names within googles' DNS - it's all go= > od: > dig @8.8.8.8 buildcount.com > buildcount.com. 61.136.59.34 You didn't make the same question to Google "dig @8.8.8.8 buildcount.com NS" would be the same question. > And of course, my systems are NOT able to resolve these and other names=20 > cause /etc/resolv.conf pointing to my local resolvers, this is just partial= > list: > > host treesfresh.net > host rss.sina.com.cn > host twoproperitary.ru > host qq.com > host 53www.com > host exactshy.ru > host heldthem.ru > > > Are these misconfigured Domains - if so - then why Google's DNS able to res= > olve name, MX etc...and my DNS slaves=20 What does "dig +trace treesfresh.net" return? Similarly for the others. Note dig +trace does not follow CNAMES so you will need to restart the queries the canonical name. What do "tcpdump -n -s 0 port 53" show when you make a query to the nameserver? > Thanks a lot, > --Walter Smith > > --- On Tue, 2/9/10, W S <whatis...@yahoo.com> wrote: > > > From: W S <whatis...@yahoo.com> > Subject: Re: strange problem with "double CNAMEs" ? > To: bind-users@lists.isc.org > Date: Tuesday, February 9, 2010, 4:08 PM > > > > > > > > Is there anything I have to enable on my side to query these "double CNAMEs= > "? > > dig @8.8.8.8 cdn2.example.com > cdn2.example.com 3600 IN CNAME cdn2.example2.com > cdn2.example2.com 3600 IN CNAME cdn3.example2.com > cdn3.example2.com 3600 IN A 1.2.3.4 > > Thanks a lot guys, > --WS > > --- On Mon, 2/8/10, W S <whatis...@yahoo.com> wrote: > > > From: W S <whatis...@yahoo.com> > Subject: strange problem > To: bind-users@lists.isc.org > Date: Monday, February 8, 2010, 3:44 PM > > > > > > > > Folks, > > When I try to get an IP address for some sub-site/domain, let's say > cdn2.example.com --- I'm getting errors, BUT when I query > Google's DNS servers I'm getting an IP address: > > dig @8.8.8.8 cdn2.example.com > cdn2.example.com 3600 IN CNAME cdn2.example2.com > cdn2.example2.com 3600 IN CNAME cdn3.example2.com > cdn3.example2.com 3600 IN A 1.2.3.4 > > This is my DNS configurations/errors: > > ############################################################# > /usr/local/bind/sbin/named -V > BIND 9.6.1-P3 built with '--prefix=3D/usr/local/bind' '--with-openssl=3D/us= > r/local/openssl' '--enable-fixed-rrset' '--disable-ipv6' > ############################################################# > 08-Feb-2010 15:13:01.479 query-errors: debug 1: client <some_ip_addr>#7074:= > query failed (SERVFAIL) for cdn2.example.com/IN/A at query.c:4623 > 08-Feb-2010 15:13:01.479 query-errors: debug 2: fetch completed at resolver= > .c:3119 for cdn2.example.com/A in 30.000908: timed out/success=20 > [domain:example.com,referral:1,restart:6,qrysent:13,timeout:9,lame:0,neterr= > :0,badresp:0,adberr:0,findfail:0,valfail:0] > ############################################################# > at query.c:4623 > ~/bind-9.6.1-P3/bin/named/query.c > default: > /* > * Something has gone wrong= > . > */ > QUERY_ERROR(DNS_R_SERVFAIL); > goto cleanup; > } > ############################################################# > at resolver.c:3119 > ~/bind-9.6.1-P3/lib/dns/resolver.c > if (event->ev_type =3D=3D ISC_TIMEREVENT_LIFE) { > fctx->reason =3D NULL; > fctx_done(fctx, ISC_R_TIMEDOU= > T, __LINE__); > ############################################################# > > > Thanks, > --WS > > > -----Inline Attachment Follows----- > > > _______________________________________________ > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users > > -----Inline Attachment Follows----- > > > _______________________________________________ > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users > =0A=0A=0A > --0-166099193-1265826328=:32013 > Content-Type: text/html; charset=iso-8859-1 > Content-Transfer-Encoding: quoted-printable > > <table cellspacing=3D"0" cellpadding=3D"0" border=3D"0" ><tr><td valign=3D"= > top" style=3D"font: inherit;"><BR> > <BLOCKQUOTE style=3D"BORDER-LEFT: rgb(16,16,255) 2px solid; PADDING-LEFT: 5= > px; MARGIN-LEFT: 5px"> > <DIV id=3Dyiv714128926> > <TABLE border=3D0 cellSpacing=3D0 cellPadding=3D0> > <TBODY> > <TR> > <TD vAlign=3Dtop> > <DIV id=3Dyiv1520902560> > <DIV>Folks - my DNS slaves are flooded with these [req from corp email gate= > ways]:</DIV> > <DIV> </DIV> > <DIV>query failed (SERVFAIL) for buildcount.com/IN/NS at query.c:4623</DIV> > <DIV>query failed (SERVFAIL) for rss.sina.com.cn/IN/A at query.c:4623</DIV> > <DIV>...</DIV> > <DIV> </DIV> > <DIV>BUT if I query the very same Domain Names within googles' DNS - it's a= > ll good:</DIV> > <DIV>dig @8.8.8.8 buildcount.com</DIV> > <DIV>buildcount.com. 3600&n= > bsp; IN A = > 61.136.59.34</DIV> > <DIV> </DIV> > <DIV> </DIV> > <DIV>And of course, my systems are NOT able to resolve these and other name= > s </DIV> > <DIV>cause /etc/resolv.conf pointing to my local resolvers, this is just pa= > rtial list:</DIV> > <DIV> </DIV> > <DIV>host treesfresh.net</DIV> > <DIV>host rss.sina.com.cn<BR>host twoproperitary.ru<BR>host qq.com<BR>host = > 53www.com<BR>host exactshy.ru<BR>host heldthem.ru<BR></DIV> > <DIV> </DIV> > <DIV>Are these misconfigured Domains - if so - then why Google's DNS able t= > o resolve name, MX etc...and my DNS slaves </DIV> > <DIV> </DIV> > <DIV> </DIV> > <DIV>Thanks a lot,</DIV> > <DIV>--Walter Smith<BR><BR>--- On <B>Tue, 2/9/10, W S <I><whatis...@yaho= > o.com></I></B> wrote:<BR></DIV> > <BLOCKQUOTE style=3D"BORDER-LEFT: rgb(16,16,255) 2px solid; PADDING-LEFT: 5= > px; MARGIN-LEFT: 5px"><BR>From: W S <whatis...@yahoo.com><BR>Subject:= > Re: strange problem with "double CNAMEs" ?<BR>To: bind-us...@lists.isc.org= > <BR>Date: Tuesday, February 9, 2010, 4:08 PM<BR><BR> > <DIV id=3Dyiv1617457803> > <TABLE border=3D0 cellSpacing=3D0 cellPadding=3D0> > <TBODY> > <TR> > <TD vAlign=3Dtop> > <DIV>Is there anything I have to enable on my side to query these "double C= > NAMEs"?</DIV> > <DIV> </DIV> > <DIV>dig @8.8.8.8 cdn2.example.com</DIV> > <DIV>cdn2.example.com 3600 IN CNAME <A href=3D"http://cdn2.exampl= > e2.com/" rel=3Dnofollow target=3D_blank><SPAN id=3Dlw_1265760430_4 class=3D= > yshortcuts>cdn2.example2.com</SPAN></A></DIV> > <DIV>cdn2.example2.com 3600 IN CNAME <A href=3D"http://cdn3.example2.com/" = > rel=3Dnofollow target=3D_blank><SPAN id=3Dlw_1265760430_5 class=3Dyshortcut= > s>cdn3.example2.com</SPAN></A></DIV> > <DIV>cdn3.example2.com 3600 IN A 1.2.3.4</DIV> > <DIV> </DIV> > <DIV>Thanks a lot guys,</DIV> > <DIV>--WS<BR><BR>--- On <B>Mon, 2/8/10, W S <I><whatis...@yahoo.com><= > /I></B> wrote:<BR></DIV> > <BLOCKQUOTE style=3D"BORDER-LEFT: rgb(16,16,255) 2px solid; PADDING-LEFT: 5= > px; MARGIN-LEFT: 5px"><BR>From: W S <whatis...@yahoo.com><BR>Subject:= > strange problem<BR>To: bind-users@lists.isc.org<BR>Date: Monday, February = > 8, 2010, 3:44 PM<BR><BR> > <DIV id=3Dyiv1795112504> > <TABLE border=3D0 cellSpacing=3D0 cellPadding=3D0> > <TBODY> > <TR> > <TD vAlign=3Dtop> > <DIV>Folks,</DIV> > <DIV> </DIV> > <DIV>When I try to get an IP address for some sub-site/domain, let's say</D= > IV> > <DIV>cdn2.example.com --- I'm getting errors, BUT when I query</DIV> > <DIV>Google's DNS servers I'm getting an IP address:</DIV> > <DIV> </DIV> > <DIV>dig @8.8.8.8 cdn2.example.com</DIV> > <DIV>cdn2.example.com 3600 IN CNAME cdn2.example2.com</DIV> > <DIV>cdn2.example2.com 3600 IN CNAME cdn3.example2.com</DIV> > <DIV>cdn3.example2.com 3600 IN A 1.2.3.4</DIV> > <DIV> </DIV> > <DIV>This is my DNS configurations/errors:</DIV> > <DIV> </DIV> > <DIV>#############################################################<BR>/usr/= > local/bind/sbin/named -V<BR>BIND 9.6.1-P3 built with '--prefix=3D/usr/local= > /bind' '--with-openssl=3D/usr/local/openssl' '--enable-fixed-rrset' '--disa= > ble-ipv6'<BR>#############################################################<= > BR>08-Feb-2010 15:13:01.479 query-errors: debug 1: client <some_ip_addr&= > gt;#7074: query failed (SERVFAIL) for cdn2.example.com/IN/A at query.c:4623= > <BR>08-Feb-2010 15:13:01.479 query-errors: debug 2: fetch completed at reso= > lver.c:3119 for cdn2.example.com/A in 30.000908: timed out/success <BR>[dom= > ain:example.com,referral:1,restart:6,qrysent:13,timeout:9,lame:0,neterr:0,b= > adresp:0,adberr:0,findfail:0,valfail:0]<BR>################################= > #############################<BR>at query.c:4623<BR>~/bind-9.6.1-P3/bin/nam= > ed/query.c<BR> default:<BR> &= > nbsp; > /*<BR> &n= > bsp; * Something has gone wrong.<BR> &nb= > sp; = > */<BR> &n= > bsp; QUERY_ERROR(DNS_R_SERVFAIL);<BR> &n= > bsp;  = > ; goto cleanup;<BR> }<BR>########= > #####################################################<BR>at resolver.c:3119= > <BR>~/bind-9.6.1-P3/lib/dns/resolver.c</DIV> > <DIV> if (event->ev_type =3D=3D ISC_TIMEREVENT_LIFE) {<BR> &n= > bsp;  = > ; fctx->reason =3D NULL;<BR> &n= > bsp; fctx_done(fctx, ISC_R_= > TIMEDOUT, __LINE__);<BR>###################################################= > ##########</DIV> > <DIV> </DIV> > <DIV> </DIV> > <DIV>Thanks,</DIV> > <DIV>--WS</DIV> > <DIV> </DIV></TD></TR></TBODY></TABLE><BR></DIV><BR>-----Inline Attach= > ment Follows-----<BR><BR> > <DIV class=3DplainMail>_______________________________________________<BR>b= > ind-users mailing list<BR><A href=3D"http://us.mc576.mail.yahoo.com/mc/comp= > ose?to=3dbind-us...@lists.isc.org" rel=3Dnofollow target=3D_blank>bind-user= > s...@lists.isc.org</A><BR><A > href=3D"https://lists.isc.org/mailman/listinfo/bi= > nd-users" rel=3Dnofollow target=3D_blank>https://lists.isc.org/mailman/list= > info/bind-users</A></DIV></BLOCKQUOTE></TD></TR></TBODY></TABLE><BR></DIV><= > BR>-----Inline Attachment Follows-----<BR><BR> > <DIV class=3DplainMail>_______________________________________________<BR>b= > ind-users mailing list<BR><A href=3D"http://us.mc576.mail.yahoo.com/mc/comp= > ose?to=3dbind-us...@lists.isc.org" rel=3Dnofollow target=3D_blank>bind-user= > s...@lists.isc.org</A><BR><A > href=3D"https://lists.isc.org/mailman/listinfo/bi= > nd-users" rel=3Dnofollow target=3D_blank>https://lists.isc.org/mailman/list= > info/bind-users</A></DIV></BLOCKQUOTE></DIV></TD></TR></TBODY></TABLE><BR><= > /DIV></BLOCKQUOTE></td></tr></table><br>=0A=0A > --0-166099193-1265826328=:32013-- > > --===============6772155986104046454== > Content-Type: text/plain; charset="us-ascii" > MIME-Version: 1.0 > Content-Transfer-Encoding: 7bit > Content-Disposition: inline > > _______________________________________________ > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users > --===============6772155986104046454==-- -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org _______________________________________________ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users