Am Wed, 22 Dec 2010 21:53:14 +0800 schrieb Paul Ooi Cong Jen <paul...@takizo.com>:
> > On 22-Dec-2010, at 9:41 PM, Lyle Giese wrote: > > > Paul Ooi Cong Jen wrote: > >> kwsp.gov.my. 86400 IN NS ns3.pttcdc.com.my. > >> ;; Received 109 bytes from 137.189.6.21#53(ns2.cuhk.edu.hk) in 52 ms > >> > >> www.kwsp.gov.my. 43200 IN CNAME www.yu.kwsp.gov.my. > >> ;; Received 54 bytes from 202.184.117.10#53(ns3.pttcdc.com.my) in 21 ms > >> ----------------------------------------------- > >> > >> If I tried to rndc flush, dig again the record return the result > >> ------------------------------ > >> > >> dig @localhost www.kwsp.gov.my > >> > >> ; <<>> DiG 9.7.0-P3 <<>> @localhost www.kwsp.gov.my > >> ; (2 servers found) > >> ;; global options: +cmd > >> ;; Got answer: > >> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 20092 > >> ;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 2, ADDITIONAL: 0 > >> > >> ;; QUESTION SECTION: > >> ;www.kwsp.gov.my. IN A > >> > >> ;; ANSWER SECTION: > >> www.kwsp.gov.my. 43186 IN CNAME www.yu.kwsp.gov.my. > >> www.yu.kwsp.gov.my. 30 IN A 202.162.21.166 > >> > >> ;; AUTHORITY SECTION: > >> yu.kwsp.gov.my. 43200 IN NS ns2.yu.kwsp.gov.my. > >> yu.kwsp.gov.my. 43200 IN NS ns1.yu.kwsp.gov.my. > >> > >> ;; Query time: 829 msec > >> ;; SERVER: 127.0.0.1#53(127.0.0.1) > >> ;; WHEN: Wed Dec 22 15:04:55 2010 > >> ;; MSG SIZE rcvd: 106 > >> > >> ------------------------ > >> > >> > >>> From the debug logs, we see the error message as below > >> > >> gov.my/IN/A at query.c:4650 > >> 22-Dec-2010 14:38:52.845 query-errors: client 211.24.220.233#54055: query > >> failed (SERVFAIL) for www.kwsp.gov.my/IN/A at query.c:4650 > >> 22-Dec-2010 14:38:52.845 query-errors: client 211.24.220.233#54023: query > >> failed (SERVFAIL) for www.kwsp.gov.my/IN/A at query.c:4650 > >> 22-Dec-2010 14:40:27.940 query-errors: client 203.121.30.35#52679: query > >> failed (SERVFAIL) for www.kwsp.gov.my/IN/A at query.c:4650 > >> 22-Dec-2010 14:40:27.940 query-errors: client 211.24.220.233#54143: query > >> failed (SERVFAIL) for www.kwsp.gov.my/IN/A at query.c:4650 > >> 22-Dec-2010 14:43:48.202 query-errors: client 211.24.177.146#62297: query > >> failed (SERVFAIL) for www.kwsp.gov.my/IN/A at query.c:4650 > >> 22-Dec-2010 14:43:48.202 query-errors: client 211.24.220.233#54459: query > >> failed (SERVFAIL) for www.kwsp.gov.my/IN/A at query.c:4650 > >> 22-Dec-2010 14:43:48.202 query-errors: client 211.24.220.233#54473: query > >> failed (SERVFAIL) for www.kwsp.gov.my/IN/A at query.c:4650 > >> 22-Dec-2010 14:43:48.202 query-errors: client 211.24.177.146#62297: query > >> failed (SERVFAIL) for www.kwsp.gov.my/IN/A at query.c:4650 > >> 22-Dec-2010 14:44:48.290 query-errors: client 211.24.220.233#54530: query > >> failed (SERVFAIL) for www.kwsp.gov.my/IN/A at query.c:4650 > >> 22-Dec-2010 14:44:48.290 query-errors: client 127.0.0.1#19009: query > >> failed (SERVFAIL) for www.kwsp.gov.my/IN/A at query.c:4650 > >> 22-Dec-2010 14:44:48.290 query-errors: client 211.24.220.233#54547: query > >> failed (SERVFAIL) for www.kwsp.gov.my/IN/A at query.c:4650 > >> > >> On the other hand, we notice that the NS record seem like no DNS service > >> running, could it be client side or server side problem? > >> > > Bind is returning the proper answer. There is no A record for > > www.kwsp.gov.my. It's been setup as a CNAME to www.yu.kwsp.gov.my and you > > have received that answer. > > > > As far as those errors go, those are probably errors in their setup. > > Hi Lyle, > > I guess the same too, because the NS record for the CNAME seems not available. > The DNS operators have borked their configuration for sure. ns3.pttcdc.com.my knows about both www.kwsp.gov.my AND www.yu.kwsp.gov.my where it shouldn't. dig +norec @ns3.pttcdc.com.my www.kwsp.gov.my a ; <<>> DiG 9.7.2-P3-RedHat-9.7.2-4.P3.fc14 <<>> +norec @ns3.pttcdc.com.my www.kwsp.gov.my a ; (1 server found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 64831 ;; flags: qr aa ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0 ;; QUESTION SECTION: ;www.kwsp.gov.my. IN A ;; ANSWER SECTION: www.kwsp.gov.my. 43200 IN CNAME www.yu.kwsp.gov.my. ;; Query time: 360 msec ;; SERVER: 202.184.117.10#53(202.184.117.10) ;; WHEN: Wed Dec 22 15:15:21 2010 ;; MSG SIZE rcvd: 54 dig +norec @ns3.pttcdc.com.my www.yu.kwsp.gov.my a ; <<>> DiG 9.7.2-P3-RedHat-9.7.2-4.P3.fc14 <<>> +norec @ns3.pttcdc.com.my www.yu.kwsp.gov.my a ; (1 server found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 58486 ;; flags: qr ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0 ;; QUESTION SECTION: ;www.yu.kwsp.gov.my. IN A ;; ANSWER SECTION: www.yu.kwsp.gov.my. 20 IN A 202.162.21.166 ;; Query time: 361 msec ;; SERVER: 202.184.117.10#53(202.184.117.10) ;; WHEN: Wed Dec 22 15:12:20 2010 ;; MSG SIZE rcvd: 52 dig +norec @ns3.pttcdc.com.my yu.kwsp.gov.my ns ; <<>> DiG 9.7.2-P3-RedHat-9.7.2-4.P3.fc14 <<>> +norec @ns3.pttcdc.com.my yu.kwsp.gov.my ns ; (1 server found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 21431 ;; flags: qr ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 2 ;; QUESTION SECTION: ;yu.kwsp.gov.my. IN NS ;; ANSWER SECTION: yu.kwsp.gov.my. 43200 IN NS ns1.yu.kwsp.gov.my. yu.kwsp.gov.my. 43200 IN NS ns2.yu.kwsp.gov.my. ;; ADDITIONAL SECTION: ns1.yu.kwsp.gov.my. 43200 IN A 202.162.21.163 ns2.yu.kwsp.gov.my. 43200 IN A 211.25.56.211 ;; Query time: 360 msec ;; SERVER: 202.184.117.10#53(202.184.117.10) ;; WHEN: Wed Dec 22 15:14:39 2010 ;; MSG SIZE rcvd: 100 Ciao Torsten > > > > Lyle Giese > > LCR Computer Services, Inc. > > > > _______________________________________________ > > bind-users mailing list > > bind-users@lists.isc.org > > https://lists.isc.org/mailman/listinfo/bind-users > > _______________________________________________ > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users _______________________________________________ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
