Sorry if I used the expression "bug down" as it not mean necessarily
that this it is a bug in anyway but probably a configuration issue.
-------- Original Message --------
Subject: DNSSEC bug down issue, "Servers Unreachable"
Date: Mon, 21 Nov 2011 21:45:52 -0800
To: bind-users@lists.isc.org <bind-users@lists.isc.org>
I have checked my domain against
http://www.intodns.com/bonsi.org
and I am getting that everything is ok.
I have signed the domain bonsi.org with dnssec key and entered the key
at the https://dlv.isc.org for validation. In addition I also entered
the dlv.bonsi.org. at the parent.
On dlv.isc.org I am getting "Servers Unreachable"
Servers Unreachable
Severity: failure
Summary: One or more servers could not be reached.
When checking the status of a domain, one or more servers did not
respond or did not respond correctly. If this is the initial check, all
servers are requried to respond. For later checks, which simply ensure
the DNSKEY is still present, at least one server must respond. Check to
make certain the name servers for this zone respond over both TCP and UDP.
If the servers were to be Unreachable I think I wouldn't be able to
serve the domain "bonsi.org" and that is not the case.
What could be the problem?
I have dig and ping both servers and ping and dig returned ok.
Port 53 and 80 are open and working fine for both servers.
[user:~] root# ping ns1.bonsi.org
PING ns1.bonsi.org (63.200.45.18): 56 data bytes
64 bytes from 63.200.45.18: icmp_seq=0 ttl=62 time=3.158 ms
64 bytes from 63.200.45.18: icmp_seq=1 ttl=62 time=3.367 ms
64 bytes from 63.200.45.18: icmp_seq=2 ttl=62 time=3.643 ms
64 bytes from 63.200.45.18: icmp_seq=3 ttl=62 time=3.533 ms
64 bytes from 63.200.45.18: icmp_seq=4 ttl=62 time=3.374 ms
64 bytes from 63.200.45.18: icmp_seq=5 ttl=62 time=3.456 ms
[user:~] root# ping ns2.bonsi.org
PING ns2.bonsi.org (63.200.45.19): 56 data bytes
64 bytes from 63.200.45.19: icmp_seq=0 ttl=62 time=3.140 ms
64 bytes from 63.200.45.19: icmp_seq=1 ttl=62 time=3.681 ms
64 bytes from 63.200.45.19: icmp_seq=2 ttl=62 time=3.438 ms
64 bytes from 63.200.45.19: icmp_seq=3 ttl=62 time=3.543 ms
64 bytes from 63.200.45.19: icmp_seq=4 ttl=62 time=3.471 ms
[user:~] root# dig +tcp @63.200.45.18 ns1.bonsi.org
; <<>> DiG 9.6-ESV-R4-P3 <<>> +tcp @63.200.45.18 ns1.bonsi.org
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 17971
;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 1
;; WARNING: recursion requested but not available
;; QUESTION SECTION:
;ns1.bonsi.org. IN A
;; ANSWER SECTION:
ns1.bonsi.org. 3600 IN A 63.200.45.18
;; AUTHORITY SECTION:
bonsi.org. 3600 IN NS ns1.bonsi.org.
bonsi.org. 3600 IN NS ns2.bonsi.org.
;; ADDITIONAL SECTION:
ns2.bonsi.org. 3600 IN A 63.200.45.19
;; Query time: 8 msec
;; SERVER: 63.200.45.18#53(63.200.45.18)
;; WHEN: Tue Nov 22 10:42:51 2011
;; MSG SIZE rcvd: 95
[user:~] root# dig +tcp @63.200.45.19 ns2.bonsi.org
; <<>> DiG 9.6-ESV-R4-P3 <<>> +tcp @63.200.45.19 ns2.bonsi.org
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 20284
;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 1
;; WARNING: recursion requested but not available
;; QUESTION SECTION:
;ns2.bonsi.org. IN A
;; ANSWER SECTION:
ns2.bonsi.org. 3600 IN A 63.200.45.19
;; AUTHORITY SECTION:
bonsi.org. 3600 IN NS ns2.bonsi.org.
bonsi.org. 3600 IN NS ns1.bonsi.org.
;; ADDITIONAL SECTION:
ns1.bonsi.org. 3600 IN A 63.200.45.18
;; Query time: 6 msec
;; SERVER: 63.200.45.19#53(63.200.45.19)
;; WHEN: Tue Nov 22 10:48:08 2011
;; MSG SIZE rcvd: 95
Thanks!
--
BEARTCOMMUNICATIONS
Eduardo Bonsi
System - Network Admin
beart...@pacbell.net
webmas...@beart.com
_______________________________________________
Please visit https://lists.isc.org/mailman/listinfo/bind-users to
unsubscribe from this list
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
--
BEARTCOMMUNICATIONS
Eduardo Bonsi
System - Network Admin
beart...@pacbell.net
webmas...@beart.com
_______________________________________________
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
from this list
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
