Ok! Thank you all! My router doesn't maintain a DNS cache, so it must be my IPS's fault.
The last questions, if it's possible: what happens when my 'named' starts an iterative query? Does it arrive to the real root-server (first of all), or is it processed by some other cache-server on the path? And why 'named' doesn't "understand" the responses from these cache-servers? 2013/1/18 Mark Andrews <ma...@isc.org> > > In message < > cal_2sc1szstumpmfceuqrf87nqwe+5n30qvguds7q-4g6va...@mail.gmail.com>, > Daniele writes: > > These are the outputs. I also attach the file containing them. > > > > > > ; <<>> DiG 9.8.1-P1 <<>> ns . +norec +noedns @198.41.0.4 > > ;; global options: +cmd > > ;; Got answer: > > ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 25625 > > ;; flags: qr ra; QUERY: 1, ANSWER: 13, AUTHORITY: 0, ADDITIONAL: 14 > > > > ;; QUESTION SECTION: > > ;. IN NS > > > > ;; ANSWER SECTION: > > . 243196 IN NS l.root-servers.net. > > . 243196 IN NS g.root-servers.net. > > . 243196 IN NS k.root-servers.net. > > . 243196 IN NS a.root-servers.net. > > . 243196 IN NS e.root-servers.net. > > . 243196 IN NS d.root-servers.net. > > . 243196 IN NS c.root-servers.net. > > . 243196 IN NS i.root-servers.net. > > . 243196 IN NS f.root-servers.net. > > . 243196 IN NS h.root-servers.net. > > . 243196 IN NS j.root-servers.net. > > . 243196 IN NS b.root-servers.net. > > . 243196 IN NS m.root-servers.net. > > > > ;; ADDITIONAL SECTION: > > a.root-servers.net. 502389 IN A 198.41.0.4 > > a.root-servers.net. 508720 IN AAAA 2001:503:ba3e::2:30 > > b.root-servers.net. 502640 IN A 192.228.79.201 > > c.root-servers.net. 502640 IN A 192.33.4.12 > > d.root-servers.net. 523851 IN A 199.7.91.13 > > e.root-servers.net. 502640 IN A 192.203.230.10 > > f.root-servers.net. 581030 IN A 192.5.5.241 > > f.root-servers.net. 236384 IN AAAA 2001:500:2f::f > > g.root-servers.net. 502640 IN A 192.112.36.4 > > i.root-servers.net. 502640 IN A 192.36.148.17 > > i.root-servers.net. 555890 IN AAAA 2001:7fe::53 > > j.root-servers.net. 537043 IN A 192.58.128.30 > > j.root-servers.net. 236384 IN AAAA 2001:503:c27::2:30 > > k.root-servers.net. 502394 IN A 193.0.14.129 > > > > ;; Query time: 62 msec > > ;; SERVER: 198.41.0.4#53(198.41.0.4) > > ;; WHEN: Fri Jan 18 15:38:42 2013 > > ;; MSG SIZE rcvd: 500 > > Below is what the answer should look like. The TTLs should be these > values shown below (6 days and 1000 hours) and "aa" should be set > in the flags and "ra" should NOT be set in the flags. You have a > "transparent" DNS caching proxy between you and the Internet as a > whole. > > Some routers try to be "helpful" by maintaining a DNS cache. You > need to turn the "feature" off. Otherwise it is your ISP doing it > and you need to get them to stop mucking with your DNS queries. > > Named issues non-recursive queries and sticking a normal recursive > server in the path that pays attention to the setting of "rd" doesn't > result in getting the required answers back. > > Mark > > ; <<>> DiG 9.10.0pre-alpha <<>> ns . +norec +noedns @198.41.0.4 > ;; global options: +cmd > ;; Got answer: > ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 18118 > ;; flags: qr aa; QUERY: 1, ANSWER: 13, AUTHORITY: 0, ADDITIONAL: 14 > > ;; QUESTION SECTION: > ;. IN NS > > ;; ANSWER SECTION: > . 518400 IN NS c.root-servers.net. > . 518400 IN NS m.root-servers.net. > . 518400 IN NS b.root-servers.net. > . 518400 IN NS f.root-servers.net. > . 518400 IN NS j.root-servers.net. > . 518400 IN NS g.root-servers.net. > . 518400 IN NS i.root-servers.net. > . 518400 IN NS h.root-servers.net. > . 518400 IN NS d.root-servers.net. > . 518400 IN NS l.root-servers.net. > . 518400 IN NS a.root-servers.net. > . 518400 IN NS e.root-servers.net. > . 518400 IN NS k.root-servers.net. > > ;; ADDITIONAL SECTION: > a.root-servers.net. 3600000 IN A 198.41.0.4 > a.root-servers.net. 3600000 IN AAAA 2001:503:ba3e::2:30 > b.root-servers.net. 3600000 IN A 192.228.79.201 > c.root-servers.net. 3600000 IN A 192.33.4.12 > d.root-servers.net. 3600000 IN A 199.7.91.13 > d.root-servers.net. 3600000 IN AAAA 2001:500:2d::d > e.root-servers.net. 3600000 IN A 192.203.230.10 > f.root-servers.net. 3600000 IN A 192.5.5.241 > f.root-servers.net. 3600000 IN AAAA 2001:500:2f::f > g.root-servers.net. 3600000 IN A 192.112.36.4 > h.root-servers.net. 3600000 IN A 128.63.2.53 > h.root-servers.net. 3600000 IN AAAA 2001:500:1::803f:235 > i.root-servers.net. 3600000 IN A 192.36.148.17 > i.root-servers.net. 3600000 IN AAAA 2001:7fe::53 > > ;; Query time: 182 msec > ;; SERVER: 198.41.0.4#53(198.41.0.4) > ;; WHEN: Sat Jan 19 08:06:22 EST 2013 > ;; MSG SIZE rcvd: 512 > > -- > Mark Andrews, ISC > 1 Seymour St., Dundas Valley, NSW 2117, Australia > PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org >
_______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
