No, the box is hanging right off the internet on a static IP. Jeff
On Jun 26, 2013, at 12:38 AM, Frank Bulk <frnk...@iname.com> wrote: > Do you have a box such as a firewall or load-balancer sitting in front of > ns1? > > Frank > > -----Original Message----- > From: bind-users-bounces+frnkblk=iname....@lists.isc.org > [mailto:bind-users-bounces+frnkblk=iname....@lists.isc.org] On Behalf Of SH > Development > Sent: Tuesday, June 25, 2013 8:35 PM > To: bind-users@lists.isc.org > Subject: Re: Secondary DNS question... > > All very interesting, but I'm afraid at my level of expertise on DNS, I'm > not following. If I'm broken, how do I attempt to fix? Someone mentioned > that our ns1.starionhost.net was not authoritative. How does one even > decide that? As far as I know I haven't had any issues until now... > > Jeff > > > On Jun 25, 2013, at 6:26 AM, Matus UHLAR - fantomas <uh...@fantomas.sk> > wrote: > >>> On 24.06.13 07:41, Frank Bulk wrote: >>>> Interesting to note that querying for ANY does return an SOA. I can't >>>> explain that behavior. >> >> On 24.06.13 14:54, Matus UHLAR - fantomas wrote: >>> I can guess a kind of DNS filter/firewall. Some l3 switches or load >>> balancers tend to produce strange results too... >> >> aa! I am getting response packets but they are somehoe not accepted by > dig: >> >> % dig +norec +bufsize=4096 -t soa starionline.com @ns1.starionhost.net >> >> ; <<>> DiG 9.8.4-rpz2+rl005.12-P1 <<>> +norec +bufsize=4096 -t soa > starionline.com @ns1.starionhost.net >> ;; global options: +cmd >> ;; connection timed out; no servers could be reached >> >> ... in the meantime: >> >> 13:21:38.837415 IP (tos 0x0, ttl 64, id 9452, offset 0, flags [none], > proto UDP (17), length 72) >> 62.168.95.114.39172 > 74.87.108.83.53: [udp sum ok] 51735 [1au] SOA? > starionline.com. ar: . OPT UDPsize=4096 (44) >> 13:21:39.009098 IP (tos 0x10, ttl 50, id 15611, offset 0, flags [none], > proto UDP (17), length 196) >> 74.87.108.83.53 > 62.168.95.114.39172: [bad udp cksum 0x5586 -> 0xe731!] > 51735*- q: SOA? starionline.com. 1/2/3 starionline.com. [1d] SOA > ns1.starionhost.net. info.starionhost.net. 2008122905 28800 7200 1209600 > 3600 ns: starionline.com. [1d] NS ns1.starionhost.net., starionline.com. > [1d] NS ns2.starionhost.net. ar: ns1.starionhost.net. [1d] A 74.87.108.83, > ns2.starionhost.net. [1d] A 64.136.200.138, . OPT UDPsize=4096 (168) >> 13:21:43.837389 IP (tos 0x0, ttl 64, id 9453, offset 0, flags [none], > proto UDP (17), length 72) >> 62.168.95.114.39172 > 74.87.108.83.53: [udp sum ok] 51735 [1au] SOA? > starionline.com. ar: . OPT UDPsize=4096 (44) >> 13:21:44.009780 IP (tos 0x10, ttl 50, id 4231, offset 0, flags [none], > proto UDP (17), length 196) >> 74.87.108.83.53 > 62.168.95.114.39172: [bad udp cksum 0x5586 -> 0xe731!] > 51735*- q: SOA? starionline.com. 1/2/3 starionline.com. [1d] SOA > ns1.starionhost.net. info.starionhost.net. 2008122905 28800 7200 1209600 > 3600 ns: starionline.com. [1d] NS ns1.starionhost.net., starionline.com. > [1d] NS ns2.starionhost.net. ar: ns1.starionhost.net. [1d] A 74.87.108.83, > ns2.starionhost.net. [1d] A 64.136.200.138, . OPT UDPsize=4096 (168) >> 13:21:48.837515 IP (tos 0x0, ttl 64, id 9454, offset 0, flags [none], > proto UDP (17), length 72) >> 62.168.95.114.39172 > 74.87.108.83.53: [udp sum ok] 51735 [1au] SOA? > starionline.com. ar: . OPT UDPsize=4096 (44) >> 13:21:49.011060 IP (tos 0x10, ttl 50, id 38531, offset 0, flags [none], > proto UDP (17), length 196) >> 74.87.108.83.53 > 62.168.95.114.39172: [bad udp cksum 0x5586 -> 0xf531!] > 51735*- q: SOA? starionline.com. 1/2/3 starionline.com. [1d] SOA > ns1.starionhost.net. info.starionhost.net. 2008122905 28800 7200 1209600 > 3600 ns: starionline.com. [1d] NS ns2.starionhost.net., starionline.com. > [1d] NS ns1.starionhost.net. ar: ns1.starionhost.net. [1d] A 74.87.108.83, > ns2.starionhost.net. [1d] A 64.136.200.138, . OPT UDPsize=4096 (168) >> >> >>>> stariononline.com has two NSes listed, ns1.starionhost.net > [74.87.108.83] >>>> and ns2.starionhost.net [64.136.200.138]. But the first one does not > seem >>>> to want to respond (http://goo.gl/s41wN and http://dnscheck.iis.se/ and >>>> http://www.zonecut.net/dns/index.cgi are just a few examples) to a few > of >>>> the online checkers. I checked with some others and it looks like you > have >>>> no SOA set for for ns1.starionhost.net: >> >> -- >> Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ >> Warning: I wish NOT to receive e-mail advertising to this address. >> Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. >> I don't have lysdexia. The Dog wouldn't allow that. >> _______________________________________________ >> Please visit https://lists.isc.org/mailman/listinfo/bind-users to > unsubscribe from this list >> >> bind-users mailing list >> bind-users@lists.isc.org >> https://lists.isc.org/mailman/listinfo/bind-users >> > > _______________________________________________ > Please visit https://lists.isc.org/mailman/listinfo/bind-users to > unsubscribe from this list > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users > > > _______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
