On 1/27/18, PGNet Dev <pgnet....@gmail.com> wrote: > I've a local bind 9.12.0 server. Works for virtually all domains. > > For "irs.gov", it fails,
works for me on a local bind 9.11.2 server: $ dig a irs.gov. ; <<>> DiG 9.11.2 <<>> a irs.gov. ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 5748 ;; flags: qr rd ra ad; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ; COOKIE: ba2783422f7bc02f18d2058f5a6cd030cce6c0dbeac35ac5 (good) ;; QUESTION SECTION: ;irs.gov. IN A ;; ANSWER SECTION: irs.gov. 600 IN A 166.123.218.220 ;; AUTHORITY SECTION: irs.gov. 7200 IN NS ns2.irs.gov. irs.gov. 7200 IN NS ns4.irs.gov. irs.gov. 7200 IN NS ns3.irs.gov. irs.gov. 7200 IN NS ns1.irs.gov. ;; Query time: 140 msec ;; SERVER: 127.0.0.1#53(127.0.0.1) ;; WHEN: Sat Jan 27 19:17:04 Ame 2018 ;; MSG SIZE rcvd: 152 $ dig +trace irs.gov. ; <<>> DiG 9.11.2 <<>> +trace irs.gov. ;; global options: +cmd . 401538 IN NS b.root-servers.net. . 401538 IN NS h.root-servers.net. . 401538 IN NS k.root-servers.net. . 401538 IN NS i.root-servers.net. . 401538 IN NS d.root-servers.net. . 401538 IN NS l.root-servers.net. . 401538 IN NS f.root-servers.net. . 401538 IN NS c.root-servers.net. . 401538 IN NS e.root-servers.net. . 401538 IN NS j.root-servers.net. . 401538 IN NS a.root-servers.net. . 401538 IN NS m.root-servers.net. . 401538 IN NS g.root-servers.net. . 518068 IN RRSIG NS 8 0 518400 20180209170000 20180127160000 41824 . Ju2j+R7q7yw7+ibiRfuYrAx1CJzbz8xiP7AKFqe/I6wQBF1i+yY9dB4a VvDdY5cGsPeSjaoIvLY6BOlNCTeSJBTIrmL7+mKBd+ZASJAAZ2Nr5RhA +5aWIZlGvp1z0ElEkbAb3Lq/NXdYGerRmNPuppZ2E7jgSbauQdxLjG3Q /q94p9aX2wImvG4tT3ud15BEZN8Pe/2Rf/CMz126OrH/vv5LAkofOneL OPsaI+l8mor2iDiY5znO0phwqPJ4tYf+c/EdJGb6Yx7fBw6EVsr2Nxf8 dX2uMh5IdYyYT2OSkPisEDqvSrV9nwnnLkUliGailPL+OQkeZgj3I851 wSiAEQ== ;; Received 553 bytes from 127.0.0.1#53(127.0.0.1) in 0 ms gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 86400 IN DS 7698 8 2 6BC949E638442EAD0BDAF0935763C8D003760384FF15EBBD5CE86BB5 559561F0 gov. 86400 IN DS 7698 8 1 6F109B46A80CEA9613DC86D5A3E065520505AAFE gov. 86400 IN RRSIG DS 8 1 86400 20180209170000 20180127160000 41824 . PMUO1B/Cap+WBI40qtzJIiUL2/UToEfpvg76sip1dnCLnmML6aU3wwoz tXjr/9uZVQnK1xA5nKuc+Ox9GcGl9oIrb9SqrPiDtNW64PRVINDGnpoC MUioPrdhep65hdrwN1A3we2XAdAanEDTcCivV6Gsf+lun9tDkvGjaYt+ Bub/1Am/BlC8odckQrvTYSJSatlK6XpGNRk7Hj5UMQ4DBoLJOVWLDvhj rq/z7ow8IlZGARNSbGGMkgjoWPPLbyTKSQ2W6StbQ7cXaOjod8eUp8q+ eEwSMO+Cp5JuGEgM26oZ6yfxmGZwwrQZJ6mcIQ5gGLaEpl1An+RmxBQc /iH6ug== ;; Received 662 bytes from 192.36.148.17#53(i.root-servers.net) in 0 ms irs.gov. 86400 IN NS ns1.irs.gov. irs.gov. 86400 IN NS ns2.irs.gov. irs.gov. 86400 IN NS ns3.irs.gov. irs.gov. 86400 IN NS ns4.irs.gov. irs.gov. 3600 IN DS 29552 8 2 A9B81C7EDC4E5DBEF97991A812FCE87E82E80BF2330C3FB75C36DBFE 665745A3 irs.gov. 3600 IN RRSIG DS 8 2 3600 20180203161006 20180127161006 21179 gov. LNdq0+IpiPLViVoHC/UU4mCtQquIGY/BRMxWWsZ07UbTa6q7ZkVRIvwM RRLZz4lUb8pOddpuRqoqcVtbCL9hTfUHexxOsRUGdZOxDpfR5iIgKqcQ dTd/R6oyUqM9vbHu5u5S9MSlzN0ZWHcqxiIlpG7UL2TenZcugLkjEwT+ hdE= ;; Received 495 bytes from 209.112.123.30#53(b.gov-servers.net) in 15 ms irs.gov. 600 IN A 166.123.218.220 irs.gov. 600 IN RRSIG A 8 2 600 20180203180320 20180127170320 48205 irs.gov. dZa5nqq03GaaBUvMaW/EwFSpcwFR6RYcyvaSpiMKPtpIigZnXbHZG5NK QKtNpOYZEY2j/STf5huO8M9zqfX9aD0/Z7cuoljmAjPsJN+Nhr/5hVUB 1d9tvpnDCPcpGqz7jPQ++oMaMQStdkUB+ZaIleLbw5/vFr40bYHurVtD YScu8v5PkR+omkk6vCiC3azU6pa58WID+63nh9BNY0u20MoyFN9vxC0Q FpXjgn6uw5vbAA/ty6lLZwgwf4SIcrXBVS+BJ8a1n/j4M6edA1DcDaRs zwvJGuJOnv3nvzIuWndtWiTUpgkOFr0RBIxpOIgr/rmyt2LMUWiEq7go 1md+YA== irs.gov. 7200 IN NS ns1.irs.gov. irs.gov. 7200 IN NS ns2.irs.gov. irs.gov. 7200 IN NS ns3.irs.gov. irs.gov. 7200 IN NS ns4.irs.gov. irs.gov. 7200 IN RRSIG NS 8 2 7200 20180203180320 20180127170320 48205 irs.gov. UaVHSmN/2XebI8mPuW+QB5CjWyhQOoJsREx+HbxY6Ud6lOG3auf+V4Xx y8Iga+XF6P5TLpPVecBac0zxcObhDezAz3Th8mxRRbaoB0GcjGWqUEQu ecx+2z7npqyQPLZz8T89ng3+mPs0x2PWPww0H+YAtiB8XYdGzwLM+Uxv Bv2Ui1EhZdVZrn7BhLZeztbg/YetYOYG8OXWS6FBrcdYaQ6trnmhL9hm 1e5ik3hYWTBo0TSDN7UgdHpGQEvDF5A/f8fHg+MRvZp9RzmXs9/toIm8 TVGm8mcFZPY04AhKU6YE+uzAn4Bfc716qiBebB1XTwrz5XKpvNYEY3i1 2BaXvw== ;; Received 2955 bytes from 152.216.7.164#53(ns1.irs.gov) in 15 ms $ Regards, Lee > > dig A irs.gov > > ; <<>> DiG 9.12.0 <<>> A irs.gov > ;; global options: +cmd > ;; Got answer: > ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 2101 > ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, > ADDITIONAL: 1 > > ;; OPT PSEUDOSECTION: > ; EDNS: version: 0, flags:; udp: 4096 > ; COOKIE: 924396a00e82e7e6cb3a18495a6cb893e564a4fc00f78373 > (good) > ;; QUESTION SECTION: > ;irs.gov. IN A > > ;; Query time: 2706 msec > ;; SERVER: 127.0.0.1#53(127.0.0.1) > ;; WHEN: Sat Jan 27 09:36:19 PST 2018 > ;; MSG SIZE rcvd: 64 > > Resolution is fine at offsite servers > > dig A irs.gov @8.8.8.8 > > ; <<>> DiG 9.12.0 <<>> A irs.gov @8.8.8.8 > ;; global options: +cmd > ;; Got answer: > ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 56261 > ;; flags: qr rd ra ad; QUERY: 1, ANSWER: 1, AUTHORITY: 0, > ADDITIONAL: 1 > > ;; OPT PSEUDOSECTION: > ; EDNS: version: 0, flags:; udp: 512 > ;; QUESTION SECTION: > ;irs.gov. IN A > > ;; ANSWER SECTION: > irs.gov. 236 IN A 166.123.218.220 > > ;; Query time: 43 msec > ;; SERVER: 8.8.8.8#53(8.8.8.8) > ;; WHEN: Sat Jan 27 09:36:29 PST 2018 > ;; MSG SIZE rcvd: 52 > > looking at local server trace, > > dig +trace irs.gov > > ; <<>> DiG 9.12.0 <<>> +trace irs.gov > ;; global options: +cmd > . 3328 IN NS > a.root-servers.net. > . 3328 IN NS > b.root-servers.net. > . 3328 IN NS > c.root-servers.net. > . 3328 IN NS > d.root-servers.net. > . 3328 IN NS > e.root-servers.net. > . 3328 IN NS > f.root-servers.net. > . 3328 IN NS > g.root-servers.net. > . 3328 IN NS > h.root-servers.net. > . 3328 IN NS > i.root-servers.net. > . 3328 IN NS > j.root-servers.net. > . 3328 IN NS > k.root-servers.net. > . 3328 IN NS > l.root-servers.net. > . 3328 IN NS > m.root-servers.net. > . 3328 IN RRSIG NS 8 0 518400 > 20180209050000 20180127040000 41824 . > DkeMZSxEcmxZ78udDb9pw7HxLylmNUJb4utqwV206pQ+ItBvuuJzMnmY > pboHDZPEn15xUcGTmnAmDfpX1fhoHPYuBiXC3DmO/gwRG1ktl/xRKbjE > m9E9PDvUmd1F+/FCcexTFsFm0RU/EMiziKIYJL1ttj2+Ozjc/j+ii6I9 > cOVwjH8DE+3XqGjti803qu4Ycr3MQYcPxQiO6NckxoidZM3GxZRkunmr > mOz5bBDFfOBMbgC4uYGpfVuJ1OysDRzniNuFQXkftIlpFHmgeIi3U/GR > RoeIuOip9YaJRiUfnK1V8iFaff/70YvPr6PQkpmb8NpayLdfDqQdsK3D 8rJORA== > ;; Received 565 bytes from 127.0.0.1#53(127.0.0.1) in 1 ms > > gov. 172800 IN NS > a.gov-servers.net. > gov. 172800 IN NS > b.gov-servers.net. > gov. 172800 IN NS > c.gov-servers.net. > gov. 172800 IN NS > d.gov-servers.net. > gov. 86400 IN DS 7698 8 1 > 6F109B46A80CEA9613DC86D5A3E065520505AAFE > gov. 86400 IN DS 7698 8 2 > 6BC949E638442EAD0BDAF0935763C8D003760384FF15EBBD5CE86BB5 559561F0 > gov. 86400 IN RRSIG DS 8 1 86400 > 20180209050000 20180127040000 41824 . > jqlemnm+YBXTy0W+akzROVZNlZBsvyVnDOyCONEyDiOn4fXWTrFiDdXD > lvq60ytuyQpaevkMQHC360Z5CIU4GRqODFom0G/v1whZOS140lBiqPVb > f9xpX29Fx/RjEekGNXMlzXyrzXCtvy2yFQ7jcUYwl/JJ5DFRZerjAAt8 > 7v/CdHrF42E5ocjcSnxMZ1EaUFBMAm549lYRVSOG4h6SSlfos4R/G8GF > VKXs2JE27/EWXdIw0uMZKU88ExLdY6TVpCNHrrJ29W6CIT5JO59sI8GO > woML2fwF7+gfM5zbNM5geHdOvAVh0KY1mhCRT8cln5r8maazH4ih+jvV akgTRQ== > ;; Received 662 bytes from 199.7.83.42#53(l.root-servers.net) > in 28 ms > > irs.gov. 86400 IN NS ns1.irs.gov. > irs.gov. 86400 IN NS ns2.irs.gov. > irs.gov. 86400 IN NS ns3.irs.gov. > irs.gov. 86400 IN NS ns4.irs.gov. > irs.gov. 3600 IN DS 29552 8 2 > A9B81C7EDC4E5DBEF97991A812FCE87E82E80BF2330C3FB75C36DBFE 665745A3 > irs.gov. 3600 IN RRSIG DS 8 2 3600 > 20180203161006 > 20180127161006 21179 gov. > LNdq0+IpiPLViVoHC/UU4mCtQquIGY/BRMxWWsZ07UbTa6q7ZkVRIvwM > RRLZz4lUb8pOddpuRqoqcVtbCL9hTfUHexxOsRUGdZOxDpfR5iIgKqcQ > dTd/R6oyUqM9vbHu5u5S9MSlzN0ZWHcqxiIlpG7UL2TenZcugLkjEwT+ hdE= > couldn't get address for 'ns1.irs.gov': not found > couldn't get address for 'ns2.irs.gov': not found > couldn't get address for 'ns3.irs.gov': not found > couldn't get address for 'ns4.irs.gov': not found > dig: couldn't get address for 'ns1.irs.gov': no more > > checking > > ns1.irs.gov > ns2.irs.gov > ns3.irs.gov > ns4.irs.gov > > the issue's the same -- no resolution at the local server, just fine > offsite. > > What's going on here, specific to *irs.gov? > > Is it 'them'? Is there something we can remediate at the local server? > _______________________________________________ > Please visit https://lists.isc.org/mailman/listinfo/bind-users to > unsubscribe from this list > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users > _______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
