Hello All The problem of the .gov.bd domain resolution has been successfully resolved. In the zone file configuration, there was a forward entry for .gov.bd, and after commenting out those lines, all .gov.bd domains are now functioning correctly.
Thank you all for providing the right guidance that helped us pinpoint the issue." root@ns1:/# dig mofa.gov.bd +trace \ ; <<>> DiG 9.18.19-1~deb12u1-Debian <<>> mofa.gov.bd +trace ;; global options: +cmd . 452497 IN NS m.root-servers.net. . 452497 IN NS i.root-servers.net. . 452497 IN NS e.root-servers.net. . 452497 IN NS g.root-servers.net. . 452497 IN NS l.root-servers.net. . 452497 IN NS a.root-servers.net. . 452497 IN NS j.root-servers.net. . 452497 IN NS b.root-servers.net. . 452497 IN NS c.root-servers.net. . 452497 IN NS f.root-servers.net. . 452497 IN NS h.root-servers.net. . 452497 IN NS d.root-servers.net. . 452497 IN NS k.root-servers.net. . 452497 IN RRSIG NS 8 0 518400 20231112050000 20231030040000 46780 . KOSvh8dmDkcY070FSYz+vAkH6BC+ZR4nGbEu0plshkZZX47oFXFpsHTJ /LiU7G7KXp6gE+g+QDcHk/HPEljGFNY5RwvzQaCjHGG063ypr+Huj1vJ 0SR03fSwm1FALKZ0EFNI2aIfpxY/1S8xc2HzZmHuneQcp7mTY7i+KtOY z8ljk2jQbdCjHYPg/AgIPtF2+507LnFScSCTw+zOVFYFktoPHyy/wDIk 3G0VQQIQG5+1kjn7YZl1yuyxiSqJhq1+7tSkrL3AKhA4fJtynJcBbZsw dq3mVHPfARjUjby2WNt/M2clERoo+W/zYsZpkKamUpvTNm6gYnnt2xUV 8F5/Ow== ;; Received 1137 bytes from 202.84.32.22#53(202.84.32.22) in 0 ms bd. 172800 IN NS surma.btcl.net.bd. bd. 172800 IN NS dns.bd. bd. 172800 IN NS bd-ns.anycast.pch.net. bd. 172800 IN NS jamuna.btcl.net.bd. bd. 86400 IN DS 26044 8 2 BD01C4B4345D21FC38AA88129F7BC00FDD7B422799CC6703736E3B38 1F37DD5B bd. 86400 IN DS 26044 8 1 2DAD1B7F8CA778464F536FDDD15EFD24CCCB62EF bd. 86400 IN RRSIG DS 8 1 86400 20231112170000 20231030160000 46780 . IFF4dDc0UEceikw9rf2bEaz/4LZtyCHeKAxX+gD8okseRzK1EcheFZ53 m8ZJtUa/ptVRIm6Hvwc8HTq7KeRKoCULw2isoqB/gNJDc+PasE0/2Uq8 vEY0CCPJad/zKRAjSXxkI6tmvOt3a3Mk6soTIOFCiK0eITwx2sJsdIGZ /wL3cfaqSHh1735dWtg0kWFstyesSida7YHjNyOsJ/X/mUMEInhFdHzR mg3Sa64FUy8BamA/yTUazNb3VG3yRS9ZUFJXeMib7qjSspDEqb2dTKzy RvFxiNKOD5rDoCN3/Da6hi/dBhCLL9Zh+6mhsV0KHLahoKI2Bl2xw2v3 F9hFyA== ;; Received 722 bytes from 192.36.148.17#53(i.root-servers.net) in 51 ms mofa.gov.bd. 86400 IN NS ns1.bcc.gov.bd. mofa.gov.bd. 86400 IN NS ns2.bcc.gov.bd. ;; Received 146 bytes from 204.61.216.108#53(bd-ns.anycast.pch.net) in 0 ms mofa.gov.bd. 38400 IN A 103.163.210.117 mofa.gov.bd. 38400 IN A 103.163.210.121 mofa.gov.bd. 38400 IN NS ns1.bcc.gov.bd. mofa.gov.bd. 38400 IN NS ns2.bcc.gov.bd. ;; Received 146 bytes from 114.130.54.124#53(ns2.bcc.gov.bd) in 0 ms Regards Mosharaf Hossain Manager, Product Development IT Division Bangladesh Export Import Company Ltd. Level-8, SAM Tower, Plot #4, Road #22, Gulshan-1, Dhaka-1212,Bangladesh Tel: +880 9609 000 999, +880 2 5881 5559, Ext: 14191, Fax: +880 2 9895757 Cell: +8801787680828, Email: mosharaf.hoss...@bol-online.com, Web: www.bol-online.com <https://www.google.com/url?q=http://www.bol-online.com&sa=D&source=hangouts&ust=1557908951423000&usg=AFQjCNGMxIuHSHsD3qO6y5JddpEZ0S592A> On Tue, Oct 31, 2023 at 7:15 AM Mark Andrews <ma...@isc.org> wrote: > > > > On 30 Oct 2023, at 17:25, Mosharaf Hossain < > mosharaf.hoss...@bol-online.com> wrote: > > > > mofa.gov.bd. 86400 IN NS ns1.bcc.gov.bd. > > mofa.gov.bd. 86400 IN NS ns2.bcc.gov.bd. > > couldn't get address for 'ns1.bcc.gov.bd': not found > > couldn't get address for 'ns2.bcc.gov.bd': not found > > dig: couldn't get address for 'ns1.bcc.gov.bd': no more > > root@ns1:/etc/bind# > > So you got this this point and that is saying that the lookup of > the addresses of the nameservers is failing. The next step would to > do a 'dig +trace' or a 'dig +trace +all' of those names. > > % dig +trace ns1.bcc.gov.bd. +all -4 > ;; BADCOOKIE, retrying. > > ; <<>> DiG 9.19.18-dev <<>> +trace ns1.bcc.gov.bd. +all -4 > ;; global options: +cmd > ;; Got answer: > ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 11927 > ;; flags: qr rd ra ad; QUERY: 1, ANSWER: 14, AUTHORITY: 0, ADDITIONAL: 27 > > ;; OPT PSEUDOSECTION: > ; EDNS: version: 0, flags: do; udp: 1232 > ; COOKIE: 69a562ec1c50e22801000000654052b51e141922bd619839 (good) > ;; QUESTION SECTION: > ;. IN NS > > ;; ANSWER SECTION: > . 193742 IN NS b.root-servers.net. > . 193742 IN NS c.root-servers.net. > . 193742 IN NS d.root-servers.net. > . 193742 IN NS g.root-servers.net. > . 193742 IN NS j.root-servers.net. > . 193742 IN NS l.root-servers.net. > . 193742 IN NS i.root-servers.net. > . 193742 IN NS h.root-servers.net. > . 193742 IN NS k.root-servers.net. > . 193742 IN NS a.root-servers.net. > . 193742 IN NS f.root-servers.net. > . 193742 IN NS e.root-servers.net. > . 193742 IN NS m.root-servers.net. > . 193742 IN RRSIG NS 8 0 518400 20231109050000 20231027040000 46780 . > CkAeB9x0RdrjpMfUJWlZS8F8YwnNj8KY7CYkukIncgzX1eve21wHBkgF > kXrIEQP7Atkq4/KYqsgs4fKnFwIkxtEqqDDvkU/635/cYgOFaBKiU5Di > 4sPC5Q/q8jORU4WPM7vg+j7bY48qEaoTImPuT+EQpI4HF5uHekYm9F35 > tJENhmLryMv8K4+072w2eaOTc45wirnVNxhxZ2QK8aZylubq2ELQ43aJ > GgRmrFhujt8jzi20OvySAq1MNCd3Dy0Xqh99DSu6YkhflypgZXeUEiRV > 8/HB33V9yQBs/GNXjajxSw/NwxLAxMDNv8kdkE08YBWTZLQfPmY/+ZDU FEchxA== > > ;; ADDITIONAL SECTION: > l.root-servers.net. 135488 IN A 199.7.83.42 > g.root-servers.net. 135488 IN A 192.112.36.4 > i.root-servers.net. 135488 IN A 192.36.148.17 > h.root-servers.net. 135488 IN A 198.97.190.53 > k.root-servers.net. 135488 IN A 193.0.14.129 > j.root-servers.net. 135488 IN A 192.58.128.30 > d.root-servers.net. 135488 IN A 199.7.91.13 > b.root-servers.net. 135488 IN A 199.9.14.201 > a.root-servers.net. 135488 IN A 198.41.0.4 > f.root-servers.net. 135488 IN A 192.5.5.241 > e.root-servers.net. 135488 IN A 192.203.230.10 > c.root-servers.net. 135488 IN A 192.33.4.12 > m.root-servers.net. 135488 IN A 202.12.27.33 > l.root-servers.net. 135488 IN AAAA 2001:500:9f::42 > g.root-servers.net. 135488 IN AAAA 2001:500:12::d0d > i.root-servers.net. 135488 IN AAAA 2001:7fe::53 > h.root-servers.net. 135488 IN AAAA 2001:500:1::53 > k.root-servers.net. 135488 IN AAAA 2001:7fd::1 > j.root-servers.net. 135488 IN AAAA 2001:503:c27::2:30 > d.root-servers.net. 135488 IN AAAA 2001:500:2d::d > b.root-servers.net. 135488 IN AAAA 2001:500:200::b > a.root-servers.net. 135488 IN AAAA 2001:503:ba3e::2:30 > f.root-servers.net. 135488 IN AAAA 2001:500:2f::f > e.root-servers.net. 135488 IN AAAA 2001:500:a8::e > c.root-servers.net. 135488 IN AAAA 2001:500:2::c > m.root-servers.net. 135488 IN AAAA 2001:dc3::35 > > ;; Query time: 0 msec > ;; SERVER: 127.0.0.1#53(127.0.0.1) (UDP) > ;; WHEN: Tue Oct 31 12:04:53 AEDT 2023 > ;; MSG SIZE rcvd: 1125 > > ;; Got answer: > ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 38819 > ;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 7, ADDITIONAL: 9 > > ;; OPT PSEUDOSECTION: > ; EDNS: version: 0, flags: do; udp: 1232 > ; COOKIE: 69a562ec1c50e22801000000654052b5f101b47fe1d10f06 (good) > ;; QUESTION SECTION: > ;ns1.bcc.gov.bd. IN A > > ;; AUTHORITY SECTION: > bd. 172800 IN NS dns.bd. > bd. 172800 IN NS surma.btcl.net.bd. > bd. 172800 IN NS bd-ns.anycast.pch.net. > bd. 172800 IN NS jamuna.btcl.net.bd. > bd. 86400 IN DS 26044 8 1 2DAD1B7F8CA778464F536FDDD15EFD24CCCB62EF > bd. 86400 IN DS 26044 8 2 > BD01C4B4345D21FC38AA88129F7BC00FDD7B422799CC6703736E3B38 1F37DD5B > bd. 86400 IN RRSIG DS 8 1 86400 20231112170000 20231030160000 46780 . > IFF4dDc0UEceikw9rf2bEaz/4LZtyCHeKAxX+gD8okseRzK1EcheFZ53 > m8ZJtUa/ptVRIm6Hvwc8HTq7KeRKoCULw2isoqB/gNJDc+PasE0/2Uq8 > vEY0CCPJad/zKRAjSXxkI6tmvOt3a3Mk6soTIOFCiK0eITwx2sJsdIGZ > /wL3cfaqSHh1735dWtg0kWFstyesSida7YHjNyOsJ/X/mUMEInhFdHzR > mg3Sa64FUy8BamA/yTUazNb3VG3yRS9ZUFJXeMib7qjSspDEqb2dTKzy > RvFxiNKOD5rDoCN3/Da6hi/dBhCLL9Zh+6mhsV0KHLahoKI2Bl2xw2v3 F9hFyA== > > ;; ADDITIONAL SECTION: > jamuna.btcl.net.bd. 172800 IN A 203.112.194.231 > surma.btcl.net.bd. 172800 IN A 203.112.194.232 > bd-ns.anycast.pch.net. 172800 IN A 204.61.216.108 > dns.bd. 172800 IN A 123.49.12.112 > jamuna.btcl.net.bd. 172800 IN AAAA 2407:5000:88:4::231 > surma.btcl.net.bd. 172800 IN AAAA 2407:5000:88:4::232 > bd-ns.anycast.pch.net. 172800 IN AAAA 2001:500:14:6108:ad::1 > dns.bd. 172800 IN AAAA 2407:5000:88:5::3 > > ;; Query time: 19 msec > ;; SERVER: 192.33.4.12#53(c.root-servers.net) (UDP) > ;; WHEN: Tue Oct 31 12:04:53 AEDT 2023 > ;; MSG SIZE rcvd: 725 > > ;; Got answer: > ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 54270 > ;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 2, ADDITIONAL: 3 > > ;; OPT PSEUDOSECTION: > ; EDNS: version: 0, flags: do; udp: 4096 > ;; QUESTION SECTION: > ;ns1.bcc.gov.bd. IN A > > ;; AUTHORITY SECTION: > bcc.gov.bd. 86400 IN NS ns1.bcc.gov.bd. > bcc.gov.bd. 86400 IN NS ns2.bcc.gov.bd. > > ;; ADDITIONAL SECTION: > ns1.bcc.gov.bd. 86400 IN A 114.130.54.123 > ns2.bcc.gov.bd. 86400 IN A 114.130.54.124 > > ;; Query time: 210 msec > ;; SERVER: 123.49.12.112#53(dns.bd) (UDP) > ;; WHEN: Tue Oct 31 12:04:54 AEDT 2023 > ;; MSG SIZE rcvd: 107 > > ;; Got answer: > ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 11259 > ;; flags: qr aa; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2 > > ;; OPT PSEUDOSECTION: > ; EDNS: version: 0, flags: do; udp: 1232 > ; COOKIE: 69a562ec1c50e22801000000654052b6abe0594cf8b9b688 (good) > ;; QUESTION SECTION: > ;ns1.bcc.gov.bd. IN A > > ;; ANSWER SECTION: > ns1.bcc.gov.bd. 38400 IN A 114.130.54.123 > > ;; AUTHORITY SECTION: > bcc.gov.bd. 38400 IN NS ns1.bcc.gov.bd. > bcc.gov.bd. 38400 IN NS ns2.bcc.gov.bd. > > ;; ADDITIONAL SECTION: > ns2.bcc.gov.bd. 38400 IN A 114.130.54.124 > > ;; Query time: 212 msec > ;; SERVER: 114.130.54.123#53(ns1.bcc.gov.bd) (UDP) > ;; WHEN: Tue Oct 31 12:04:54 AEDT 2023 > ;; MSG SIZE rcvd: 135 > > % > > That succeeded but you will note that that address of both of the > nameservers > for bcc.gov.bd are in the same /24 which means there is a single point of > failure at the routing level. At this point I’d test if you could reach > the nameservers with direct queries as you have their addresses in the glue > returned from the .bd nameservers assuming that if fails for you. > > % dig ns1.bcc.gov.bd @114.130.54.123 > > ; <<>> DiG 9.19.18-dev <<>> ns1.bcc.gov.bd @114.130.54.123 > ;; global options: +cmd > ;; Got answer: > ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 2139 > ;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1 > ;; WARNING: recursion requested but not available > > ;; OPT PSEUDOSECTION: > ; EDNS: version: 0, flags:; udp: 1232 > ; COOKIE: 8a8e9d7bfc1abdb2010000006540536a724fdb04112462bb (good) > ;; QUESTION SECTION: > ;ns1.bcc.gov.bd. IN A > > ;; ANSWER SECTION: > ns1.bcc.gov.bd. 38400 IN A 114.130.54.123 > > ;; Query time: 215 msec > ;; SERVER: 114.130.54.123#53(114.130.54.123) (UDP) > ;; WHEN: Tue Oct 31 12:07:54 AEDT 2023 > ;; MSG SIZE rcvd: 87 > > % dig ns2.bcc.gov.bd @114.130.54.124 > > ; <<>> DiG 9.19.18-dev <<>> ns2.bcc.gov.bd @114.130.54.124 > ;; global options: +cmd > ;; Got answer: > ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 44727 > ;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1 > ;; WARNING: recursion requested but not available > > ;; OPT PSEUDOSECTION: > ; EDNS: version: 0, flags:; udp: 1232 > ; COOKIE: 181d91ea2ecc46ce01000000654054883752dba5d1912e6e (good) > ;; QUESTION SECTION: > ;ns2.bcc.gov.bd. IN A > > ;; ANSWER SECTION: > ns2.bcc.gov.bd. 38400 IN A 114.130.54.124 > > ;; Query time: 212 msec > ;; SERVER: 114.130.54.124#53(114.130.54.124) (UDP) > ;; WHEN: Tue Oct 31 12:12:40 AEDT 2023 > ;; MSG SIZE rcvd: 87 > > % > > -- > Mark Andrews, ISC > 1 Seymour St., Dundas Valley, NSW 2117, Australia > PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org > >
-- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
