In message <caektliskjoymf7iin7leks6ujrmezawtzbeydyy200-2bwd...@mail.gmail.com>, Casey Deccio writes: > > I seem to be having trouble resolving names in sandia.gov from Verizon > Wireless resolvers (well, one at least), which are giving me REFUSED > responses. Other names, in .gov and otherwise, resolve just fine. Anyone > know anything? > > Thanks, > Casey
I would be getting on the phone as REFUSED is not a response that is cached then returned in the down stream responses. Normally upstream REFUSED become down stream SERVFAIL. The usual way to get this is to configure a zone then set the acl to prevent respones. Mark > $ dig +tcp @198.224.191.135 sandia.gov > > ; <<>> DiG 9.8.5-P1 <<>> +tcp @198.224.191.135 sandia.gov > ; (1 server found) > ;; global options: +cmd > ;; Got answer: > ;; ->>HEADER<<- opcode: QUERY, status: REFUSED, id: 882 > ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0 > > ;; QUESTION SECTION: > ;sandia.gov. IN A > > ;; Query time: 47 msec > ;; SERVER: 198.224.191.135#53(198.224.191.135) > ;; WHEN: Tue Oct 29 12:37:00 PDT 2013 > ;; MSG SIZE rcvd: 28 > -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: [email protected] _______________________________________________ dns-operations mailing list [email protected] https://lists.dns-oarc.net/mailman/listinfo/dns-operations dns-jobs mailing list https://lists.dns-oarc.net/mailman/listinfo/dns-jobs
