dig @ipv6-address

2018-11-29 Thread Christian Weiske
Hello,


I'm trying to use dig version 9.10.3 to test my local DNS
server which listens on IPv6 only.

I only get an error when running dig:

> $ dig @2a01:488:66:1000:53a9:2dde:0:1 cweiske.de
> couldn't get address for '2a01:488:66:1000:53a:53': not found

So how can I specify an IPv6 address in the "@" server parameter?




I found the same question in the mailing list archive of 2013;
https://lists.isc.org/mailman/htdig/bind-users/2013-August/091479.html

The solution there was to not only pass the IPv6 address, but also the
network interface name.

This unfortunately does not seem to work anymore:

> $ ifconfig venet0
> venet0: flags=211  mtu 1500
>  inet 127.0.0.1  netmask 255.255.255.255  broadcast 0.0.0.0  destination 
> 127.0.0.1
>  inet6 ::2  prefixlen 128  scopeid 0x80
>  inet6 2a01:488:66:1000:53a9:2dde:0:1  prefixlen 128  scopeid
>  0x0
> 
> $ dig @2a01:488:66:1000:53a:53%venet0 cweiske.de
> dig: couldn't get address for '2a01:488:66:1000:53a:53%venet0': not
> found



What works is adding an IPv6-only entry to /etc/hosts and then using
that as hostname in @:

> $ grep ahso3- /etc/hosts
> 83.169.45.222 ahso3-ipv4
> 2a01:488:66:1000:53a9:2dde:0:1 ahso3-ipv6
> 
> $ dig @ahso3-ipv6 +short  cweiske.de
> 2a01:488:66:1000:523:f116:0:1

But this is just a workaround.

How can I specify an IPv6 address in the @ server parameter of dig?

-- 
Regards/Mit freundlichen Grüßen
Christian Weiske

-=≡ Geeking around in the name of science since 1982 ≡=-
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: dig @ipv6-address

2018-11-29 Thread Tony Finch
Christian Weiske  wrote:
>
> I only get an error when running dig:
>
> > $ dig @2a01:488:66:1000:53a9:2dde:0:1 cweiske.de
> > couldn't get address for '2a01:488:66:1000:53a:53': not found

That's weird, it works for me. Are you using vanilla `dig` or a Linux
distro version?

Tony.
-- 
f.anthony.n.finchhttp://dotat.at/
Shannon: West or southwest 6 to gale 8. Very rough becoming high. Squally
showers. Good.
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: dig @ipv6-address

2018-11-29 Thread Christian Weiske
Hello Tony,


> > I only get an error when running dig:
> >  
> > > $ dig @2a01:488:66:1000:53a9:2dde:0:1 cweiske.de
> > > couldn't get address for '2a01:488:66:1000:53a:53': not found  
> 
> That's weird, it works for me. Are you using vanilla `dig` or a Linux
> distro version?

$ dig -v
DiG 9.10.3-P4-Debian

This is Debian 9.

-- 
Regards/Mit freundlichen Grüßen
Christian Weiske

-=≡ Geeking around in the name of science since 1982 ≡=-
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: dig @ipv6-address

2018-11-29 Thread Tony Finch
Christian Weiske  wrote:
>
> $ dig -v
> DiG 9.10.3-P4-Debian

weird, it does the right thing for me:

$ dig @2a01:488:66:1000:53a9:2dde:0:1 dotat.at

; <<>> DiG 9.10.3-P4-Debian <<>> @2a01:488:66:1000:53a9:2dde:0:1 dotat.at
; (1 server found)
;; global options: +cmd
;; connection timed out; no servers could be reached

Tony.
-- 
f.anthony.n.finchhttp://dotat.at/
Shannon: West or southwest 6 to gale 8. Very rough becoming high. Squally
showers. Good.
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: dig @ipv6-address

2018-11-29 Thread Timothe Litt
On 29-Nov-18 06:21, Christian Weiske wrote:
> Hello,
>
>
> I'm trying to use dig version 9.10.3 to test my local DNS
> server which listens on IPv6 only.
>
> I only get an error when running dig:
>
>> $ dig @2a01:488:66:1000:53a9:2dde:0:1 cweiske.de
>> couldn't get address for '2a01:488:66:1000:53a:53': not found

This looks like a typo. And the error doesn't match the command given.

I suspect that your actual 'dig' command was 'dig
@2a01:488:66:1000:53a:53 cweiske.de', which will reproduce the error.

'2a01:488:66:1000:53a:53' is not an IPv6 address.  You are missing a ::
or a couple of words.  (There should be 8 16-bit words delimited by ':',
or a single '::' ellipsis to represent a run of zeroes.)  Since it
doesn't parse as an IPv6 address, dig (probably getaddrinfo()) tried to
translate the string as a hostname.  Hence the error.

It's really not in anyone's interest when people post obfuscated
questions...

Timothe Litt
ACM Distinguished Engineer
--
This communication may not represent the ACM or my employer's views,
if any, on the matters discussed. 



signature.asc
Description: OpenPGP digital signature
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: dig @ipv6-address

2018-11-29 Thread Christian Weiske
Hello Timothe,


> > I only get an error when running dig:
> >  
> >> $ dig @2a01:488:66:1000:53a9:2dde:0:1 cweiske.de
> >> couldn't get address for '2a01:488:66:1000:53a:53': not found  
> 
> This looks like a typo. And the error doesn't match the command given.
> 
> I suspect that your actual 'dig' command was 'dig
> @2a01:488:66:1000:53a:53 cweiske.de', which will reproduce the error.
> 
> '2a01:488:66:1000:53a:53' is not an IPv6 address.  You are missing
> a :: or a couple of words.  (There should be 8 16-bit words delimited
> by ':', or a single '::' ellipsis to represent a run of zeroes.)

You are right, this was no full IPv6 address.

I'm sorry for the noise, but I didn't see the difference in the two IP
addresses. Otherwise I would not have subscribed to this list and
written my lenghty mail.

I scrolled back my terminal and now found where I got that partial
address from: The output of "netstat -tulpen". The listening address is
shortened there, which I did not know before:

> Proto Recv-Q Send-Q Local Address   Foreign Address
> udp6   0  0 2a01:488:66:1000:53a:53 :::*

From there I copied it and tried to "dig @" my domain, which failed as
I wrote.

Why there were different IPs in the command and the output of my
first example .. I have no idea. I somehow mixed up my notices.

Sorry again.

-- 
Regards/Mit freundlichen Grüßen
Christian Weiske

-=≡ Geeking around in the name of science since 1982 ≡=-
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: dig @ipv6-address

2018-11-29 Thread Barry Margolin
In article ,
 Christian Weiske  wrote:

> Hello Timothe,
> 
> 
> > > I only get an error when running dig:
> > >  
> > >> $ dig @2a01:488:66:1000:53a9:2dde:0:1 cweiske.de
> > >> couldn't get address for '2a01:488:66:1000:53a:53': not found  
> > 
> > This looks like a typo. And the error doesn't match the command given.
> > 
> > I suspect that your actual 'dig' command was 'dig
> > @2a01:488:66:1000:53a:53 cweiske.de', which will reproduce the error.
> > 
> > '2a01:488:66:1000:53a:53' is not an IPv6 address.ハ You are missing
> > a :: or a couple of words.ハ (There should be 8 16-bit words delimited
> > by ':', or a single '::' ellipsis to represent a run of zeroes.)
> 
> You are right, this was no full IPv6 address.
> 
> I'm sorry for the noise, but I didn't see the difference in the two IP
> addresses. Otherwise I would not have subscribed to this list and
> written my lenghty mail.
> 
> I scrolled back my terminal and now found where I got that partial
> address from: The output of "netstat -tulpen". The listening address is
> shortened there, which I did not know before:
> 
> > Proto Recv-Q Send-Q Local Address   Foreign Address
> > udp6   0  0 2a01:488:66:1000:53a:53 :::*
> 
> From there I copied it and tried to "dig @" my domain, which failed as
> I wrote.
> 
> Why there were different IPs in the command and the output of my
> first example .. I have no idea. I somehow mixed up my notices.
> 
> Sorry again.

The last : in the netstat output is separating the IP address from the 
port number -- :53 means it's listening on port 53, the standard DNS 
port.

But it also seems like it's using its own form of abbreviation, since 
there aren't 8 hex fields before that.

-- 
Barry Margolin
Arlington, MA
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: dig @ipv6-address

2018-11-29 Thread Carl Byington
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

On Thu, 2018-11-29 at 15:26 -0500, Barry Margolin wrote:
> But it also seems like it's using its own form of abbreviation, since
> there aren't 8 hex fields before that.

"man netstat" on centos6

   -T --notrim
   Stop trimming long addresses.

"man netstat" on centos7

   --wide , -W
   Do not truncate IP addresses by using output as wide as needed.


-BEGIN PGP SIGNATURE-
Version: GnuPG v2.0.14 (GNU/Linux)

iEYEAREKAAYFAlwAUNwACgkQL6j7milTFsH7dgCfe24daCifc5U3tykASPhIDldN
/bgAn0uDW0ZXzMbMD6ikOxbFOeEbjRez
=Pg10
-END PGP SIGNATURE-


___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users