Re: Dig ANY gives SERVFAIL / FORMERR

2009-09-29 Thread Mark Andrews
In message , Paul Wou ters writes: > On Wed, 30 Sep 2009, Mark Andrews wrote: > > >> http://www.afnic.fr/outils/zonecheck/_en > > > > The key word is "required". I know some do, I just wish more did. > > I for one, welcome our new named-checkzone overlords. > > (especially if named-checkzone w

Re: Dig ANY gives SERVFAIL / FORMERR

2009-09-29 Thread Paul Wouters
On Wed, 30 Sep 2009, Mark Andrews wrote: http://www.afnic.fr/outils/zonecheck/_en The key word is "required". I know some do, I just wish more did. I for one, welcome our new named-checkzone overlords. (especially if named-checkzone would fail to OK a zone with NSEC3RSASHA1 keys and re-use

Re: Dig ANY gives SERVFAIL / FORMERR

2009-09-29 Thread Mark Andrews
In message <20090929122845.ga13...@nic.fr>, Stephane Bortzmeyer writes: > On Thu, Sep 24, 2009 at 07:16:35AM +1000, > Mark Andrews wrote > a message of 77 lines which said: > > > It's a pity registries are not required to verify correct operation > > of the nameservers they are delegating to

Re: Dig ANY gives SERVFAIL / FORMERR

2009-09-29 Thread Stephane Bortzmeyer
On Thu, Sep 24, 2009 at 07:16:35AM +1000, Mark Andrews wrote a message of 77 lines which said: > It's a pity registries are not required to verify correct operation > of the nameservers they are delegating to before accepting the > delegation. Some do! http://www.afnic.fr/outils/zonecheck/_e

Re: Dig ANY gives SERVFAIL / FORMERR

2009-09-23 Thread Mark Andrews
In message , "Jeremy C. Re ed" writes: > > It looks like that the authoritative name server for youbei.cc > > actually did return some answers, but somehow bind gave a FORMERR for > > some unknown reasons, which I think it caused a SERVFAIL to be > > reported in turn. Interestingly, dig any youbei

Re: Dig ANY gives SERVFAIL / FORMERR

2009-09-23 Thread Jeremy C. Reed
> It looks like that the authoritative name server for youbei.cc > actually did return some answers, but somehow bind gave a FORMERR for > some unknown reasons, which I think it caused a SERVFAIL to be > reported in turn. Interestingly, dig any youbei.cc +trace ran > successfully and did not report

Dig ANY gives SERVFAIL / FORMERR

2009-09-23 Thread Patrick Yu
Hi, I operate a caching naming server version 9.5.0-P1 for a small work group that includes an email server. From the server log file, there are occasional DNS error messages. Upon closer examination using a packet sniffer, the email server sends out queries of type ANY for all sender/recipient d