Re: ignoring incorrect nameservers in authority section

2011-01-06 Thread Matus UHLAR - fantomas
> Quoting from Chris Buxton's mail on Thu, Dec 23, 2010: > > > Is there any option to add workarounds for specific domains / > > > nameservers like the ones listed above? > > > > Possibly. You can try setting up conditional forwarding for the problem > > domain, setting the authoritative name ser

Re: ignoring incorrect nameservers in authority section

2010-12-30 Thread Torinthiel
Dnia 2010-12-30 11:45 Torinthiel napisał(a): >Dnia 2010-12-30 18:03 p...@mail.nsbeta.info napisał(a): > >>Sunil Shetye writes: >> >>> >>> Case 2: Lame Server Reply >>> >>> === >>> $ dig +norecurse @a.iana-servers.net. example.or

Re: ignoring incorrect nameservers in authority section

2010-12-30 Thread Torinthiel
Dnia 2010-12-30 19:18 p...@mail.nsbeta.info napisał(a): >Please see this dig: > >$ dig +norec dev.game.yy.com @202.96.128.166 > >; <<>> DiG 9.4.2-P2 <<>> +norec dev.game.yy.com @202.96.128.166 >;; global options: printcmd >;; Got answer: >;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 31

Re: ignoring incorrect nameservers in authority section

2010-12-30 Thread Stacey Jonathan Marshall - Solaris Software
On 12/30/10 10:45, Torinthiel wrote: Dnia 2010-12-30 18:03 p...@mail.nsbeta.info napisał(a): Sunil Shetye writes: Case 2: Lame Server Reply === $ dig +norecurse @a.iana-servers.net. example.org. ;; flags: qr ra; QUERY: 1, ANSWE

Re: ignoring incorrect nameservers in authority section

2010-12-30 Thread pyh
Because it's contrary to itself. You've specified norecurse, which means that if nameserver believes it has authorative data it should return it, if it doesn't it should return a referral (and no answer beside it). But the server returns answer (which means it believes it has authorative da

Re: ignoring incorrect nameservers in authority section

2010-12-30 Thread Torinthiel
Dnia 2010-12-30 18:03 p...@mail.nsbeta.info napisał(a): >Sunil Shetye writes: > >> >> Case 2: Lame Server Reply >> >> === >> $ dig +norecurse @a.iana-servers.net. example.org. >> ;; flags: qr ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2

Re: ignoring incorrect nameservers in authority section

2010-12-30 Thread Sunil Shetye
Quoting from p...@mail.nsbeta.info's mail on Thu, Dec 30, 2010: > Where is the document for these flags? > I google'd but got no correct result :) http://www.tcpipguide.com/free/t_DNSMessageHeaderandQuestionSectionFormat.htm -- Sunil Shetye. ___ bind-u

Re: ignoring incorrect nameservers in authority section

2010-12-30 Thread pyh
Sunil Shetye writes: Case 2: Lame Server Reply === $ dig +norecurse @a.iana-servers.net. example.org. ;; flags: qr ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 0 ;; QUESTION SECTION: ;example.org. IN A ;; ANSWER SE

Re: ignoring incorrect nameservers in authority section

2010-12-30 Thread pyh
Sunil Shetye writes: Quoting from p...@mail.nsbeta.info's mail on Thu, Dec 30, 2010: What's the difference between these two flags in the response of dig? < ;; flags: qr ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 0 ra : recursion available The nameserver is ready to ask other n

Re: ignoring incorrect nameservers in authority section

2010-12-29 Thread Sunil Shetye
Quoting from p...@mail.nsbeta.info's mail on Thu, Dec 30, 2010: > What's the difference between these two flags in the response of > dig? > > < ;; flags: qr ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 0 ra : recursion available The nameserver is ready to ask other nameservers for the r

Re: ignoring incorrect nameservers in authority section

2010-12-29 Thread pyh
What's the difference between these two flags in the response of dig? < ;; flags: qr ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 0 --- ;; flags: qr aa; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 0 Thanks in advance. Sunil Shetye writes: Quoting from David Sparro's mail on T

Re: ignoring incorrect nameservers in authority section

2010-12-28 Thread Sunil Shetye
Quoting from David Sparro's mail on Tue, Dec 28, 2010: > >Here, I can see that the nameserver is giving the right replies to all > >queries except the NS queries. > > How can an authoritative server give "wrong" answers? Due to misconfiguration of the NS records. My guess is that the domain was t

Re: ignoring incorrect nameservers in authority section

2010-12-28 Thread David Sparro
On 12/24/2010 2:51 AM, Sunil Shetye wrote: Here, I can see that the nameserver is giving the right replies to all queries except the NS queries. How can an authoritative server give "wrong" answers? I was hoping that either bind should catch such cases automatically or allow some workaround

Re: ignoring incorrect nameservers in authority section

2010-12-23 Thread Sunil Shetye
Quoting from Chris Buxton's mail on Thu, Dec 23, 2010: > > Is there any option to add workarounds for specific domains / > > nameservers like the ones listed above? > > Possibly. You can try setting up conditional forwarding for the problem > domain, setting the authoritative name servers as the

Re: ignoring incorrect nameservers in authority section

2010-12-23 Thread Chris Buxton
On Dec 22, 2010, at 4:55 AM, Sunil Shetye wrote: > Is there any option to add workarounds for specific domains / > nameservers like the ones listed above? Possibly. You can try setting up conditional forwarding for the problem domain, setting the authoritative name servers as the 'forwarders' li

Re: ignoring incorrect nameservers in authority section

2010-12-22 Thread Benny Pedersen
On ons 22 dec 2010 10:09:10 CET, Matus UHLAR - fantomas wrote Well, first find which is the real problem - domain delegated to invalisd servers, server providing invalid data, and than you have to fix what is broken. Give us a real example if we have to provider real solution. zone "rfc-ignor

Re: ignoring incorrect nameservers in authority section

2010-12-22 Thread Sunil Shetye
Quoting from Matus UHLAR - fantomas's mail on Wed, Dec 22, 2010: > > Case 1: > > > > Domain: e-nxt.com > > Real Nameservers: ns1.webpresenceworld.com. ns2.webpresenceworld.com. > > Fake Nameservers: ns5.zenexpress.com. ns6.zenexpress.com. > > Why fake? > > Both ns1.webpresenceworld.com and ns2.

Re: ignoring incorrect nameservers in authority section

2010-12-22 Thread Matus UHLAR - fantomas
> Quoting from Matus UHLAR - fantomas's mail on Wed, Dec 22, 2010: > > > Is there any solution to this problem without contacting the DNS > > > administrator of that domain? I have seen this problem for many > > > domains on the internet. > > > > Well, first find which is the real problem - domain

Re: ignoring incorrect nameservers in authority section

2010-12-22 Thread Sunil Shetye
Quoting from Matus UHLAR - fantomas's mail on Wed, Dec 22, 2010: > > Is there any solution to this problem without contacting the DNS > > administrator of that domain? I have seen this problem for many > > domains on the internet. > > Well, first find which is the real problem - domain delegated t

Re: ignoring incorrect nameservers in authority section

2010-12-22 Thread Matus UHLAR - fantomas
On 22.12.10 14:01, Sunil Shetye wrote: > Some authoritative nameservers add incorrect nameservers in the > authority section of their replies. Which authority and which domain? Most of authorities add nameservers domain was registered on. > Due to caching of the incorrect > reply, further querie