[NTLUG:Discuss] Strange DNS issues

[Neil Aggarwal]

Patrick:

ACK!

The name servers should be dns10 and dns11, not jamm10 and jamm11!

I swear that I have looked over this configuration so many times
that I can't see straight anymore....

Thanks,
	Neil 

--
Neil Aggarwal, JAMM Consulting, (214) 986-3533, www.JAMMConsulting.com
FREE! Valuable info on how your business can reduce operating costs by
17% or more in 6 months or less! http://newsletter.JAMMConsulting.com 

-----Original Message-----
From: discuss-bounces at ntlug.org [mailto:discuss-bounces at ntlug.org] On Behalf
Of Patrick R. Michaud
Sent: Friday, November 11, 2005 11:11 AM
To: NTLUG Discussion List
Subject: Re: [NTLUG:Discuss] Strange DNS issues

On Fri, Nov 11, 2005 at 10:21:44AM -0600, Neil Aggarwal wrote:
: Hello:
: 
: I am at my wit's end on this one and am hoping that someone
: can lend me some insight:
: [...]


Either the zone for jammconsulting.com or spamfilter.com is
set up incorrectly.

First, the spamfilter.com domain is listing its nameservers as 
jamm11.jammconsulting.com and jamm10.jammconsulting.com,
but these do not resolve (below is excerpted for brevity):

    [pmichaud at power pmwiki]$ nslookup
    > set type=ns
    > spammilter.com
    Server:         204.157.1.33
    Address:        204.157.1.33#53
    
    Non-authoritative answer:
    spammilter.com  nameserver = jamm11.jammconsulting.com.
    spammilter.com  nameserver = jamm10.jammconsulting.com.
    > jamm11.jammconsulting.com
    ** server can't find jamm11.jammconsulting.com: NXDOMAIN
    > 

So, without the jamm10|jamm11.jammconsulting.com addresses 
resolving properly, hosts cannot resolve spammilter.com.

Queries for spammilter.com work when querying 206.123.70.65
because I'm guessing that 206.123.70.65 is authoritative
for the spammilter.com domain.  Thus 206.123.70.65 doesn't have
to resolve jamm10|jamm11.jammconsulting.com because it's
already authoritative for spammilter.com.

I think the ns entries for spammilter.com were intended
to read dns11.jammconsulting.com and dns10.jammconsulting.com
instead of the jamm11 and jamm10 addresses it currently has,
because dns10.jammconsulting.com resolves (to the "parent"
server that seems to understand your spammilter.com requests):

    > set type=a
    > dns10.jammconsulting.com
    Non-authoritative answer:
    Name:   dns10.jammconsulting.com
    Address: 206.123.70.53
    > 

: Everything looks correct in the DNS settings.  Here is a page on
: DNS Stuff that verifies it:
: 
: http://www.dnsstuff.com/tools/traversal.ch?domain=spammilter.com&type=MX

Actually, that page verifies that something is wrong *somewhere*,
because that page shows that spammilter's nameservers are the dns10/dns11
addresses, while my nslookup and your dig output are reporting 
jamm10/jamm11 as being the nameservers for the spammilter.com domain.

Hope this helps,

Pm



: ; <<>> DiG 9.2.3 <<>> mx spammilter.com
: ;; global options:  printcmd
: ;; Got answer:
: ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 1863
: ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
: 
: ;; QUESTION SECTION:
: ;spammilter.com.                        IN      MX
: 
: ;; Query time: 4 msec
: ;; SERVER: 206.123.64.245#53(206.123.64.245)
: ;; WHEN: Fri Nov 11 09:58:54 2005
: ;; MSG SIZE  rcvd: 32
: 
: When I do the same query against one of the parent servers:
: 
: dig @206.123.70.53 mx spammilter.com
: 
: I get the correct answer:
: 
: ; <<>> DiG 9.2.3 <<>> @206.123.70.53 mx spammilter.com
: ;; global options:  printcmd
: ;; Got answer:
: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 14806
: ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 1
: 
: ;; QUESTION SECTION:
: ;spammilter.com.                        IN      MX
: 
: ;; ANSWER SECTION:
: spammilter.com.         38400   IN      MX      10 mail.spammilter.com.
: 
: ;; AUTHORITY SECTION:
: spammilter.com.         38400   IN      NS      jamm11.JAMMConsulting.com.
: spammilter.com.         38400   IN      NS      jamm10.JAMMConsulting.com.
: 
: ;; ADDITIONAL SECTION:
: mail.spammilter.com.    38400   IN      A       206.123.70.53
: 
: ;; Query time: 2 msec
: ;; SERVER: 206.123.70.53#53(206.123.70.53)
: ;; WHEN: Fri Nov 11 09:59:04 2005
: ;; MSG SIZE  rcvd: 126
: 
: Everything looks correct in the DNS settings.  Here is a page on
: DNS Stuff that verifies it:
: 
: http://www.dnsstuff.com/tools/traversal.ch?domain=spammilter.com&type=MX
: 
: Any ideas what is happening?  
: 
: Thanks,
: 	Neil
: 
: --
: Neil Aggarwal, JAMM Consulting, (214) 986-3533, www.JAMMConsulting.com
: FREE! Valuable info on how your business can reduce operating costs by
: 17% or more in 6 months or less! http://newsletter.JAMMConsulting.com 
: 
: 
: _______________________________________________
: https://ntlug.org/mailman/listinfo/discuss
: 

_______________________________________________
https://ntlug.org/mailman/listinfo/discuss