Reverse delegation isn't working
Carmen Sandiego on Thursday, 07 August 2008 07:26:59
Hey guys,
I have entered 2 nameservers for my 2a01:348:153::/48. ns1 is an IPv6 address and ns2 is an IPv4 address.
Strange thing is, ZoneCheck from SixXS works, but if I try to dig from another location, the resolution seems to get stuck on the goscomb.net nameservers as per the below trace. I have also included a successful direct dig of the nameserver. I have also waited 71 hours for DNS to propogate. Any ideas on what might be wrong?
; <<>> DiG 9.3.4-P1.1 <<>> +trace -x 2a01:348:153::1
;; global options: printcmd
. 263215 IN NS e.root-servers.net.
. 263215 IN NS i.root-servers.net.
. 263215 IN NS f.root-servers.net.
. 263215 IN NS g.root-servers.net.
. 263215 IN NS a.root-servers.net.
. 263215 IN NS h.root-servers.net.
. 263215 IN NS c.root-servers.net.
. 263215 IN NS b.root-servers.net.
. 263215 IN NS k.root-servers.net.
. 263215 IN NS d.root-servers.net.
. 263215 IN NS l.root-servers.net.
. 263215 IN NS j.root-servers.net.
. 263215 IN NS m.root-servers.net.
;; Received 500 bytes from 2403:e000:7666:1::75#53(2403:e000:7666:1::75) in 6 ms
ip6.arpa. 172800 IN NS NS-SEC.RIPE.NET.
ip6.arpa. 172800 IN NS TINNIE.ARIN.NET.
ip6.arpa. 172800 IN NS NS.ICANN.ORG.
ip6.arpa. 172800 IN NS NS.LACNIC.NET.
ip6.arpa. 172800 IN NS SEC1.APNIC.NET.
;; Received 220 bytes from 2001:503:ba3e::2:30#53(a.root-servers.net) in 255 ms
0.a.2.ip6.arpa. 84600 IN NS ns.lacnic.net.
0.a.2.ip6.arpa. 84600 IN NS sec1.apnic.net.
0.a.2.ip6.arpa. 84600 IN NS sec3.apnic.net.
0.a.2.ip6.arpa. 84600 IN NS ns-pri.ripe.net.
0.a.2.ip6.arpa. 84600 IN NS tinnie.arin.net.
;; Received 301 bytes from 2001:610:240:0:53::4#53(NS-SEC.RIPE.NET) in 333 ms
8.4.3.0.1.0.a.2.ip6.arpa. 172800 IN NS ns3.goscomb.net.
8.4.3.0.1.0.a.2.ip6.arpa. 172800 IN NS ns2.goscomb.net.
8.4.3.0.1.0.a.2.ip6.arpa. 172800 IN NS ns1.goscomb.net.
;; Received 155 bytes from 2001:12ff::7#53(ns.lacnic.net) in 365 ms
;; connection timed out; no servers could be reached
; <<>> DiG 9.3.4-P1.1 <<>> @ns1.bluesquash.com -x 2a01:348:153::1
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 1487
;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2
;; QUESTION SECTION:
;1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.3.5.1.0.8.4.3.0.1.0.a.2.ip6.arpa. IN PTR
;; ANSWER SECTION:
1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.3.5.1.0.8.4.3.0.1.0.a.2.ip6.arpa. 3600 IN PTR border-r01.bluesquash.com.
;; AUTHORITY SECTION:
3.5.1.0.8.4.3.0.1.0.a.2.ip6.arpa. 3600 IN NS ns1.bluesquash.com.
3.5.1.0.8.4.3.0.1.0.a.2.ip6.arpa. 3600 IN NS ns2.bluesquash.com.
;; ADDITIONAL SECTION:
ns1.bluesquash.com. 3600 IN AAAA 2a01:348:153::53
ns2.bluesquash.com. 3600 IN A 59.167.251.242
;; Query time: 752 msec
;; SERVER: 2a01:348:153::53#53(2a01:348:153::53)
;; WHEN: Thu Aug 7 15:22:33 2008
;; MSG SIZE rcvd: 209
Reverse delegation isn't working
Jeroen Massar on Thursday, 07 August 2008 12:22:30
Our DNS monitoring system didn't pick up any anomalies for that reverse, and it ends up at your hosts correctly when doing the same dig at the moment, thus the only thing I would start checking is if you can reach ns{1|2|3}.goscomb.net. over IPv4 and IPv6 properly, that is also the error that dig is giving.
Reverse delegation isn't working
Carmen Sandiego on Friday, 08 August 2008 08:46:08
Ahh, goscomb.net doesn't have IPv6 NSs? I'm only resolving an IPv4 address for 1-3. I was trying to resolve from an IPv6 only network. No dual-stacked DNS server yet...
Posting is only allowed when you are logged in. |