17 Jan
2013
17 Jan
'13
1:06 p.m.
Hello,
If I try to resolve oss.trac.sara.nl from work (aarnet), it works. If I try
to resolve it from home (internode) it doesn't work.
WTF?
brian@webby:~$ host -C sara.nl.
Nameserver nsauth1.sara.nl:
sara.nl has SOA record nsauth1.sara.nl. nic.sara.nl. 2012122001
14400 7200 604800 86400
Nameserver nsauth2.sara.nl:
sara.nl has SOA record nsauth1.sara.nl. nic.sara.nl. 2012122001
14400 7200 604800 86400
Nameserver ns2.surfnet.nl:
sara.nl has SOA record nsauth1.sara.nl. nic.sara.nl. 2012122001
14400 7200 604800 86400
Maybe this is the reason?
brian@webby:~$ host -r -a oss.trac.sara.nl ns2.surfnet.nl
Trying "oss.trac.sara.nl"
Received 82 bytes from 2001:610:3:200a:192:87:36:2#53 in 332 ms
Trying "oss.trac.sara.nl.pri"
Using domain server:
Name: ns2.surfnet.nl
Address: 2001:610:3:200a:192:87:36:2#53
Aliases:
Host oss.trac.sara.nl.pri not found: 5(REFUSED)
Received 38 bytes from 2001:610:3:200a:192:87:36:2#53 in 334 ms
(the other two DNS servers are fine)
Thanks
--
Brian May <brian(a)microcomaustralia.com.au>
17 Jan
17 Jan
1:22 p.m.
Brian May <brian(a)microcomaustralia.com.au> wrote:
If I try to resolve oss.trac.sara.nl from work
(aarnet), it works. If I try
to resolve it from home (internode) it doesn't work.
WTF?
Perhaps either the address or the NXDOMAIN response is cached on one of the
name servers.
I'm with Internode, but I run my own recursive name server (Bind 9). I can
look the address up here.
jason@jdc:~$ host oss.trac.sara.nl
oss.trac.sara.nl is an alias for xtrac.osd.sara.nl.
xtrac.osd.sara.nl has address 145.100.12.233
jason@jdc:~$
8:17 p.m.
Brian May wrote:
Hello,
If I try to resolve oss.trac.sara.nl from work (aarnet), it works. If I try
to resolve it from home (internode) it doesn't work.
OK, step #1 is use dig, not host.
$ dig oss.trac.sara.nl +short
$
...doesn't resolve for me behind internode, so great, I can reproduce
the issue. Let's see if the problem is internode, or upstream:
$ dig oss.trac.sara.nl +short @8.8.8.8
xtrac.osd.sara.nl.
145.100.12.233
Google's happy, at least. What about the original nameservers?
$ dig NS oss.trace.sara.nl
sara.nl. 3600 IN SOA nsauth1.sara.nl. nic.sara.nl. 2012122001 14400 7200 604800
86400
$ dig NS trace.sara.nl +short
$ dig NS sara.nl +short
nsauth2.sara.nl.
ns2.surfnet.nl.
nsauth1.sara.nl.
$ for i in nic.sara.nl nsauth{1,2}.sara.nl ns2.surfnet.nl
do echo == $i ==
dig +short oss.trace.sara.nl @$i
done
== nic.sara.nl ==
dig: couldn't get address for 'nic.sara.nl': not found
== nsauth1.sara.nl ==
== nsauth2.sara.nl ==
== ns2.surfnet.nl ==
Hm, not very helpful. And I'm bored now, so you're on your own.
(Hint: remove +short and read the details, I only added it here to
keep the email terse.)
3720
days inactive
3720
days old
2 comments
3 participants
participants (3)
-
Brian May -
Jason White -
Trent W. Buck