[dns-operations] af.mil DNS issue

[Jeroen Massar]

Geo. wrote:
> Folks,
> 
> I don't know if anyone here can help with this or not.
> 
> The domain af.mil is running dns with no A records for their DNS servers,
> see http://www.dnsreport.com/tools/dnsreport.ch?domain=af.mil

Maybe that tool is misconfigured or broken?

See below that it works perfectly fine. I also suggest you to start
using dig and trying out your problems.

A sequence to try:
* dig +trace <domain>
  Which should work, dig in this case uses the DNS servers directly thus
  without asking the local dnscache except for the root-servers.

Then try:
* dig @yourdnscache <domain>

Which should work and give the same above thing, if not, then follow the
chain of servers queried by the first one, thus in my example 127.0.0.1
(which is the local cache ;), 192.33.4.12, 198.41.0.4 etc.

Thus dig @192.33.4.12 af.mil. Doing that from the box which is your dns
cache of course helps debugging your dns cache.

In any case 'it's broken' *point to remote site* is not useful.

Greets,
 Jeroen

--

jeroen at purgatory:~$ dig +trace af.mil

; <<>> DiG 9.3.2 <<>> +trace af.mil
;; global options:  printcmd
.                       143088  IN      NS      C.ROOT-SERVERS.NET.
.                       143088  IN      NS      D.ROOT-SERVERS.NET.
.                       143088  IN      NS      E.ROOT-SERVERS.NET.
.                       143088  IN      NS      F.ROOT-SERVERS.NET.
.                       143088  IN      NS      G.ROOT-SERVERS.NET.
.                       143088  IN      NS      H.ROOT-SERVERS.NET.
.                       143088  IN      NS      I.ROOT-SERVERS.NET.
.                       143088  IN      NS      J.ROOT-SERVERS.NET.
.                       143088  IN      NS      K.ROOT-SERVERS.NET.
.                       143088  IN      NS      L.ROOT-SERVERS.NET.
.                       143088  IN      NS      M.ROOT-SERVERS.NET.
.                       143088  IN      NS      A.ROOT-SERVERS.NET.
.                       143088  IN      NS      B.ROOT-SERVERS.NET.
;; Received 420 bytes from 127.0.0.1#53(127.0.0.1) in 14 ms

mil.                    86400   IN      NS      A.ROOT-SERVERS.NET.
mil.                    86400   IN      NS      B.ROOT-SERVERS.NET.
mil.                    86400   IN      NS      E.ROOT-SERVERS.NET.
mil.                    86400   IN      NS      G.ROOT-SERVERS.NET.
mil.                    86400   IN      NS      H.ROOT-SERVERS.NET.
mil.                    86400   IN      NS      CON1.NIPR.mil.
mil.                    86400   IN      NS      CON2.NIPR.mil.
mil.                    86400   IN      NS      EUR1.NIPR.mil.
mil.                    86400   IN      NS      EUR2.NIPR.mil.
mil.                    86400   IN      NS      PAC1.NIPR.mil.
mil.                    86400   IN      NS      PAC2.NIPR.mil.
;; Received 415 bytes from 192.33.4.12#53(C.ROOT-SERVERS.NET) in 111 ms

af.mil.                 86400   IN      NS      NS.USAFE.af.mil.
af.mil.                 86400   IN      NS      NS1.ACC.af.mil.
af.mil.                 86400   IN      NS      NS3.ACC.af.mil.
af.mil.                 86400   IN      NS      ARES.AFNOC.af.mil.
af.mil.                 86400   IN      NS      MARS.AFNOC.af.mil.
af.mil.                 86400   IN      NS      ARTEMIS.AFNOC.af.mil.
;; Received 249 bytes from 198.41.0.4#53(A.ROOT-SERVERS.NET) in 98 ms

af.mil.                 2700    IN      SOA     afnoc.af.mil.
dnsman.afnoc.af.mil. 2006063047 3600 900 604800 2700
;; Received 73 bytes from 132.25.88.211#53(NS.USAFE.af.mil) in 24 ms

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 238 bytes
Desc: OpenPGP digital signature
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20060630/70cd9963/attachment.sig>