[dns-operations] Problem: can't lookup a record

[Michael Monnerie]

Dear list,

I hope it's OK to ask on this list, maybe I should have written to the 
bind-users list, I don't know. I hope you forgive me if my question is 
misplaced here.

We have one strange system from which we always get SERVFAIL, while it 
seems the system returns NOERROR. Please see attached wireshark. I did 
the query from 127.0.0.1, which is 81.217.116.33 (gw.zmi.at) too, and 
that asks the responsible DNS servers. But in the end, the local DNS 
returns SERVFAIL, and I have no idea what the problem could be.

I tried that query from several other Linux versions, all fail:

gw.zmi.at: dig txt mx.herold.at
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 53625

kw.tuwien.ac.at: dig txt mx.herold.at
; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 17602

www.viennapaint.com: dig txt mx.herold.at
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 48218

dns1.zmi.at: dig txt mx.herold.at
; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 38301

dns2.zmi.at: dig txt mx.herold.at
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 55570

gw.frimeco.com: dig txt mx.herold.at
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 61182

But when on my local system I do this instead:

# dig TXT mx.herold.at @dns1.telekom.at
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 4703
;; AUTHORITY SECTION:
mx.herold.at.           300     IN      NS      lp.herold.at.

Then I do
# dig TXT mx.herold.at @lp.herold.at
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 46660
;; AUTHORITY SECTION:
herold.at.              300     IN      SOA     lp.herold.at. 
operating.herold.at. 2011062101 3600 3600 3600 3600

So why does the simple "dig TXT mx.herold.at" fail? There must be 
something special about the answer.

-- 
mit freundlichen Grüssen,
Michael Monnerie, Ing. BSc

it-management Internet Services: Protéger
http://proteger.at [gesprochen: Prot-e-schee]
Tel: +43 660 / 415 6531

// Haus zu verkaufen: http://zmi.at/langegg/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: dns-problem.pcap
Type: application/octet-stream
Size: 706 bytes
Desc: not available
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20110725/a1060e8f/attachment.obj>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part.
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20110725/a1060e8f/attachment.sig>