[dns-operations] ns.uu.net is lame for .int

Fred Morris m3047 at m3047.net
Sat Mar 5 21:00:00 UTC 2011


ns.uu.net is (classically) lame for .int. Lame servers are, sadly, not 
unusual. But are there any others where . is making the delegation?

m3047 at hera:~> dig int ns

; <<>> DiG 9.7.2-P2 <<>> int ns
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 26042
;; flags: qr rd ra; QUERY: 1, ANSWER: 5, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;int.                           IN      NS

;; ANSWER SECTION:
int.                    86400   IN      NS      ns0.ja.net.
int.                    86400   IN      NS      ns.icann.org.
int.                    86400   IN      NS      sec2.authdns.ripe.net.
int.                    86400   IN      NS      ns.uu.net.
int.                    86400   IN      NS      ns1.cs.ucl.ac.uk.

;; Query time: 410 msec
;; SERVER: 10.0.0.220#53(10.0.0.220)
;; WHEN: Sat Mar  5 12:46:35 2011
;; MSG SIZE  rcvd: 153

m3047 at hera:~> which dig
/usr/local/bin/dig
m3047 at hera:~> dig @ns.uu.net www.wipo.int

; <<>> DiG 9.7.2-P2 <<>> @ns.uu.net www.wipo.int
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 53619
;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 13, ADDITIONAL: 0
;; WARNING: recursion requested but not available

;; QUESTION SECTION:
;www.wipo.int.                  IN      A

;; AUTHORITY SECTION:
.                       3600000 IN      NS      A.ROOT-SERVERS.NET.
.                       3600000 IN      NS      B.ROOT-SERVERS.NET.
.                       3600000 IN      NS      C.ROOT-SERVERS.NET.
.                       3600000 IN      NS      D.ROOT-SERVERS.NET.
.                       3600000 IN      NS      E.ROOT-SERVERS.NET.
.                       3600000 IN      NS      F.ROOT-SERVERS.NET.
.                       3600000 IN      NS      G.ROOT-SERVERS.NET.
.                       3600000 IN      NS      H.ROOT-SERVERS.NET.
.                       3600000 IN      NS      I.ROOT-SERVERS.NET.
.                       3600000 IN      NS      J.ROOT-SERVERS.NET.
.                       3600000 IN      NS      K.ROOT-SERVERS.NET.
.                       3600000 IN      NS      L.ROOT-SERVERS.NET.
.                       3600000 IN      NS      M.ROOT-SERVERS.NET.

;; Query time: 133 msec
;; SERVER: 137.39.1.3#53(137.39.1.3)
;; WHEN: Sat Mar  5 12:47:41 2011
;; MSG SIZE  rcvd: 241

m3047 at hera:~> dig @ns.uu.net www.wipo.int +norecurse

; <<>> DiG 9.7.2-P2 <<>> @ns.uu.net www.wipo.int +norecurse
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 43849
;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 13, ADDITIONAL: 0

;; QUESTION SECTION:
;www.wipo.int.                  IN      A

;; AUTHORITY SECTION:
.                       3600000 IN      NS      A.ROOT-SERVERS.NET.
.                       3600000 IN      NS      B.ROOT-SERVERS.NET.
.                       3600000 IN      NS      C.ROOT-SERVERS.NET.
.                       3600000 IN      NS      D.ROOT-SERVERS.NET.
.                       3600000 IN      NS      E.ROOT-SERVERS.NET.
.                       3600000 IN      NS      F.ROOT-SERVERS.NET.
.                       3600000 IN      NS      G.ROOT-SERVERS.NET.
.                       3600000 IN      NS      H.ROOT-SERVERS.NET.
.                       3600000 IN      NS      I.ROOT-SERVERS.NET.
.                       3600000 IN      NS      J.ROOT-SERVERS.NET.
.                       3600000 IN      NS      K.ROOT-SERVERS.NET.
.                       3600000 IN      NS      L.ROOT-SERVERS.NET.
.                       3600000 IN      NS      M.ROOT-SERVERS.NET.

;; Query time: 132 msec
;; SERVER: 137.39.1.3#53(137.39.1.3)
;; WHEN: Sat Mar  5 12:47:48 2011
;; MSG SIZE  rcvd: 241

m3047 at hera:~> dig @ns.uu.net wipo.int ns +norecurse

; <<>> DiG 9.7.2-P2 <<>> @ns.uu.net wipo.int ns +norecurse
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 60144
;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 13, ADDITIONAL: 0

;; QUESTION SECTION:
;wipo.int.                      IN      NS

;; AUTHORITY SECTION:
.                       3600000 IN      NS      A.ROOT-SERVERS.NET.
.                       3600000 IN      NS      B.ROOT-SERVERS.NET.
.                       3600000 IN      NS      C.ROOT-SERVERS.NET.
.                       3600000 IN      NS      D.ROOT-SERVERS.NET.
.                       3600000 IN      NS      E.ROOT-SERVERS.NET.
.                       3600000 IN      NS      F.ROOT-SERVERS.NET.
.                       3600000 IN      NS      G.ROOT-SERVERS.NET.
.                       3600000 IN      NS      H.ROOT-SERVERS.NET.
.                       3600000 IN      NS      I.ROOT-SERVERS.NET.
.                       3600000 IN      NS      J.ROOT-SERVERS.NET.
.                       3600000 IN      NS      K.ROOT-SERVERS.NET.
.                       3600000 IN      NS      L.ROOT-SERVERS.NET.
.                       3600000 IN      NS      M.ROOT-SERVERS.NET.

;; Query time: 132 msec
;; SERVER: 137.39.1.3#53(137.39.1.3)
;; WHEN: Sat Mar  5 12:48:09 2011
;; MSG SIZE  rcvd: 237

m3047 at hera:~> dig @ns.icann.org wipo.int ns +norecurse

; <<>> DiG 9.7.2-P2 <<>> @ns.icann.org wipo.int ns +norecurse
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 20447
;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 3, ADDITIONAL: 0

;; QUESTION SECTION:
;wipo.int.                      IN      NS

;; AUTHORITY SECTION:
wipo.int.               86400   IN      NS      ns.unicc.org.
wipo.int.               86400   IN      NS      ns1.gva.ch.colt.net.
wipo.int.               86400   IN      NS      nse1.wipo.int.

;; Query time: 74 msec
;; SERVER: 199.4.138.53#53(199.4.138.53)
;; WHEN: Sat Mar  5 12:48:24 2011
;; MSG SIZE  rcvd: 112


Just in case it's a routing/anycast issue, these queries originated from 
209.221.140.128 (athena.m3047.net) for all practical purposes, although the 
same results have been obtained from other addresses within the same general 
geographic area (Seattle/Tacoma, Washington, USA).

As a practical matter, bind (9.7.2) retries other delegations when it 
encounters a lame one so if you're using it as your caching nameserver you 
probably won't notice much (maybe you'll see it in the query log). If your 
resolver chose to give up on a lame delegation, most people/applications will 
retry and odds are the next time the resolver will get (and cache) a good 
delegation so it will just get dismissed as random bit rot.

05-Mar-2011 12:45:29.606 resolver: notice: DNS format error from 137.39.1.3#53 
resolving int/NS for client 10.0.0.221#33356: non-improving referral
05-Mar-2011 12:45:29.607 lame-servers: info: error (FORMERR) resolving 
'int/NS/IN': 137.39.1.3#53
m3047 at athena:/etc/namedb> dig ns.uu.net a

; <<>> DiG 9.7.2-P2 <<>> ns.uu.net a
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 6283
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 0

;; QUESTION SECTION:
;ns.uu.net.                     IN      A

;; ANSWER SECTION:
ns.uu.net.              3023    IN      A       137.39.1.3

;; AUTHORITY SECTION:
uu.net.                 172223  IN      NS      auth60.ns.uu.net.
uu.net.                 172223  IN      NS      auth210.ns.uu.net.
uu.net.                 172223  IN      NS      auth200.ns.uu.net.
uu.net.                 172223  IN      NS      auth00.ns.uu.net.

;; Query time: 1 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Sat Mar  5 12:56:12 2011
;; MSG SIZE  rcvd: 129

--

Fred Morris



More information about the dns-operations mailing list