[dns-operations] ns.uu.net is lame for .int
Fred Morris
m3047 at m3047.net
Sat Mar 5 21:00:00 UTC 2011
ns.uu.net is (classically) lame for .int. Lame servers are, sadly, not
unusual. But are there any others where . is making the delegation?
m3047 at hera:~> dig int ns
; <<>> DiG 9.7.2-P2 <<>> int ns
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 26042
;; flags: qr rd ra; QUERY: 1, ANSWER: 5, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION:
;int. IN NS
;; ANSWER SECTION:
int. 86400 IN NS ns0.ja.net.
int. 86400 IN NS ns.icann.org.
int. 86400 IN NS sec2.authdns.ripe.net.
int. 86400 IN NS ns.uu.net.
int. 86400 IN NS ns1.cs.ucl.ac.uk.
;; Query time: 410 msec
;; SERVER: 10.0.0.220#53(10.0.0.220)
;; WHEN: Sat Mar 5 12:46:35 2011
;; MSG SIZE rcvd: 153
m3047 at hera:~> which dig
/usr/local/bin/dig
m3047 at hera:~> dig @ns.uu.net www.wipo.int
; <<>> DiG 9.7.2-P2 <<>> @ns.uu.net www.wipo.int
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 53619
;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 13, ADDITIONAL: 0
;; WARNING: recursion requested but not available
;; QUESTION SECTION:
;www.wipo.int. IN A
;; AUTHORITY SECTION:
. 3600000 IN NS A.ROOT-SERVERS.NET.
. 3600000 IN NS B.ROOT-SERVERS.NET.
. 3600000 IN NS C.ROOT-SERVERS.NET.
. 3600000 IN NS D.ROOT-SERVERS.NET.
. 3600000 IN NS E.ROOT-SERVERS.NET.
. 3600000 IN NS F.ROOT-SERVERS.NET.
. 3600000 IN NS G.ROOT-SERVERS.NET.
. 3600000 IN NS H.ROOT-SERVERS.NET.
. 3600000 IN NS I.ROOT-SERVERS.NET.
. 3600000 IN NS J.ROOT-SERVERS.NET.
. 3600000 IN NS K.ROOT-SERVERS.NET.
. 3600000 IN NS L.ROOT-SERVERS.NET.
. 3600000 IN NS M.ROOT-SERVERS.NET.
;; Query time: 133 msec
;; SERVER: 137.39.1.3#53(137.39.1.3)
;; WHEN: Sat Mar 5 12:47:41 2011
;; MSG SIZE rcvd: 241
m3047 at hera:~> dig @ns.uu.net www.wipo.int +norecurse
; <<>> DiG 9.7.2-P2 <<>> @ns.uu.net www.wipo.int +norecurse
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 43849
;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 13, ADDITIONAL: 0
;; QUESTION SECTION:
;www.wipo.int. IN A
;; AUTHORITY SECTION:
. 3600000 IN NS A.ROOT-SERVERS.NET.
. 3600000 IN NS B.ROOT-SERVERS.NET.
. 3600000 IN NS C.ROOT-SERVERS.NET.
. 3600000 IN NS D.ROOT-SERVERS.NET.
. 3600000 IN NS E.ROOT-SERVERS.NET.
. 3600000 IN NS F.ROOT-SERVERS.NET.
. 3600000 IN NS G.ROOT-SERVERS.NET.
. 3600000 IN NS H.ROOT-SERVERS.NET.
. 3600000 IN NS I.ROOT-SERVERS.NET.
. 3600000 IN NS J.ROOT-SERVERS.NET.
. 3600000 IN NS K.ROOT-SERVERS.NET.
. 3600000 IN NS L.ROOT-SERVERS.NET.
. 3600000 IN NS M.ROOT-SERVERS.NET.
;; Query time: 132 msec
;; SERVER: 137.39.1.3#53(137.39.1.3)
;; WHEN: Sat Mar 5 12:47:48 2011
;; MSG SIZE rcvd: 241
m3047 at hera:~> dig @ns.uu.net wipo.int ns +norecurse
; <<>> DiG 9.7.2-P2 <<>> @ns.uu.net wipo.int ns +norecurse
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 60144
;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 13, ADDITIONAL: 0
;; QUESTION SECTION:
;wipo.int. IN NS
;; AUTHORITY SECTION:
. 3600000 IN NS A.ROOT-SERVERS.NET.
. 3600000 IN NS B.ROOT-SERVERS.NET.
. 3600000 IN NS C.ROOT-SERVERS.NET.
. 3600000 IN NS D.ROOT-SERVERS.NET.
. 3600000 IN NS E.ROOT-SERVERS.NET.
. 3600000 IN NS F.ROOT-SERVERS.NET.
. 3600000 IN NS G.ROOT-SERVERS.NET.
. 3600000 IN NS H.ROOT-SERVERS.NET.
. 3600000 IN NS I.ROOT-SERVERS.NET.
. 3600000 IN NS J.ROOT-SERVERS.NET.
. 3600000 IN NS K.ROOT-SERVERS.NET.
. 3600000 IN NS L.ROOT-SERVERS.NET.
. 3600000 IN NS M.ROOT-SERVERS.NET.
;; Query time: 132 msec
;; SERVER: 137.39.1.3#53(137.39.1.3)
;; WHEN: Sat Mar 5 12:48:09 2011
;; MSG SIZE rcvd: 237
m3047 at hera:~> dig @ns.icann.org wipo.int ns +norecurse
; <<>> DiG 9.7.2-P2 <<>> @ns.icann.org wipo.int ns +norecurse
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 20447
;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 3, ADDITIONAL: 0
;; QUESTION SECTION:
;wipo.int. IN NS
;; AUTHORITY SECTION:
wipo.int. 86400 IN NS ns.unicc.org.
wipo.int. 86400 IN NS ns1.gva.ch.colt.net.
wipo.int. 86400 IN NS nse1.wipo.int.
;; Query time: 74 msec
;; SERVER: 199.4.138.53#53(199.4.138.53)
;; WHEN: Sat Mar 5 12:48:24 2011
;; MSG SIZE rcvd: 112
Just in case it's a routing/anycast issue, these queries originated from
209.221.140.128 (athena.m3047.net) for all practical purposes, although the
same results have been obtained from other addresses within the same general
geographic area (Seattle/Tacoma, Washington, USA).
As a practical matter, bind (9.7.2) retries other delegations when it
encounters a lame one so if you're using it as your caching nameserver you
probably won't notice much (maybe you'll see it in the query log). If your
resolver chose to give up on a lame delegation, most people/applications will
retry and odds are the next time the resolver will get (and cache) a good
delegation so it will just get dismissed as random bit rot.
05-Mar-2011 12:45:29.606 resolver: notice: DNS format error from 137.39.1.3#53
resolving int/NS for client 10.0.0.221#33356: non-improving referral
05-Mar-2011 12:45:29.607 lame-servers: info: error (FORMERR) resolving
'int/NS/IN': 137.39.1.3#53
m3047 at athena:/etc/namedb> dig ns.uu.net a
; <<>> DiG 9.7.2-P2 <<>> ns.uu.net a
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 6283
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 0
;; QUESTION SECTION:
;ns.uu.net. IN A
;; ANSWER SECTION:
ns.uu.net. 3023 IN A 137.39.1.3
;; AUTHORITY SECTION:
uu.net. 172223 IN NS auth60.ns.uu.net.
uu.net. 172223 IN NS auth210.ns.uu.net.
uu.net. 172223 IN NS auth200.ns.uu.net.
uu.net. 172223 IN NS auth00.ns.uu.net.
;; Query time: 1 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Sat Mar 5 12:56:12 2011
;; MSG SIZE rcvd: 129
--
Fred Morris
More information about the dns-operations
mailing list