[dns-operations] socialsecurity.gov

Randy Bush randy at psg.com
Wed Sep 12 10:02:48 UTC 2012 

what am i not understanding here?

from seattle westin

    psg.com:/usr/home/randy> doc -p -w socialsecurity.gov.Doc-2.2.3: doc -p -w socialsecurity.gov.
    Doc-2.2.3: Starting test of socialsecurity.gov.   parent is gov.
    Doc-2.2.3: Test date - Wed Sep 12 09:57:32 GMT 2012
    Summary:
       No errors or warnings issued for socialsecurity.gov.
    Done testing socialsecurity.gov.  Wed Sep 12 09:57:39 GMT 2012

from iij in tokyo

    rair.psg.com:/Users/randy> doc -p -w socialsecurity.gov.
    Doc-2.2.3: doc -p -w socialsecurity.gov.
    Doc-2.2.3: Starting test of socialsecurity.gov.   parent is gov.
    Doc-2.2.3: Test date - Wed Sep 12 19:00:44 JST 2012
    DIGERR (NOT_AUTHORIZED): dig @dns5.ssa.gov. for SOA of socialsecurity.gov. failed
    DIGERR (NOT_AUTHORIZED): dig @dns6.ssa.gov. for SOA of socialsecurity.gov. failed
    Summary:
       No errors or warnings issued for socialsecurity.gov.
       Incomplete test for socialsecurity.gov. (2)
    Done testing socialsecurity.gov.  Wed Sep 12 19:01:30 JST 2012

and the log

Doc-2.2.3: doc -p -w socialsecurity.gov.
Doc-2.2.3: Starting test of socialsecurity.gov.   parent is gov.
Doc-2.2.3: Test date - Wed Sep 12 19:00:44 JST 2012
Note: Skipping parent domain testing
Found 4 NS and 4 glue records for socialsecurity.gov. @a.gov-servers.net. (non-AUTH)
Using NSlist from parent domain server a.gov-servers.net.
NS list summary for socialsecurity.gov. from parent (gov.) servers
  == dns1.ssa.gov. dns2.ssa.gov. dns5.ssa.gov.
  == dns6.ssa.gov.
soa @dns1.ssa.gov. for socialsecurity.gov. serial: 2011050364
soa @dns2.ssa.gov. for socialsecurity.gov. serial: 2011050364
DIGERR (NOT_AUTHORIZED): dig @dns5.ssa.gov. for SOA of socialsecurity.gov. failed
DIGERR (NOT_AUTHORIZED): dig @dns6.ssa.gov. for SOA of socialsecurity.gov. failed
SOA serial #'s agree for socialsecurity.gov.
Authoritative domain (socialsecurity.gov.) servers agree on NS for socialsecurity.gov.
NS list from socialsecurity.gov. authoritative servers matches list from
  ===  first parent (gov.) nameserver queried
Checking 0 potential addresses for hosts at socialsecurity.gov.
  == 
Summary:
   No errors or warnings issued for socialsecurity.gov.
   Incomplete test for socialsecurity.gov. (2)
Done testing socialsecurity.gov.  Wed Sep 12 19:01:30 JST 2012


######## Query Log ########

## Nameservers for gov. (dig ns gov.):

a.gov-servers.net.
b.gov-servers.net.
===================

## NS records for socialsecurity.gov. domain from nameserver a.gov-servers.net.

;; got answer:
;; ->>header<<- opcode: query, status: noerror, id: 58332
;; flags: qr; query: 1, answer: 0, authority: 4, additional: 8

;; authority section:
socialsecurity.gov.	86400	in	ns	dns1.ssa.gov.
socialsecurity.gov.	86400	in	ns	dns2.ssa.gov.
socialsecurity.gov.	86400	in	ns	dns5.ssa.gov.
socialsecurity.gov.	86400	in	ns	dns6.ssa.gov.

;; additional section:
dns1.ssa.gov.		86400	in	a	199.173.231.82
dns2.ssa.gov.		86400	in	a	199.173.231.83
dns5.ssa.gov.		86400	in	a	137.200.4.30
dns6.ssa.gov.		86400	in	a	137.200.4.31
dns1.ssa.gov.		86400	in	aaaa	2001:1930:c05::c
dns2.ssa.gov.		86400	in	aaaa	2001:1930:c05::d
dns5.ssa.gov.		86400	in	aaaa	2001:1930:e03::c
dns6.ssa.gov.		86400	in	aaaa	2001:1930:e03::d

===================

## SOA record for socialsecurity.gov. domain from nameserver dns1.ssa.gov.

;; got answer:
;; flags: qr aa; query: 1, answer: 1, authority: 4, additional: 8

;; answer section:
socialsecurity.gov.	36000	in	soa	dns1.ssa.gov. dnsfwadmin.ssa.gov. 2011050364 3600 600 1209600 14400

===================

## Version.bind record for nameserver dns1.ssa.gov. (socialsecurity.gov.)


; <<>> dig 9.7.3-p3 <<>> @dns1.ssa.gov. version.bind txt chaos +norec +nocmd +noques +noauth +noadd +nostat +tries=2
; (2 servers found)
;; global options: +cmd
;; got answer:
;; ->>header<<- opcode: query, status: noerror, id: 36620
;; flags: qr aa; query: 1, answer: 0, authority: 1, additional: 0

===================

## SOA record for socialsecurity.gov. domain from nameserver dns2.ssa.gov.

;; got answer:
;; flags: qr aa; query: 1, answer: 1, authority: 4, additional: 8

;; answer section:
socialsecurity.gov.	36000	in	soa	dns1.ssa.gov. dnsfwadmin.ssa.gov. 2011050364 3600 600 1209600 14400

===================

## Version.bind record for nameserver dns2.ssa.gov. (socialsecurity.gov.)


; <<>> dig 9.7.3-p3 <<>> @dns2.ssa.gov. version.bind txt chaos +norec +nocmd +noques +noauth +noadd +nostat +tries=2
; (2 servers found)
;; global options: +cmd
;; got answer:
;; ->>header<<- opcode: query, status: noerror, id: 43701
;; flags: qr aa; query: 1, answer: 0, authority: 1, additional: 0

===================

## NS records for socialsecurity.gov. domain from nameserver dns1.ssa.gov.

;; got answer:
;; ->>header<<- opcode: query, status: noerror, id: 58015
;; flags: qr aa; query: 1, answer: 4, authority: 0, additional: 8

;; answer section:
socialsecurity.gov.	36000	in	ns	dns6.ssa.gov.
socialsecurity.gov.	36000	in	ns	dns1.ssa.gov.
socialsecurity.gov.	36000	in	ns	dns5.ssa.gov.
socialsecurity.gov.	36000	in	ns	dns2.ssa.gov.

;; additional section:
dns1.ssa.gov.		36000	in	a	199.173.231.82
dns1.ssa.gov.		36000	in	aaaa	2001:1930:c05::c
dns2.ssa.gov.		36000	in	a	199.173.231.83
dns2.ssa.gov.		36000	in	aaaa	2001:1930:c05::d
dns5.ssa.gov.		36000	in	a	137.200.4.30
dns5.ssa.gov.		36000	in	aaaa	2001:1930:e03::c
dns6.ssa.gov.		36000	in	a	137.200.4.31
dns6.ssa.gov.		36000	in	aaaa	2001:1930:e03::d

===================

## NS records for socialsecurity.gov. domain from nameserver dns2.ssa.gov.

;; got answer:
;; ->>header<<- opcode: query, status: noerror, id: 62252
;; flags: qr aa; query: 1, answer: 4, authority: 0, additional: 8

;; answer section:
socialsecurity.gov.	36000	in	ns	dns5.ssa.gov.
socialsecurity.gov.	36000	in	ns	dns2.ssa.gov.
socialsecurity.gov.	36000	in	ns	dns1.ssa.gov.
socialsecurity.gov.	36000	in	ns	dns6.ssa.gov.

;; additional section:
dns1.ssa.gov.		36000	in	a	199.173.231.82
dns1.ssa.gov.		36000	in	aaaa	2001:1930:c05::c
dns2.ssa.gov.		36000	in	a	199.173.231.83
dns2.ssa.gov.		36000	in	aaaa	2001:1930:c05::d
dns5.ssa.gov.		36000	in	a	137.200.4.30
dns5.ssa.gov.		36000	in	aaaa	2001:1930:e03::c
dns6.ssa.gov.		36000	in	a	137.200.4.31
dns6.ssa.gov.		36000	in	aaaa	2001:1930:e03::d

===================

### Queries for nameserver address in-addr.arpa. records

More information about the dns-operations mailing list