Ensure your firewall passes fragmented UDP packets.
dig +trace +all +dnssec www.nhc.noaa.gov
should succeed. You will notice that the responses are large.
Mark
; <<>> DiG 9.11.0pre-alpha <<>> +trace +all +dnssec www.nhc.noaa.gov
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 41145
;; flags: qr aa; QUERY: 1, ANSWER: 14, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 4096
;; QUESTION SECTION:
;. IN NS
;; ANSWER SECTION:
. 518400 IN NS e.root-servers.net.
. 518400 IN NS i.root-servers.net.
. 518400 IN NS h.root-servers.net.
. 518400 IN NS g.root-servers.net.
. 518400 IN NS b.root-servers.net.
. 518400 IN NS l.root-servers.net.
. 518400 IN NS j.root-servers.net.
. 518400 IN NS m.root-servers.net.
. 518400 IN NS c.root-servers.net.
. 518400 IN NS f.root-servers.net.
. 518400 IN NS a.root-servers.net.
. 518400 IN NS d.root-servers.net.
. 518400 IN NS k.root-servers.net.
. 518400 IN RRSIG NS 8 0 518400 20150208170000
20150129160000 16665 . wBP+DfP/H1T7T267f+aUmqZFa6L0xAkPh2CGu1jQo8Z5+1kcchA6v0Ee
BFlVI90eFFgLrFJKugBq4XozHW5Uj7HQHP9dPPI0W4z2u4380vM/Rdbq
xRB8nesg66eWEghiocUvG2pUCIBfE60ReAu9lFktYTQWNHoSFOjMLhS0 1Fg=
;; Query time: 0 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Fri Jan 30 08:35:07 EST 2015
;; MSG SIZE rcvd: 397
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 37128
;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 5, ADDITIONAL: 4
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 4096
;; QUESTION SECTION:
;www.nhc.noaa.gov. IN A
;; AUTHORITY SECTION:
gov. 172800 IN NS a.gov-servers.net.
gov. 172800 IN NS b.gov-servers.net.
gov. 86400 IN DS 7698 8 1
6F109B46A80CEA9613DC86D5A3E065520505AAFE
gov. 86400 IN DS 7698 8 2
6BC949E638442EAD0BDAF0935763C8D003760384FF15EBBD5CE86BB5 559561F0
gov. 86400 IN RRSIG DS 8 1 86400 20150208170000
20150129160000 16665 . ucjpVlvTDORdbUPC8Be67uAeVplPFOV5b+5Ej6dOIjEdreiVp8Xqw5ro
fh4VmLa+/TvdwPLr2uZD5Cm7uPI5t+Ux477CYEaWGVQO5Jguc1xvwo/U
lEoI177BjHdTM2PTrp+woZQp1SpIINIBidmidic3dPWuDLzQIGscFlVn S1I=
;; ADDITIONAL SECTION:
a.gov-servers.net. 172800 IN A 69.36.157.30
b.gov-servers.net. 172800 IN A 209.112.123.30
a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30
;; Query time: 180 msec
;; SERVER: 192.228.79.201#53(192.228.79.201)
;; WHEN: Fri Jan 30 08:35:07 EST 2015
;; MSG SIZE rcvd: 395
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 43552
;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 6, ADDITIONAL: 7
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 1472
;; QUESTION SECTION:
;www.nhc.noaa.gov. IN A
;; AUTHORITY SECTION:
noaa.gov. 86400 IN NS ns-e.noaa.gov.
noaa.gov. 86400 IN NS ns-mw.noaa.gov.
noaa.gov. 86400 IN NS ns-nw.noaa.gov.
noaa.gov. 3600 IN DS 19789 5 1
F26B21B0C8365F80A85221BA8CC6DF40CC73B05B
noaa.gov. 3600 IN DS 19789 5 2
ABA039285FD7FA9D260206DD4C12D93CE346644A75316A143A27883D E93FA35B
noaa.gov. 3600 IN RRSIG DS 8 2 3600 20150205175724
20150129175724 4352 gov.
wB2UOo0xqtc9SX7uy4DiOlZkfret3kcdB9IDG93d5M28flNhhLnZSgSU
K2ZFyjnlqb25k0Z8uca2tSSpb8hOPldsvvKG8Rgs7x48+fgXciY2ovPn
mzKedfsgTVtXGgjZsLAVovTY2y3weio1YUSEziLeM9++yaJ0REA6JiQq 3HM=
;; ADDITIONAL SECTION:
ns-e.noaa.gov. 86400 IN A 140.90.33.237
ns-mw.noaa.gov. 86400 IN A 140.172.17.237
ns-nw.noaa.gov. 86400 IN A 161.55.32.2
ns-e.noaa.gov. 86400 IN AAAA 2610:20:8000:8c00::237
ns-mw.noaa.gov. 86400 IN AAAA 2610:20:8800:8c00::237
ns-nw.noaa.gov. 86400 IN AAAA 2610:20:8c00:8c00::2
;; Query time: 172 msec
;; SERVER: 69.36.157.30#53(69.36.157.30)
;; WHEN: Fri Jan 30 08:35:08 EST 2015
;; MSG SIZE rcvd: 483
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 59153
;; flags: qr aa; QUERY: 1, ANSWER: 15, AUTHORITY: 4, ADDITIONAL: 13
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 4096
;; QUESTION SECTION:
;www.nhc.noaa.gov. IN A
;; ANSWER SECTION:
www.nhc.noaa.gov. 300 IN CNAME edge-nws.woc.noaa.gov.
www.nhc.noaa.gov. 300 IN RRSIG CNAME 5 4 300 20150205145231
20150129145231 49680 nhc.noaa.gov.
LRzPzZS3xkV21r3YDBiCXUvroMnuT2Fw7jzjlmpusRhP82Ai+XPftnuK
rmbu9pqIgIA28pe7wR8Sz61LEfhvNtGfS9JOMcMPxQmBlny6/JWSgwBF
hlIhOqyRSktraXTTJ/n9sSqC3/QjKFs+dWTTrynTy2ZvfWscqL2KakaT
pqcSrhDolgyDocqsExzgcWjyPYSHwR/rCMCcCje5PXfY1GrzrQ/UUMe0
rAr7kn6J1C0oDmUtbpIRYuqNQKwPp2EdIZ8akZmL151HDMcIlc2pG+4X
S5zdlMZ3lV/O8WC0E3Db31JIX1EmdjeSiUdhs7GmUC+XW496NdppsCo4 6JL8LQ==
edge-nws.woc.noaa.gov. 300 IN CNAME edge-p1.l.noaa.gov.
edge-nws.woc.noaa.gov. 300 IN RRSIG CNAME 5 4 300 20150205145342
20150129145342 41187 woc.noaa.gov.
CgEHsTvz6Z+gE8AdDTL/Uy7KuDgtzBwwURLgvu9uBSG9vQD7/axDgnSy
oJOJ/Ir2OlQQEQi7fInwllHLYqFEby8MhBM0ADnkROVP4ixzQdv3Kbj3
d6ItRxGIzwzfLEKOAkopeHsWiAy5Eepkeu3DNMyqxEi55AAATUzEJCN1
aU9RZokNfmhkv9rKY+lJXUPnXtpoaOASXs9S5hJoI1MVsQWjbYSkiBy7
AnVYNTK8IlGnmk/pwIh9NVvygB2bcL0YIy8Cdvqv+7TdM3z4BfLl2T69
tAn7jdMRqDhEho9hdbw1BJqX2s3IBX9t83wZ9LgS+i/0nwXuGTmsPorZ ZHws6A==
edge-p1.l.noaa.gov. 30 IN A 140.172.17.11
edge-p1.l.noaa.gov. 30 IN A 140.172.17.21
edge-p1.l.noaa.gov. 30 IN A 216.38.80.71
edge-p1.l.noaa.gov. 30 IN A 216.38.80.81
edge-p1.l.noaa.gov. 30 IN A 129.15.96.11
edge-p1.l.noaa.gov. 30 IN A 129.15.96.21
edge-p1.l.noaa.gov. 30 IN A 140.90.33.11
edge-p1.l.noaa.gov. 30 IN A 140.90.33.21
edge-p1.l.noaa.gov. 30 IN A 140.90.200.11
edge-p1.l.noaa.gov. 30 IN A 140.90.200.21
edge-p1.l.noaa.gov. 30 IN RRSIG A 5 4 30 20150205203218
20150129203218 54795 l.noaa.gov.
xhewX9CefTTIY4Hkic+g9CLZKDfiEVNwBFW6AH1M6JsZiH1qmXkddMOo
N8rzQxHVIoVMq27NnpBBRLzcNOqp6AlrxuA1VnCEtsWR3R9cvNSkU03N
zrN7nzpdApGRT4T4Uyw6cFTVPJQm8daZRhivqJ2Htgf+bZKB9Dj2yG9R
5ppoZpZ9Scf79n7Ul+Rt/beM7eZYmNsBBP0O2Kw+e75hqySyB3plB70p
9hI1QJTsYTgTyCEt0IHu4oXLFpGIRltkEI7GJ13U7UlgPDJaY+OU3Rut
0lL7V/xWhOabF17mAA+7J/eqYPKcAt/vE9e0tAyyc56791Nn+NCVir/z eolq0Q==
;; AUTHORITY SECTION:
l.noaa.gov. 86400 IN NS ns-mw.noaa.gov.
l.noaa.gov. 86400 IN NS ns-nw.noaa.gov.
l.noaa.gov. 86400 IN NS ns-e.noaa.gov.
l.noaa.gov. 86400 IN RRSIG NS 5 3 86400 20150205203218
20150129203218 54795 l.noaa.gov.
TxJ2hj2WgSC/rUoUboTxelNmPEyJYoDSuy7iBcmS3A6cCtEK5TU46R8g
zFDR7beDuAiz8rgcef5gW9s8DW6CVvZ2Drw71edldQgVh5OjNgxoQED5
jCexouzP0JajUI5BZqGMqs2l2mRdRXqrDMOky5mgctOD4HmqC4PfDwYs
XxWJClW13J4YS/QkYB9IiHGWXLjYb+TvDyqRyxYPZAzLybfTLj+nMkky
O34ke7t87tM5aF1m8V7+E1hf8MJLqy+2HSJK9SUJeqZj2strYMNz9vP7
7KP5wtbHCAe3qRELDSPj3/63L3gvNvVhLBhwUb4xSEhU7WWZgWHKbNfj w7Fx/Q==
;; ADDITIONAL SECTION:
ns-e.noaa.gov. 86400 IN A 140.90.33.237
ns-e.noaa.gov. 86400 IN AAAA 2610:20:8000:8c00::237
ns-mw.noaa.gov. 86400 IN A 140.172.17.237
ns-mw.noaa.gov. 86400 IN AAAA 2610:20:8800:8c00::237
ns-nw.noaa.gov. 86400 IN A 161.55.32.2
ns-nw.noaa.gov. 86400 IN AAAA 2610:20:8c00:8c00::2
ns-e.noaa.gov. 86400 IN RRSIG A 5 3 86400 20150205145234
20150129145234 45702 noaa.gov.
fuCsyeBpUCiKExnAveteeEZttukTfrtFCPw9PUsE2/F7T1BiWUbpedsp
zq57wmrH4fc7Qe11h420poeK0nDMbQpwKfmQwRpMhCGEWG/ZgeK6PoXa
uNH1YIf9giMGUn055trEvHXRTcwsBZq8/CqfyeSHPjKd5QRoQGvEXoP1
GGzrlINzlDNaExNmWJRBDC7q8uDRKRLC28fYBkORUK3z5+2HzqWrCeHi
pjWRmyE53WTLwq/960YQ4S//bOlT6OBTzP2N7S9fhR7cIwvFBrgEuBqQ
+1eNmCXqz6nDPmjqysjnI/wtb6d/HMYiJpXu07hcLiPQ9/4Z3+jbbGAQ k0ii8Q==
ns-e.noaa.gov. 86400 IN RRSIG AAAA 5 3 86400 20150205145234
20150129145234 45702 noaa.gov.
zy8WYbgybQ8ijOX7NuUmhl2nftvgytTeyv5ZQuIDfVvo2lWmnTQK51Mm
YRZnRMfN/Sms5Hg3YN5HE3nVxXs6/OGx758DDPyleSygPAzzxDM5I7jf
ZJNBOp3FH3hLh7fMhcT4zz5TycIWxwBjThYDU2Q7BGGykMLrJyz3W7d+
T2S2WzVCzbV5WdgnfQpf1bdYOi+UvNpdc2vBqu96SOKKiCxHBuBQGoqO
RfTo/qhMSIRR+gWfHm2uOweDzx8roD97AvJ0OuiUERYEnZ03JSYB/++9
fiMzz0Ke0nuChztkQYxx+EWeZQZx1ekE44+HwOZdXv7ksUJpEGCfpISI zoFOGg==
ns-mw.noaa.gov. 86400 IN RRSIG A 5 3 86400 20150205145234
20150129145234 45702 noaa.gov.
dZ3g54AHjVYtJkMq+52Q2uvgu2lrtxtzFbwcWnaxBsE4lSsHpa0jTX3v
hoEY96GbmBNR6oxuwV8Gr2KS576IULKvP4c5y6+LGtZsHXPWkIacQA0M
uNSfnY6yYXMDJHjvdgGPFtpo11akDgSFHWe8VxxHDnfGx9ZfLZq4Q1nB
OAenmjRqr93FbKz2LbEGjHm3Rkou0bZgvR1hpeK0ElhkTn5aX8vscrgQ
Tiw9K2u3aFuj+DFMb7w33W4WFCc1oUwULgg8sI5EjNHDHZRIFLdzJ4MC
AQuKw0Iet5el/2UmU4qv9u9zLCteQ4kALJuQ0hDQDYEHrNkPG+uvAhaD 0X9UZQ==
ns-mw.noaa.gov. 86400 IN RRSIG AAAA 5 3 86400 20150205145234
20150129145234 45702 noaa.gov.
zCbaVxy40gnAYAoC8qY9iWEzAlAkNwmDZhY+7BDgLb5DAYpAexoMlckq
FIISulHYwitORYGOkdLkM5odhoKXh7Znr+UE7OZ0eve6j0pehuP/X/Mp
N8tzccZc86sWzUSqqUhV533FaCxkDhoB7WzRIoSLAwnDeFuH0NDMvgA0
jZ+hCCC2lzI6GGO29PQ80EmFUd4vyBFLT1YObNEQwUE7EEZcRi4SIXGq
JJFrlqhPSd2jhaSbNNwJJ4cckc94L1G4ujP1W+OIJLk1QIQ057ph+H71
jFNIfqesjAYEJaEB52WhzOkBl0ASdSBHznmYZkPLlE8mYbZfm7SgFFqY EpJHhw==
ns-nw.noaa.gov. 86400 IN RRSIG A 5 3 86400 20150205145234
20150129145234 45702 noaa.gov.
2q8ipHzvJFt+ST9w83x+CvgDcRjDKUpfnCcHQAPDxi1CKrj2slwq0cDc
avKkHpsSPJEfTfDe3/UXtFwJEyxYcLoVcHXL+Q8ITyabrOMbH0L0RPhR
Ptpk3SIGU7kr1wi8qOGPd/oFjbNqhtCqWRcsiMNySRerC4TsSTYdNe/3
kNHubIeBaEF8BlJ3uI44rowGnEzmM5EOLfyZS5dC5ZQIIO4uIf/F0uJy
3kcSh1X8XLcXapsZ9x6bRPct9A7ia3uFHrSMVGoC8lPnJdFRjYK3JKZn
fKxv6V8YjzL7vs1OoMhbjT4c6OrnpRDyeux7yZ/1cVGwfnj/UlrS5SXb vEAfpg==
ns-nw.noaa.gov. 86400 IN RRSIG AAAA 5 3 86400 20150205145234
20150129145234 45702 noaa.gov.
szU3JWwU+AXmn2gZqgGgCBNOlVB1jrMRUuX277zCHa+KbstEX5DrkdGg
RWCwV91zhq9LzswfykGg4MRI3n1CuZj9G2u0YD8goF5inCSYgQrF14+Y
iNigxkHPEdYWyEQZeOv3jPm/nZDV9vHt8SxUxYVVEQ7Cbj9+rwxdY2n1
PA5oc5On4yvKZt96Oy1igcxiWtby5uKDhlx1e1DkoW0DFYZ5AAwF4nbQ
iP5d/8qlJd8VpXigP9VxMlNtD9e1cTWgUwpv3iOEJpZRo1ey/4OfGuvP
I17k64Ex/3x5FAX12FTR3z5s51HGSCTguVVZgzJsvy0DrwCIL07xZOtG zRBEXQ==
;; Query time: 265 msec
;; SERVER: 140.172.17.237#53(140.172.17.237)
;; WHEN: Fri Jan 30 08:35:08 EST 2015
;; MSG SIZE rcvd: 3419
In message <[email protected]>, Brad
Bendily writes:
> So, for a while we have had issues with resolving www.nhc.noaa.gov.
>
> In the past, a full restart of named fixed it for some amount of time.
>
> Last week I updated our named to 9.9.6-P1, so I assumed whatever the problem
> was would be resolved by this update. Apparently not.
>
> As you can see from the dig commands below. One resolves correctly, then 2 mi
> nutes later SERVFAIL. How can I troubleshoot this further?
>
> thanks
> bb
>
> dr93la08:/var/lib/named/slave # dig www.nhc.noaa.gov
>
> ; <<>> DiG 9.9.6-P1 <<>> www.nhc.noaa.gov ;; global options: +cmd ;; Got answ
> er:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 27700 ;; flags: qr rd ra;
> QUERY: 1, ANSWER: 12, AUTHORITY: 2, ADDITIONAL: 4
>
> ;; OPT PSEUDOSECTION:
> ; EDNS: version: 0, flags:; udp: 4096
> ;; QUESTION SECTION:
> ;www.nhc.noaa.gov. IN A
>
> ;; ANSWER SECTION:
> www.nhc.noaa.gov. 300 IN CNAME edge-nws.woc.noaa.gov.
> edge-nws.woc.noaa.gov. 300 IN CNAME edge-p1.l.noaa.gov.
> edge-p1.l.noaa.gov. 30 IN A 140.172.17.11
> edge-p1.l.noaa.gov. 30 IN A 140.90.33.11
> edge-p1.l.noaa.gov. 30 IN A 140.172.17.21
> edge-p1.l.noaa.gov. 30 IN A 129.15.96.21
> edge-p1.l.noaa.gov. 30 IN A 216.38.80.71
> edge-p1.l.noaa.gov. 30 IN A 140.90.200.21
> edge-p1.l.noaa.gov. 30 IN A 140.90.33.21
> edge-p1.l.noaa.gov. 30 IN A 216.38.80.81
> edge-p1.l.noaa.gov. 30 IN A 129.15.96.11
> edge-p1.l.noaa.gov. 30 IN A 140.90.200.11
>
> ;; AUTHORITY SECTION:
> gov. 172795 IN NS a.gov-servers.net.
> gov. 172795 IN NS b.gov-servers.net.
>
> ;; ADDITIONAL SECTION:
> a.gov-servers.net. 172795 IN A 69.36.157.30
> a.gov-servers.net. 172795 IN AAAA 2001:500:4431::2:30
> b.gov-servers.net. 172795 IN A 209.112.123.30
>
> ;; Query time: 3641 msec
> ;; SERVER: 10.120.11.107#53(10.120.11.107) ;; WHEN: Thu Jan 29 11:52:24 CST 2
> 015 ;; MSG SIZE rcvd: 363
>
>
>
> dr93la08:/var/lib/named/slave # dig www.nhc.noaa.gov
>
> ; <<>> DiG 9.9.6-P1 <<>> www.nhc.noaa.gov ;; global options: +cmd ;; Got answ
> er:k ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 64437 ;; flags: qr
> rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
>
> ;; OPT PSEUDOSECTION:
> ; EDNS: version: 0, flags:; udp: 4096
> ;; QUESTION SECTION:
> ;www.nhc.noaa.gov. IN A
>
> ;; Query time: 320 msec
> ;; SERVER: 10.120.11.107#53(10.120.11.107) ;; WHEN: Thu Jan 29 11:53:59 CST 2
> 015 ;; MSG SIZE rcvd: 45
>
>
> bb
>
> Brad Bendily
> System Administrator
> Northrop Grumman Corporation
> Louisiana Dept. of
> Children and Family Services
> [email protected]
> 225.342.6972
>
>
> _______________________________________________
> Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
> from this list
>
> bind-users mailing list
> [email protected]
> https://lists.isc.org/mailman/listinfo/bind-users
--
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742 INTERNET: [email protected]
_______________________________________________
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
from this list
bind-users mailing list
[email protected]
https://lists.isc.org/mailman/listinfo/bind-users
