On 01/13/2017 10:06 AM, Matus UHLAR - fantomas wrote: > On 13.01.17 09:57, Clément Fevrier wrote: >> I have a weird issue. I have at least one domain that bind9 >> can't resolved (phdcomics.com, so a very important one ^^), with >> status SERVFAIL. Bind server IP is 192.168.1.8, client is >> 192.168.1.7 >> >> >> Example #1 *client* % dig phdcomics.com > > try: > > dig +trace any phdcomics.com > > that should help more than comparing to other nameservers if they > can query that domain. > > Note that the domain has mismatched delegation, according to some > DNS checkers. also, the servers have very short TTLs. >
here the result: % dig +trace any phdcomics.com ; <<>> DiG 9.10.3-P4-Ubuntu <<>> +trace any phdcomics.com ;; global options: +cmd . 515404 IN NS j.root-servers.net. . 515404 IN NS a.root-servers.net. . 515404 IN NS h.root-servers.net. . 515404 IN NS c.root-servers.net. . 515404 IN NS m.root-servers.net. . 515404 IN NS f.root-servers.net. . 515404 IN NS b.root-servers.net. . 515404 IN NS k.root-servers.net. . 515404 IN NS i.root-servers.net. . 515404 IN NS l.root-servers.net. . 515404 IN NS d.root-servers.net. . 515404 IN NS e.root-servers.net. . 515404 IN NS g.root-servers.net. . 516619 IN RRSIG NS 8 0 518400 20170125170000 20170112160000 61045 . WMKDbbdi+tIYFJJux+cz0EzwvKSQcxw/PTIIMXNiFfHtObmsI2otfaZ3 6mKMih5w+dzpBeJUHi5CaXhCETed9UxFLDeOGHMOVpDMP5xsYHkZWdu+ 5uvAyukanzIJaR9TRbx793pKmv+kWr39gytZrWBUAM95Zd2A/24JCX6h 6Qp9yR1mSex2Y+w2QV1IEO1aJXM2pZxgDI++koUqTb6pT0jFVfVrWd82 x4dwIs9SQFjhvp3GjiGnksYASE4dZKplPGfvsnkuIe4vUyDWm2pQUILv rVOknj6Hy2L1LHJbyXdZXYtqJCo6BF3FaMmm8UP0EUeg9k6jdQFDCxhI JkGD+Q== ;; Received 1097 bytes from 192.168.1.8#53(192.168.1.8) in 10 ms com. 172800 IN NS a.gtld-servers.net. com. 172800 IN NS b.gtld-servers.net. com. 172800 IN NS c.gtld-servers.net. com. 172800 IN NS d.gtld-servers.net. com. 172800 IN NS e.gtld-servers.net. com. 172800 IN NS f.gtld-servers.net. com. 172800 IN NS g.gtld-servers.net. com. 172800 IN NS h.gtld-servers.net. com. 172800 IN NS i.gtld-servers.net. com. 172800 IN NS j.gtld-servers.net. com. 172800 IN NS k.gtld-servers.net. com. 172800 IN NS l.gtld-servers.net. com. 172800 IN NS m.gtld-servers.net. com. 86400 IN DS 30909 8 2 E2D3C916F6DEEAC73294E8268FB5885044A833FC5459588F4A9184CF C41A5766 com. 86400 IN RRSIG DS 8 1 86400 20170125170000 20170112160000 61045 . b5wTIFsPZnX8NZCa0YMrY6lBsiYHifpT9dKQWO0M9df9k2wjcKmiRpo7 b3L0EnQ+S3BT2kPPFXdRc30+4hxKlNZbFo2ci3E7AVTbY2b3Cl2JurB7 3wEDd+tI7SYlJ7/crPHQjeTUXIhc+QT2BKlfNxKhe2eUvpF5TqSOaT3m iJi9j2TanhmVyVZHfuYDoY8EzE2oqnIiu7kUOxBbsDI+MUa9j0GXVzPZ rna3Nbl0q+mHQhxQ2lGSw8MtpzXFDmuualOi6ZhLXmD25pEcdcsXY6mT gCrFMoZg6IyrOqOeSZKp4Enso5IHf3K6rIYn/F4HRnAP52z50RciggFq nDankQ== ;; Received 865 bytes from 192.203.230.10#53(e.root-servers.net) in 19 ms phdcomics.com. 172800 IN NS ns2.speakeasy.net. phdcomics.com. 172800 IN NS ns1.speakeasy.net. CK0POJMG874LJREF7EFN8430QVIT8BSM.com. 86400 IN NSEC3 1 1 0 - CK0Q1GIN43N1ARRC9OSM6QPQR81H5M9A NS SOA RRSIG DNSKEY NSEC3PARAM CK0POJMG874LJREF7EFN8430QVIT8BSM.com. 86400 IN RRSIG NSEC3 8 2 86400 20170117054831 20170110043831 6404 com. c/zPRDrQtCoVh+htMF53DvkVesgW326ejQ5wIewgCPiBoKeEbqIMK+Kx grKC4X74EdrgxCZj9kyv8tktEPsfDhNO0tOHX9Cll2crC3Me5IsDOpqE PFCeRg/t7ToelaG2EgsftqPYGXAM9W83JhhBCjI+4QMAkDLx+LIn1osY gY8= B7DI2Q1SAO6INJMOD4C3LIMV9US3S8SV.com. 86400 IN NSEC3 1 1 0 - B7DNPO8AU6JBOMQ8E9HM02MIH4V2REKE NS DS RRSIG B7DI2Q1SAO6INJMOD4C3LIMV9US3S8SV.com. 86400 IN RRSIG NSEC3 8 2 86400 20170118054114 20170111043114 6404 com. cYE8YzLv0mdE+mmBT1PgwhxHbxHQVgnJdGN0YWvyUJc2BX8567nzlMMS q8lrremlw+Gpzby7SlrMrvS2Od4QgZVIgG6i9Y0QuqN4pMtSC63CoDxZ U2zl2e+kvv59ubm2lvnWx69s+dTBZO6d4KJXGG0DeKd0Neq+HWYM/D0r Nbc= ;; Received 608 bytes from 192.31.80.30#53(d.gtld-servers.net) in 33 ms ;; connection timed out; no servers could be reached Clément _______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users