Re: OT: lots of IPv6 DNS requests

[Jon Radel]

Wojciech Puchar wrote:

Jun 10 17:14:32 wojtek named[909]: client 2001:4830:167d:5237::3:1#59882: query (cache) 'wojtek.tensor.gdynia.pl/AAAA/IN' denied Jun 10 17:14:32 wojtek named[909]: client 2001:4830:167d:5237::3:1#59882: query (cache) 'wojtek.tensor.gdynia.pl/ANY/IN' denied

my computer is NOT set up as DNS server for any domain.

why they are asking?

Because your computer is reachable on either

dns.tensor.gdynia.pl.   10800   IN      AAAA    2001:4070:101::1

or

dns2.tensor.gdynia.pl.  10732   IN      AAAA    2001:4070:101:1::2



Aha, found the matching log entries on my side:





;; AUTHORITY SECTION:
tensor.gdynia.pl.       28800   IN      NS      dns2.tensor.gdynia.pl.
tensor.gdynia.pl.       28800   IN      NS      dns3.tensor.gdynia.pl.
tensor.gdynia.pl.       28800   IN      NS      dns.tensor.gdynia.pl.

;; ADDITIONAL SECTION:
dns.tensor.gdynia.pl.   28800   IN      A       213.192.74.1
dns.tensor.gdynia.pl.   28800   IN      AAAA    2001:4070:101::1
dns2.tensor.gdynia.pl.  28800   IN      A       83.18.148.142
dns2.tensor.gdynia.pl.  28800   IN      AAAA    2001:4070:101::1
dns3.tensor.gdynia.pl.  28800   IN      A       83.12.228.78
dns3.tensor.gdynia.pl.  28800   IN      AAAA    2001:4070:101:2::1



--Jon Radel

and that pesky set of parent zone DNS servers insists on handing those addresses out in NS records? Jun 10 15:14:33 billow named[581]: client 192.168.43.18#45589: query: wojtek.tensor.gdynia.pl IN AAAA + Jun 10 15:14:33 billow named[581]: client 192.168.43.19#1873: query: wojtek.tensor.gdynia.pl IN ANY + Jun 10 15:14:34 billow named[581]: unexpected RCODE (REFUSED) resolving 'wojtek.tensor.gdynia.pl/AAAA/IN': 2001:4070:101:2::1#53 Jun 10 15:14:34 billow named[581]: unexpected RCODE (REFUSED) resolving 'wojtek.tensor.gdynia.pl/ANY/IN': 2001:4070:101:2::1#53 Hmmm...different IP address. Hmmm..... Hey, what about you look at what bilbo.nask.org.pl. is returning when asked for your nameservers: Inconsistent from some of your other parents. Might want to clean up a bit. ;-)

smime.p7s
Description: S/MIME Cryptographic Signature