>when I do an NS lookup

don't use nslookup, use dig

>  against one of my name servers running Bind 8 for NT,
>it returns the list of root servers instead of a non authorities answer...

that's type of DNS response is called a referral, saying the server does 
have the answer in its cache or autoritative records, and won't look it up 
for you, so the "best answer" is go look it up yourself starting with the 
root-servers.net

>when I do the same lookup against my @K DNS

@K ??

>  it returns the IP address and
>states non authorities.  Can you lead me in a direction to fix my Bind Name
>servers.
>
>In case you want to do a test the IP is 65.217.132.1 and 2  or
>ns1.nrgnetworks.com and ns2.nrgnetworks.com.

# dig @65.217.132.1 nrgnetworks.com any

; <<>> DiG 8.3 <<>> @65.217.132.1 nrgnetworks.com any
; (1 server found)
;; res options: init recurs defnam dnsrch
;; got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 6
;; flags: qr aa rd; QUERY: 1, ANSWER: 7, AUTHORITY: 3, ADDITIONAL: 5
;; QUERY SECTION:
;;      nrgnetworks.com, type = ANY, class = IN

;; ANSWER SECTION:
nrgnetworks.com.        1D IN A         65.217.134.126
nrgnetworks.com.        1D IN MX        10 mail1.nrgnetworks.com.
nrgnetworks.com.        1D IN MX        20 mail2.nrgnetworks.com.
nrgnetworks.com.        1D IN NS        ns3.nrgnetworks.com.
nrgnetworks.com.        1D IN NS        ns1.nrgnetworks.com.
nrgnetworks.com.        1D IN NS        ns2.nrgnetworks.com.
nrgnetworks.com.        1D IN SOA       ns1.nrgnetworks.com. 
dns.nrgnetworks.com. (
                                         2001100302      ; serial
                                         1H              ; refresh
                                         18M             ; retry
                                         1W              ; expiry
                                         1D )            ; minimum


;; AUTHORITY SECTION:
nrgnetworks.com.        1D IN NS        ns3.nrgnetworks.com.
nrgnetworks.com.        1D IN NS        ns1.nrgnetworks.com.
nrgnetworks.com.        1D IN NS        ns2.nrgnetworks.com.

;; ADDITIONAL SECTION:
mail1.nrgnetworks.com.  1D IN A         65.217.132.4
mail2.nrgnetworks.com.  1D IN A         65.217.132.4
ns3.nrgnetworks.com.    1D IN A         65.217.132.3
ns1.nrgnetworks.com.    1D IN A         65.217.132.1
ns2.nrgnetworks.com.    1D IN A         65.217.132.2

and


# dig @65.217.132.2 nrgnetworks.com any

; <<>> DiG 8.3 <<>> @65.217.132.2 nrgnetworks.com any
; (1 server found)
;; res options: init recurs defnam dnsrch
;; got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 6
;; flags: qr aa rd; QUERY: 1, ANSWER: 7, AUTHORITY: 3, ADDITIONAL: 5
;; QUERY SECTION:
;;      nrgnetworks.com, type = ANY, class = IN

;; ANSWER SECTION:
nrgnetworks.com.        1D IN A         65.217.134.126
nrgnetworks.com.        1D IN MX        10 mail1.nrgnetworks.com.
nrgnetworks.com.        1D IN MX        20 mail2.nrgnetworks.com.
nrgnetworks.com.        1D IN NS        ns3.nrgnetworks.com.
nrgnetworks.com.        1D IN NS        ns1.nrgnetworks.com.
nrgnetworks.com.        1D IN NS        ns2.nrgnetworks.com.
nrgnetworks.com.        1D IN SOA       ns1.nrgnetworks.com. 
dns.nrgnetworks.com. (
                                         2001100302      ; serial
                                         1H              ; refresh
                                         18M             ; retry
                                         1W              ; expiry
                                         1D )            ; minimum


;; AUTHORITY SECTION:
nrgnetworks.com.        1D IN NS        ns3.nrgnetworks.com.
nrgnetworks.com.        1D IN NS        ns1.nrgnetworks.com.
nrgnetworks.com.        1D IN NS        ns2.nrgnetworks.com.

;; ADDITIONAL SECTION:
mail1.nrgnetworks.com.  1D IN A         65.217.132.4
mail2.nrgnetworks.com.  1D IN A         65.217.132.4
ns3.nrgnetworks.com.    1D IN A         65.217.132.3
ns1.nrgnetworks.com.    1D IN A         65.217.132.1
ns2.nrgnetworks.com.    1D IN A         65.217.132.2

your DNS's work fine, seems to be a cockpit error.  they have 'aa' but 
don't have 'ra' which is correct.

>  the Microsoft DNS is
>65.217.132.14

# dig @65.217.132.14 nrgnetworks.com any

; <<>> DiG 8.3 <<>> @65.217.132.14 nrgnetworks.com any
; (1 server found)
;; res options: init recurs defnam dnsrch
;; got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 6
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 8, AUTHORITY: 0, ADDITIONAL: 3
;; QUERY SECTION:
;;      nrgnetworks.com, type = ANY, class = IN

;; ANSWER SECTION:
nrgnetworks.com.        10M IN A        65.217.132.19
nrgnetworks.com.        10M IN A        65.217.132.14
nrgnetworks.com.        10M IN A        65.217.132.50
nrgnetworks.com.        1H IN NS        ns2.nrgnetworks.com.
nrgnetworks.com.        1H IN NS        ns1.nrgnetworks.com.
nrgnetworks.com.        1H IN NS        dc.nrgnetworks.com.
nrgnetworks.com.        1H IN SOA       dc.nrgnetworks.com. 
dns.nrgnetworks.com. (
                                         781             ; serial
                                         15M             ; refresh
                                         10M             ; retry
                                         1D              ; expiry
                                         1H )            ; minimum

nrgnetworks.com.        0S IN 65281     \#(             ; unknown RR type
         00 00 00 00 00 00 00 02 00 00 03 84 00 00 00 01 ; ................
         41 d9 84 0e )                                   ; A...

;; ADDITIONAL SECTION:
ns2.nrgnetworks.com.    20M IN A        65.217.132.2
ns1.nrgnetworks.com.    20M IN A        65.217.132.1
dc.nrgnetworks.com.     1H IN A         65.217.132.14


That's screwed up, and btw, it looks like your mail server is blacklisted:

Date: Fri, 22 Feb 2002 19:54:44 +0100 (CET)
From: [EMAIL PROTECTED] (Mail Delivery System)
To: [EMAIL PROTECTED] (Postmaster)
Subject: Postfix Relay Hub SMTP server: errors from unknown[65.217.132.137]
Message-Id: <[EMAIL PROTECTED]>
X-Virus-Scanned: by VirusGate.MEIway.com
X-UIDL: 300264196
Status: U

Transcript of session follows.

  Out: 220 mgw1.MEIway.com - ESMTP - Postfix Relay Hub - ATTN: UCE trespassers
      will be pursued.
  In:  EHLO mail.nrgnetworks.com
  Out: 250-mgw1.MEIway.com
  Out: 250-PIPELINING
  Out: 250-SIZE 40000000
  Out: 250-ETRN
  Out: 250 8BITMIME
  In:  MAIL FROM:<[EMAIL PROTECTED]>
  Out: 250 Ok
  In:  RCPT To:<[EMAIL PROTECTED]>
  Out: 554 Service unavailable; [65.217.132.137] blocked using 
dnsbl.njabl.org, reason: relay tested -- 1012850105
  In:  QUIT
  Out: 221 Bye

Len


http://MenAndMice.com/DNS-training
http://BIND8NT.MEIway.com : ISC BIND for NT4 & W2K
http://IMGate.MEIway.com  : Build free, hi-perf, anti-abuse mail gateways


Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/

Reply via email to