Re: dnscache problems

richard lucassen wrote the following on 22.09.2010 09:55:
> I get more and more problems using dnscache. I've already started a
> thread a few months ago about this issue, and until now I entered the
> missing queries to an instance of tinydns, but it seems that this
> problem is growing:
> 
> dnsqr mx newcastle.edu.au
> 15 newcastle.edu.au:
> timed out

Takes a while here, but the query succeeds;
~$ dnsqr mx newcastle.edu.au
15 newcastle.edu.au:
135 bytes, 1+4+0+0 records, response, noerror
query: 15 newcastle.edu.au
answer: newcastle.edu.au 43200 MX 10 reactive.newcastle.edu.au
answer: newcastle.edu.au 43200 MX 10 outsource.newcastle.edu.au
answer: newcastle.edu.au 43200 MX 10 proactive.newcastle.edu.au
answer: newcastle.edu.au 43200 MX 10 synergy.newcastle.edu.au

What do your dnscache logs say?

Your problem is probably cuased by the edu.au servers not providing glue
for the latter two of the NS records they publish for newcastle.edu.au,
these being:

newcastle.edu.au 14400 NS netslave2.cc.monash.edu.au
newcastle.edu.au 14400 NS seagoon.newcastle.edu.au
newcastle.edu.au 14400 NS neddy.newcastle.edu.au

Therefore, an unprimed dnscache needs to make its queries to
netslave2.cc.monash.edu.au, the DNS servers of which the edu.au servers
provide glue for.

> dnsqr mx deloitte.com.au
> 15 deloitte.com.au:
> timed out

Same problem here, the com.au servers provide glue only for one of two
(in-bailiwick) NS records:

~$ dnsq mx deloitte.com.au ns3.ausregistry.net.au
15 deloitte.com.au:
88 bytes, 1+0+2+1 records, response, noerror
query: 15 deloitte.com.au
authority: deloitte.com.au 14400 NS name.deloitte.com.au
authority: deloitte.com.au 14400 NS name2.deloitte.com.au
additional: name.deloitte.com.au 14400 A 134.159.157.13


> While other nameservers give me an answer:

So does my dnscache.

> I know it's apparently not a dnscache fault, but the problem is rather
> annoying. Customers are complaining and they do not accept that they
> have to use gmail or other ways to contact these domains. I think I'm
> not the only one with this problem. How do others resolve this issue?
> (other options than installing PowerDNS or BIND)

The owners of the two domains in question need to complete the data on
the edu.au and com.au servers. It would probably also make sense for the
newcastle.edu.au DNS admins to provide the same set of NS records on
their servers as the edu.au servers do.

Cheers,
Tobias