Re: Help, I can´t make a delega tion :(

"Reyner Herrpinark Lugo" <[email protected]> Tue, 2 Jun 2009 22:49:36 -0400
Newsgroups gmane.network.dns.bind9.dlz
Message-ID <[email protected]>
Firstly, thank you very much Todd for not stopping to help.

You're correct Todd:

tip-server.example.com:  authoritative for example.com

With the following data:

dns_zone       |host      |ttl    |dns_type |mx_priority |data      |
example.com    |@         |604800 |soa      |NULL        |tip-server reynerhl.gmail.com. 20090408 3000 900 108864000 432000|
example.com    |@         |604800 |ns       |NULL        |tip-server|
example.com    |tip-server|604800 |a        |NULL        |10.7.20.3 |
us.example.com |@         |604800 |ns       |NULL        |ns1       |
us.example.com |ns1       |604800 |a        |NULL        |10.7.20.2 |

and ns1.us.example.com:  authoritative for us.example.com

With the following data:   

dns_zone       |host |ttl    |dns_type|mx_priority|data       |
us.example.com |@    |604800 |so      |NULL       |ns1 reynerhl.gmail.com. 20090408 3000 900 108864000 432000|
us.example.com |@    |604800 |ns      |NULL       |ns1        |
us.example.com |ns1  |604800 |a       |NULL       |10.7.20.2  |
us.example.com |test |604800 |a       |NULL       |10.7.20.100|

My querys are:

SELECT ttl, dns_type, mx_priority, data
FROM dns_records WHERE dns_zone='%zone%' AND host='%record%';

now, take a look at some output from dig command:

(from the 10.7.20.3 [authoritative for example.com]):

dig ns us.example.com @127.0.0.1

;; QUESTION SECTION:
;us.example.com.			IN	NS

;; ANSWER SECTION:
us.example.com.		604800	IN	NS	ns1.us.example.com.

another from the same server:

dig a ns1.us.example.com @127.0.0.1:

;; QUESTION SECTION:
;ns1.us.example.com.	IN	A

;; ANSWER SECTION:
ns1.us.example.com. 604800	IN	A	10.7.20.2

Now, it is the trouble:

dig a test.us.example.com @127.0.0.1

;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 47560
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;test.us.example.com.		IN	A

It is as if not allowed to transfer the querys through example.com to us.example.com. I mean, the querys never reach the delegated server, I think if example.com's server find a substring that match with his domain name (test.us.EXAMPLE.COM), he assume hi is authoritaive for that, I 'm not pretty shure, is just an idea.

Todd, please. if you have this trouble resolved, share all your configuration files, posting, by mail, where you prefer.

Thanks a lot.

------------------------------------------------------------------------------
OpenSolaris 2009.06 is a cutting edge operating system for enterprises 
looking to deploy the next generation of Solaris that includes the latest 
innovations from Sun and the OpenSource community. Download a copy and 
enjoy capabilities such as Networking, Storage and Virtualization. 
Go to: http://p.sf.net/sfu/opensolaris-get

_______________________________________________
Bind-dlz-testers mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/bind-dlz-testers
winmail.dat (application/ms-tnef, 3.6 KB) - not displayed