Re: [MaraDNS list] CNAME chaining

Thank you for testing Sebastiano! We have multiple connections to the
internet and when I test using one it works. From the other, our
corporate connection, we receive no replies ns78.worldnic.com nor
ns77.worldnic.com which are the authoritative NS for the spireon.com
zone.

I don't know whether they are not receiving my queries or I'm not
receive their responses but I clearly see using Dw's verbose logging
that requests are being sent to both of their NSs and no response
arriving.

I don't think this is something that I can fix and I hate trying to
explain something like this to my clients.

Thanks again for the response.

Wayne

On Wed, Jun 05, 2013 at 09:06:01PM +0200, Sebastiano Pilla wrote:
> [email protected] wrote:
> >We're running Deadwood 3.2.01 and I've got users complaining that they
> >cannot resolve www.spireon.com.
> 
> ...
> 
> >I've seen that many recommend against CNAME chaining, while bad practice
> >it doesn't appear to violate the RFC, so I think Dw should handle this.
> >Can anyone else test this resolution and see if they experience the same
> >problem?
> 
> Using Deadwood 3.2.03, it worked for me:
> 
> [admin@picard ~]$ dig @192.168.88.21 www.spireon.com
> 
> ; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.17.rc1.el6_4.4 <<>> @192.168.88.21 
> www.spireon.com
> ; (1 server found)
> ;; global options: +cmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 37809
> ;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 0
> 
> ;; QUESTION SECTION:
> ;www.spireon.com.               IN      A
> 
> ;; ANSWER SECTION:
> www.spireon.com.        60      IN      CNAME   global.spireon.com.
> global.spireon.com.     60      IN      CNAME   
> marketing-elb-spireon1-290371133.us-east-1.elb.amazonaws.com.
> marketing-elb-spireon1-290371133.us-east-1.elb.amazonaws.com. 60 IN A 
> 23.23.215.69
> 
> ;; Query time: 845 msec
> ;; SERVER: 192.168.88.21#53(192.168.88.21)
> ;; WHEN: Wed Jun  5 21:05:47 2013
> ;; MSG SIZE  rcvd: 141
> 
>