IPv6 Statistics was Re: please fix your broken DNS server

Daniel Roesen dr at cluenet.de
Thu Jul 7 17:09:23 CEST 2005


On Thu, Jul 07, 2005 at 03:58:10PM +0100, David Malone wrote:
> Unfortunately, it doesn't catch this one, because the problem occurs
> further up the DNS tree than the script expects. It seems that the
> servers for milwaukee.gov:
> 
>         itmddns1x.milwaukee.gov
>         itmddns2x.milwaukee.gov
>         itmddns3x.milwaukee.gov
>         itmddns4x.milwaukee.gov
> 
> will only answer queries for records of type A and CNAME for
> gwise.milwaukee.gov (they won't answer queries for MX, TXT, AAAA,
> NS, ...). They don't have the same problem with www.milwaukee.gov,
> which indicates that there is some weird internal problem.

Indeed. I was checking the query sequence sendmail would do (as far as I
can tell), and that would be querying for MX first. When querying for
MX, you'll eventually end up at lpitmd-isp[12].mpw.net.

More fun:

$ dig @itmddns1x.milwaukee.gov. ci.mil.wi.us. MX +norec +short
10 gwise.milwaukee.gov.
20 mhsgate.ci.mil.wi.us.
$ dig @itmddns2x.milwaukee.gov. ci.mil.wi.us. MX +norec +short
;; reply from unexpected source: 216.54.131.209#53, expected 216.56.88.112#53
;; reply from unexpected source: 216.54.131.209#53, expected 216.56.88.112#53
;; reply from unexpected source: 216.54.131.209#53, expected 216.56.88.112#53
;; connection timed out; no servers could be reached
$ dig @itmddns3x.milwaukee.gov. ci.mil.wi.us. MX +norec +short
20 mhsgate.ci.mil.wi.us.
10 gwise.milwaukee.gov.
$ dig @itmddns4x.milwaukee.gov. ci.mil.wi.us. MX +norec +short
;; reply from unexpected source: 216.54.131.210#53, expected 216.56.88.113#53
;; reply from unexpected source: 216.54.131.210#53, expected 216.56.88.113#53
;; reply from unexpected source: 216.54.131.210#53, expected 216.56.88.113#53
;; connection timed out; no servers could be reached

where 216.54.131.209 is the IP of itmddns1x, and 216.54.131.210 being
the IP of itmddns3x.

I think Joseph's assessment of "broken" was quite correct. In multiple
ways.


Regards,
Daniel

-- 
CLUE-RIPE -- Jabber: dr at cluenet.de -- dr at IRCnet -- PGP: 0xA85C8AA0



More information about the ipv6-ops mailing list