Re: Can't resolve some domians

8 msg	Forwarding environment questions
1 msg	BIND 9.5 libxml dependecy
1 msg	how to check if bind is compliled with the dlz ...
4 msg	bind crash with max-cache-size
1 msg	BIND 9.5 stats
4 msg	dnssec-keygen + Bind 9.4.2 RC2
2 msg	Blackhole for incoming queries only
2 msg	Change nameserver's ips
2 msg	Need info about dns client
2 msg	High processor windows 2003 64 bit
2 msg	turn off notifies for internal view?
10 msg	unable to get a nslookup on windows client
2 msg	why can't resolved

Can't resolve some domians
\ abuamaar amaar (17 Nov 2007)
. \ Mark Andrews (18 Nov 2007)
. . \ abuamaar amaar (19 Nov 2007)

4 msg	fresh installation is hosed...
3 msg	Enable logging for a single zone in BIND 8.2.3?
5 msg	after delegation
1 msg	dns_rdata_fromtext: buffer-0xb7f1ab44:1: near e...
6 msg	Bind 8.4.7-P1 on Solaris 8
2 msg	Re: Resend: BIND 9.4.2 Release Candidate 2 is n...

Subject:	Re: Can't resolve some domians
Group:	Bind-users
From:	abuamaar amaar
Date:	19 Nov 2007

Thanks Mark
On Nov 19, 2007 2:30 AM, Mark Andrews <Mark_Andrews> wrote:

>
> > **Dear Bind Users
> > Our Recursive & Open DNS Bind 9.2.4 (Solaris 10, Linux) & Bind
> > 8.2.4(Soalris 8) can't reslove the below domians
> >
> > ims-oman.com
> > sinjincorp.co.kr
> >
> > connection timed out; no servers could be reached
> >
> > but when I use dig +norec or dig +trace ims-oman.com / sinjincorp.co.krit
> > can reslove
>
> The servers for zones have misconfigured firewalls in front
> of them.
>
> ns.hostweb.co.kr doesn't accept queries from port 53.
> Similarly yns1.yahoo.com doesn't accept packets from port
> 53. Both the zones only have one working nameserver (as
> listed in the parent zone). Both zones have bad delegations
> (NS list in parents doesn't match that of child).
>
> It uses to be that people blocked DNS queries from any port
> but port 53. Now we are getting the reverse. Both are
> equally wrong.
>
> Mark
>
> drugs# dig -b 0.0.0.0#53 ns sinjincorp.co.kr @ns.hostweb.co.kr
>
> ; <<>> DiG 9.3.4-P1 <<>> -b 0.0.0.0#53 ns sinjincorp.co.kr @
> ns.hostweb.co.kr
> ; (1 server found)
> ;; global options: printcmd
> ;; connection timed out; no servers could be reached
> drugs# dig ns sinjincorp.co.kr @ns.hostweb.co.kr
>
> ; <<>> DiG 9.3.4-P1 <<>> ns sinjincorp.co.kr @ns.hostweb.co.kr
> ; (1 server found)
> ;; global options: printcmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 3780
> ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
>
> ;; QUESTION SECTION:
> ;sinjincorp.co.kr. IN NS
>
> ;; ANSWER SECTION:
> sinjincorp.co.kr. 86400 IN NS ns.hostweb.co.kr.
>
> ;; ADDITIONAL SECTION:
> ns.hostweb.co.kr. 86400 IN A 210.109.103.150
>
> ;; Query time: 335 msec
> ;; SERVER: 210.109.103.150#53(210.109.103.150)
> ;; WHEN: Mon Nov 19 09:20:03 2007
> ;; MSG SIZE rcvd: 75
>
> drugs#
>
> drugs# dig -b 0.0.0.0#53 ns ims-oman.com @yns1.yahoo.com
>
> ; <<>> DiG 9.3.4-P1 <<>> -b 0.0.0.0#53 ns ims-oman.com @yns1.yahoo.com
> ; (1 server found)
> ;; global options: printcmd
> ;; connection timed out; no servers could be reached
> drugs# dig ns ims-oman.com @yns1.yahoo.com
>
> ; <<>> DiG 9.3.4-P1 <<>> ns ims-oman.com @yns1.yahoo.com
> ; (1 server found)
> ;; global options: printcmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 42280
> ;; flags: qr aa rd; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 4
>
> ;; QUESTION SECTION:
> ;ims-oman.com. IN NS
>
> ;; ANSWER SECTION:
> ims-oman.com. 86400 IN NS ns8.san.yahoo.com.
> ims-oman.com. 86400 IN NS ns9.san.yahoo.com.
> ims-oman.com. 86400 IN NS yns1.yahoo.com.
> ims-oman.com. 86400 IN NS yns2.yahoo.com.
>
> ;; ADDITIONAL SECTION:
> ns8.san.yahoo.com. 1800 IN A 66.218.71.205
> ns9.san.yahoo.com. 1800 IN A 216.109.116.20
> yns1.yahoo.com. 1800 IN A 66.218.71.205
> yns2.yahoo.com. 1800 IN A 216.109.116.20
>
> ;; Query time: 171 msec
> ;; SERVER: 66.218.71.205#53(66.218.71.205)
> ;; WHEN: Mon Nov 19 09:17:35 2007
> ;; MSG SIZE rcvd: 178
>
> drugs#
>
> > and when I check other DNS such as OpenDNS (208.67.222.222) it can
> > be resloved
> >
> > The above domains are reachable from other countries and it is not block
> by
> > the ISP here
> >
> > How I can solve this issue?
> >
> > Thanks in advance
> >
> >
>
> > Best Regards
> > Yassir
> >
> >
> >
> --
> Mark Andrews, ISC
> 1 Seymour St., Dundas Valley, NSW 2117, Australia
> PHONE: +61 2 9871 4742 INTERNET: Mark_Andrews
>

--
Please don't hesitate to get back in touch with us if you have any
additional questions.

With Regards
Yasser Al-Shaqsi