Sparky: DNS stuff....

[swedguy]

This beats me. I'm having some issues getting to some domains from my server, but not from anywhere else.

Machine #1:

$ host -t SOA rocketflow.com
rocketflow.com SOA ns1.rocketflow.com dnsadmin.rocketflow.com (
2006020422 ;serial (version)
3600 ;refresh period (1 hour)
1800 ;retry interval (30 minutes)
604800 ;expire time (1 week)
3600 ;default ttl (1 hour)
)

$ host -t NS rocketflow.com
rocketflow.com NS ns2.rocketflow.com
rocketflow.com NS ns1.rocketflow.com

$ host -t A ns1.rocketflow.com
ns1.rocketflow.com does not exist, try again

$ host -t A ns2.rocketflow.com
ns2.rocketflow.com does not exist, try again

$ host -t A rocketflow.com
rocketflow.com A 198.104.132.29


Can't find the A records for ns[12].rocketflow.com but does find the A record for rocketflow.com, so not a broken zone file. So all domains that use those 2 NS' does not resolve.


Machine #2:

% host -t SOA rocketflow.com
rocketflow.com SOA ns1.rocketflow.com. dnsadmin.rocketflow.com. 2006020422 3600 1800 604800 3600

% host -t NS rocketflow.com
rocketflow.com name server ns2.rocketflow.com.
rocketflow.com name server ns1.rocketflow.com.

% host -t A ns1.rocketflow.com
ns1.rocketflow.com has address 130.94.75.209

% host -t A ns2.rocketflow.com
ns2.rocketflow.com has address 130.94.75.210


No issues here and I get the same result from home.

Got any clues?

[cd34]

is that domain newly designated to be a nameserver? Or did the IPs for ns1/ns2 change recently?

First, don't confuse resolving with being authoritative. Your /etc/hosts could contain a hostname of rocketflow.com and get the right IP, regardless of the configuration of the DNS server.

First, I think the glue for your DNS servers isn't set correctly. If this domain never had a nameserver running, then, you need to get your registrar to put the IPs into the master zone file -- they should have a procedure for this. Because those records are missing, the world really cannot find the servers. I don't have access to a zone.info file, but, I would bet this is the first issue.

If they had previously been authoritative DNS servers in the past, then that diagnosis is wrong.

As for your second results of ns1 and ns2 having valid dns entries on the 2nd machine, the problem still there is one of the zone probably not being configured correctly.

mcd@tsavo:~$ host ns1.rocketflow.com 130.94.75.209
ns1.rocketflow.com does not exist at 130.94.75.209 (Authoritative answer)
mcd@tsavo:~$ host ns1.rocketflow.com 130.94.75.210
ns1.rocketflow.com does not exist at 130.94.75.210 (Authoritative answer)

If those are indeed the IPs for ns1 and ns2, they should at least answer authoritatively for that domain. They do answer authoratively, but, know nothing about ns1/ns2. Again, this MIGHT mean that /etc/hosts is configured with the hostnames and IPs. That says to me that the zone file is incorrect.

mcd@tsavo:~$ host rocketflow.com 130.94.75.210
rocketflow.com A 198.104.132.29

because of this response, we must conclude that the zone file is incorrect, but, the server does appear to be answering authoritatively and is saying that ns1/ns2 don't exist in its copy of the zone.

you appear to be missing

ns1 IN A 130.94.75.209
ns2 IN A 130.94.75.210

from your zone file.

Barring that, it is possible the registrar issue might be playing into this, but, with the zone file broken, it is hard to say.

Now, it does seem really odd that www.rocketflow.com and rocketflow.com have extremely different IPs from ns1/ns2, but, they are both owned by Verio, so, it could just be different allocations.

I would get the IPs set in the zone file first. Once that is done, we can see if the glue records are indeed correct in the zone.info files maintained by verisign.

[swedguy]

Thanks for the reply

I'm not really involved in it in any way, it's a submitters domain ( free-porn-web-site.com ) that has it as its nameserver. This is the second time the linkbot has pulled all his sites for being unreachable. Just wanted to check if it was on my end or his end. Last time I checked it I got the same result, but cleared up after couple of days.

Ok, so it does look like the host Rocketflow has a broken zone file. I'll let the submitter know about it. Thanks a lot for your help |

I still don't get why it would work from one place and not from another?

[cd34]

depends on the expire time, contents of /etc/hosts, etc.

if the expire time was reached on one server, and it refreshed the zone and lost ns1/ns2, but the other server still had it cached, you could get differing results.

[ynuahayt]

Hey guys.
Thanks for your concern swedguy much appreciated!

I've had this issue with my host since day 1 there and they've been working hard on making it go away. They've already checked the zone files several times and all is correct in them. They're still trying actively to work it out.

I don't think it's a whole lot of people who can't access my sites at times, at least it doesn't seem so when I submit because it's like 1/50 of sites that gives me a "site unreachable error".

[cd34]

if it is any consolation, things appear to resolve correctly on rocketflow.com now.

[ynuahayt]

Yep Sparky all problems seems to be solved now - thanks for your input