[nsp] resolving ftp.cisco.com
ARIGA Seiji
ariga at os.rim.or.jp
Tue Jul 15 02:15:54 EDT 2003
> Anyone else having problems resolving ftp.cisco.com?
----
>host -d -t ns cisco.com.
(snip)
cisco.com. 1d17h4m52s IN NS ns2.cisco.com.
cisco.com. 1d17h4m52s IN NS ns1.cisco.com.
ns2.cisco.com. 1d23h55m21s IN A 192.135.250.69
ns1.cisco.com. 1d21h31m23s IN A 128.107.241.185
----
----
>host -d -t a ftp.cisco.com. 192.135.250.69
(snip)
ftp.cisco.com. 1m12s IN A 64.102.255.95
ftp.cisco.com. 1D IN NS sjce-dirty-ddir.cisco.com.
sjce-dirty-ddir.cisco.com. 1D IN A 172.17.153.22
sjce-dirty-ddir.cisco.com. 1D IN A 128.107.240.86
rcode = 0 (Success), ancount=1
ftp.cisco.com has address 64.102.255.95
----
no problem so far. but,
----
>host -d -t aaaa ftp.cisco.com. 192.135.250.69
Using domain server 192.135.250.69:
;; res_nmkquery(QUERY, ftp.cisco.com, IN, AAAA)
;; res_send()
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 28852
;; flags: rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
;; ftp.cisco.com, type = AAAA, class = IN
;; Querying server (# 1) address = 192.135.250.69
;; new DG socket
server rejected query:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 28852
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
;; ftp.cisco.com, type = AAAA, class = IN
;; Querying server (# 1) address = 192.135.250.69
;; new DG socket
server rejected query:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 28852
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
;; ftp.cisco.com, type = AAAA, class = IN
res_nsend failed
Host not found, try again.
----
the correct answer for the host which doesn't have AAAA RR is 'no
error with no data' (*1). so if you use IPv6 enabled FTP client and
BIND8 for your resolving server, you may get into trouble.
# BIND9 will act differently, IIRC.
// ARIGA Seiji
(*1)
example.
>host -d -t aaaa puck.nether.net 169.207.2.72
Using domain server 169.207.2.72:
;; res_nmkquery(QUERY, puck.nether.net, IN, AAAA)
;; res_send()
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 22963
;; flags: rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
;; puck.nether.net, type = AAAA, class = IN
;; Querying server (# 1) address = 169.207.2.72
;; new DG socket
;; got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 22963
;; flags: qr aa rd; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; puck.nether.net, type = AAAA, class = IN
nether.net. 1D IN SOA puck.nether.net. jared.puck.nether.net. (
2003070501 ; serial
8H ; refresh
4H ; retry
4W ; expiry
1D ) ; minimum
rcode = 0 (Success), ancount=0
More information about the cisco-nsp
mailing list