- Test - lists.nanog.org

[fjk].gtld-servers.net bogus for .com
by Marc Slemko 11 Nov '98

11 Nov '98

[fjk].gtld-servers.net (which are listed as authoritative for .com) are giving bogus authoritative nxdomain results for all the .com domains I tried. eg. ; <<>> DiG 2.2 <<>> internic.com @f.gtld-servers.net ; (1 server found) ;; res options: init recurs defnam dnsrch ;; got answer: ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10 ;; flags: qr aa rd; Ques: 1, Ans: 0, Auth: 1, Addit: 0 ;; QUESTIONS: ;; internic.com, type = A, class = IN ;; AUTHORITY RECORDS: COM. 86400 SOA A.ROOT-SERVERS.NET. hostmaster.INTERNIC.NET. ( 1998111000 ; serial 1800 ; refresh (30 mins) 900 ; retry (15 mins) 604800 ; expire (7 days) 86400 ) ; minimum (1 day) ;; Total query time: 67 msec ;; FROM: valis.worldgate.com to SERVER: f.gtld-servers.net 207.159.77.18 ;; WHEN: Wed Nov 11 11:17:16 1998 ;; MSG SIZE sent: 30 rcvd: 107 f.root-servers.net is giving non-authoritative "sorry, I don't do that, here are the nameservers for .com" responses. I have sent mail to the InterNIC, but just in case you were wondering why you are seeing what you may be seeing. Symptoms of this problem are being told by your resolver that various domains do not exist once in a while.

9 11

Re: [fjk].gtld-servers.net bogus for .com
by Dean Robb 11 Nov '98

11 Nov '98

At 15:36 11/11/98 -0600, you wrote: > >Fixed on the next daily update? So when the AOL problem happened, a special >update was done, but when several hundred (anyone know how many really) >entries are trashed, we all must wait until the next daily update? Another Public Relations/Customer Service triumph for NSI/InterNIC. </sarcasm> I suspect more than just the fjk servers are hosed...last night around midnight I was surfing and had over ten sites disappear between one load and the next. The domain names ran the gamut from "f" to "u". Given the time frames, they likely disappeared as the update propagated. Now, either a whole lot of sites simultaneously had server crashes or.... Spammers should be investigated by Ken Starr! Dean Robb PC-EASY computer services (757) 495-EASY [3279]

1 0

Re: QUICKER FIX Re: [fjk].gtld-servers.net bogus for .com
by Paul Vixie 11 Nov '98

11 Nov '98

> f.root-servers.net is FTP'ing its COM zone even as we speak. AXFR to > a.root-servers.net is giving wierd results. i'll be fetching the zone > manually until we find the smoking gun. btw, i've taken F offline while the FTP happens. though the response f.root-servers.net was sending back (an upward delegation) was just a "lame server" and would not have caused errors, whereas the error that f.gtld-servers.net was sending this morning would have caused false negatives (bounced mail, etc). -- Paul Vixie <paul(a)vix.com>

1 0

Re: QUICKER FIX Re: [fjk].gtld-servers.net bogus for .com
by Paul Vixie 11 Nov '98

11 Nov '98

> > Many thanks to my friend & cow-orker Tristan Horn for this > > idea...in BIND 8 you can define servers as bogus (meaning > > "don't ever trust these") as follows: > > > > // [fjkl].root-servers.net > > server 192.5.5.241 { bogus yes; }; > > server 198.41.0.10 { bogus yes; }; > > server 193.0.14.129 { bogus yes; }; > > server 198.32.64.12 { bogus yes; }; i recommend against that. > Note that f.gtld-servers.net was the long-running one giving real > problems. [fjk].gtld-servers.net were the ones I saw giving false > nxdomains at ~1000 pdt, [jk] were fixed by ~1030 and f was taken down > ~1200. Two hours! Sheesh. indeed. > It appears to be fixed now. f.gtld-servers.net is down, a few others are > giving referals to the .com nameservers (still "broken", but doesn't break > things the same). right. > By fixed, I mean you shouldn't see false nxdomains and things should all > resolve fine. f.root-servers.net is FTP'ing its COM zone even as we speak. AXFR to a.root-servers.net is giving wierd results. i'll be fetching the zone manually until we find the smoking gun. -- Paul Vixie <paul(a)vix.com>

1 0

NameServer Monitoring System
by joe＠vpop.net 11 Nov '98

11 Nov '98

Howdy folks, I am looking for BETA testers for our "NameServer Monitoring System". (no this does not check the roots to see if they are operational ;-) ) Basically, it watches the roots for changes to the nameservers you monitor and emails you those changes on a daily basis. A sample output is at: http://www.domainwatch.com/monitor/example.html You can monitor up to 10 nameservers. Anyways, if you're interested, do the form bit at: http://www.domainwatch.com/monitor/ and we'll get the instructions out to you. Send bug reports, flames and kudos to admin(a)domainwatch.com Thanks, -joe -- NewsHub: http://www.NewsHub.com/tech/ | DomainSurfer: http://www.DomainSurfer.com/ | Explore Your Net! MultiTrace: http://www.MultiTrace.com/ |

1 0

QUICKER FIX Re: [fjk].gtld-servers.net bogus for .com
by J.D. Falk 11 Nov '98

11 Nov '98

Many thanks to my friend & cow-orker Tristan Horn for this idea...in BIND 8 you can define servers as bogus (meaning "don't ever trust these") as follows: // [fjkl].root-servers.net server 192.5.5.241 { bogus yes; }; server 198.41.0.10 { bogus yes; }; server 193.0.14.129 { bogus yes; }; server 198.32.64.12 { bogus yes; }; -- J.D. Falk <jdfalk(a)cp.net> "A name indicates what we seek. Special Agent In Charge (Abuse Issues) An address indicates where it is. Critical Path, Inc. A route indicates how we get there." -- Jon Postel (1943-1998)

2 1

gateway failover.
by spam＠eek.org 11 Nov '98

11 Nov '98

i've a situation where the network we're building is very low-traffic, but requires maximum uptime. the budget is for all components to be duplicated to allow for failover. i've figured out various ways to do load-balancing and failover at the router/nat level, and at L2, but have run into a bit of a problem figuring how to use two solaris boxes (firewalls) as gateways for all servers/clients behind them in some kind of HA/failover configuration. i'd like to minimize the client/server side configuration as much as possible (and the environment may include NT, Macs, or other such ilk which will not easily supporting a useful routing protocol), so something like installing gated on all of the boxes, and implementing an ospf environment is an unsavory proposition. i'd like something like HSRP, but for solaris/unix, and preferably free. i'm aware of several vendor HA solutions, but they are mostly overkill for our application. i've looked into IRDP (rfc1256), but i cant find any information about vendor support. any pointers to relevant info would be appreciated, including any general resources for HA/network redundancy/failover stuff (preferably non-commercial). -foo

2 1

Cisco IOS 12.0 x 11.1CC
by Rubens Kuhl Jr. 11 Nov '98

11 Nov '98

Have anyone here upgraded a 7500 router from IOS 11.1CC to IOS 12.0 ? If you upgraded, are you happy with it ? ( ) Yes, it supports all the features I was using in 11.1CC ( ) Yes, it supports new features that I'm using now or intend to use ( ) Yes, it supports all cards and/or port adapters ( ) If you upgraded and you are you unhappy with it, why ? ( ) Because it lacks support of features I need ( ) Because it lacks support of card and/or port adapter I have ( ) Because it makes CPU go 100% ( ) Because it doesn't work at all ( ) If you have not upgraded, why ? ( ) Have no support contract, costs money ( ) Cisco told me not to do so ( ) My Cisco representative told me not to do so ( ) 11.1CC works very well, why should I risk ( ) I've seen no reason to upgrade (till last week security notice) ( ) Downtime concerns ( ) Rubens Kuhl Jr.

1 1

Re: ARIN?
by Scott Gifford 11 Nov '98

11 Nov '98

>On Tue, Nov 10, 1998 at 03:36:53PM -0600, Phil Howard wrote: > >> The other purpose, however, is used to justify address space allocation. > >Ok, this question just occurred to me... > >NACS is going to need a new /19 pretty soon. But we have 13 Class C's >used for things like dialups, servers, web virtual hosts, etc. So how can >we explain our need for more addresses when much of our current /19 may appear >to be unused, since it isn't SWIP'd? > We just put "internal use" on the ARIN form to request the allocation, explained what each block was used for in the justification section, and had no problem whatsoever. ------Scott.

1 0

Re: gateway failover.
by Paul Vixie 11 Nov '98

11 Nov '98

foo(a)eek.org (foo) writes: > i'm looking for pointers to any resources for doing failover on > solaris boxes. i have an environment in which i'd like a pool of > servers to use one of two solaris boxes as their gateway, the other > box being in hot standby until a failure of the primary box occurs, > at which time it would failover. f.root-servers.net (192.5.5.241) is a virtual host on two different physical hosts. these hosts speak gated and inject a /32 route into ospf, which makes the /32 look dual homed. the exit gateways pick the first one they saw (or sometimes i adjust the costs manually). if the host that was picked as the path to the vhost dies, the exit gateways flip the route over to the surviving host. alteon, foundry, and radware make "layer 4 switch" boxes that do the same thing but add local load balancing so that both hosts can be up and serving at the same time. in this case the virtual host is in the L4-switch box which does its own remapping to physical hosts. -- Paul Vixie <paul(a)vix.com>

1 0