Hello, Our AS855 can't seem to contact the DNS servers for atac.fr domains (dns.atac.fr [62.160.25.65] & dns2.atac.fr [195.68.125.36]). From our network, dig dies for both IPs: ------------------------------------------------------------------------------ ;; Received 401 bytes from 192.33.4.12#53(c.root-servers.net) in 17 ms atac.fr. 172800 IN NS dns2.atac.fr. atac.fr. 172800 IN NS dns.atac.fr. ;; Received 94 bytes from 194.57.253.1#53(E.NIC.fr) in 316 ms dig: couldn't get address for 'dns2.atac.fr': not found ------------------------------------------------------------------------------ If I use dig from public web sites it works: ------------------------------------------------------------------------------ ;; Received 401 bytes from 192.203.230.10#53(e.root-servers.net) in 94 ms atac.fr. 172800 IN NS dns2.atac.fr. atac.fr. 172800 IN NS dns.atac.fr. ;; Received 94 bytes from 194.57.253.1#53(E.NIC.fr) in 313 ms atac.fr. 300 IN A 194.145.56.21 atac.fr. 300 IN NS dns.atac.fr. atac.fr. 300 IN NS dns2.atac.fr. ;; Received 110 bytes from 195.68.125.36#53(dns2.atac.fr) in 113 ms ------------------------------------------------------------------------------ A traceroutes die as well: traceroute 195.68.125.36 .... 9 ae-2-79.edge1.NewYork1.Level3.net (4.68.16.78) [AS 3356] 25.278 ms ae-1-69.edge1.NewYork1.Level3.net (4.68.16.14) [AS 3356] 25.284 ms ae-4-99.edge1.NewYork1.Level3.net (4.68.16.206) [AS 3356] 27.476 ms 10 COLT-TELECO.edge1.NewYork1.Level3.net (4.78.132.22) [AS 3356] 25.871 ms 26.014 ms 25.589 ms 11 * * * 12 90.168-14-84.ripe.coltfrance.com (84.14.168.90) [AS 8220] 114.992 ms 114.912 ms 115.243 ms 13 * * * traceroute 62.160.25.65 ... 9 ae-2-79.edge2.NewYork1.Level3.net (4.68.16.80) [AS 3356] 25.573 ms 25.429 ms ae-3-89.edge2.NewYork1.Level3.net (4.68.16.144) [AS 3356] 25.591 ms 10 francetelecom-level3-te.NewYork1.Level3.net (4.68.111.86) [AS 3356] 39.905 ms francetelecom-level3-te.NewYork1.Level3.net (4.68.111.82) [AS 3356] 33.916 ms 33.762 ms 11 * * * It appears as though packets aren't making their way back. Is there anyone from francetelecom or AS8220 that could assist? Thanks, Serge __________________________________________________________________ The new Internet Explorer® 8 - Faster, safer, easier. Optimized for Yahoo! Get it Now for Free! at http://downloads.yahoo.com/ca/internetexplorer/
* Serge Vautour:
Hello,
Our AS855 can't seem to contact the DNS servers for atac.fr domains (dns.atac.fr [62.160.25.65] & dns2.atac.fr [195.68.125.36]). From our network, dig dies for both IPs:
Please post full trace output, e.g. the result of "dig www.atac.fr +trace +all +norecurse" if you still can reproduce the issue. (Perhaps this topic is more suitable for the dns-operations mailing list, BTW.) -- Florian Weimer <fweimer@bfk.de> BFK edv-consulting GmbH http://www.bfk.de/ Kriegsstraße 100 tel: +49-721-96201-1 D-76133 Karlsruhe fax: +49-721-96201-99
Hello, Here are the full outputs. I will also try the DNS mailing list. Thanks for any help. Serge ------------------------------------------------------------------------------------------------ dig www.atac.fr +trace +all +norecurse ; <<>> DiG 9.3.2 <<>> www.atac.fr +trace +all +norecurse ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 48292 ;; flags: qr ra; QUERY: 1, ANSWER: 13, AUTHORITY: 0, ADDITIONAL: 9 ;; QUESTION SECTION: ;. IN NS ;; ANSWER SECTION: . 42476 IN NS I.ROOT-SERVERS.NET. . 42476 IN NS E.ROOT-SERVERS.NET. . 42476 IN NS F.ROOT-SERVERS.NET. . 42476 IN NS A.ROOT-SERVERS.NET. . 42476 IN NS C.ROOT-SERVERS.NET. . 42476 IN NS M.ROOT-SERVERS.NET. . 42476 IN NS G.ROOT-SERVERS.NET. . 42476 IN NS K.ROOT-SERVERS.NET. . 42476 IN NS J.ROOT-SERVERS.NET. . 42476 IN NS D.ROOT-SERVERS.NET. . 42476 IN NS B.ROOT-SERVERS.NET. . 42476 IN NS L.ROOT-SERVERS.NET. . 42476 IN NS H.ROOT-SERVERS.NET. ;; ADDITIONAL SECTION: C.ROOT-SERVERS.NET. 591558 IN A 192.33.4.12 L.ROOT-SERVERS.NET. 591185 IN A 199.7.83.42 H.ROOT-SERVERS.NET. 590936 IN A 128.63.2.53 B.ROOT-SERVERS.NET. 591097 IN A 192.228.79.201 J.ROOT-SERVERS.NET. 128876 IN A 192.58.128.30 J.ROOT-SERVERS.NET. 128876 IN AAAA 2001:503:c27::2:30 F.ROOT-SERVERS.NET. 158903 IN A 192.5.5.241 M.ROOT-SERVERS.NET. 591132 IN A 202.12.27.33 A.ROOT-SERVERS.NET. 590997 IN A 198.41.0.4 ;; Query time: 1 msec ;; SERVER: 142.134.124.5#53(142.134.124.5) ;; WHEN: Mon Aug 17 14:31:40 2009 ;; MSG SIZE rcvd: 384 ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 61829 ;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 8, ADDITIONAL: 12 ;; QUESTION SECTION: ;www.atac.fr. IN A ;; AUTHORITY SECTION: fr. 172800 IN NS C.NIC.fr. fr. 172800 IN NS D.EXT.NIC.fr. fr. 172800 IN NS E.EXT.NIC.fr. fr. 172800 IN NS E.NIC.fr. fr. 172800 IN NS F.EXT.NIC.fr. fr. 172800 IN NS G.EXT.NIC.fr. fr. 172800 IN NS A.NIC.fr. fr. 172800 IN NS B.EXT.NIC.fr. ;; ADDITIONAL SECTION: A.NIC.fr. 172800 IN A 192.93.0.129 A.NIC.fr. 172800 IN AAAA 2001:660:3005:3::1:1 B.EXT.NIC.fr. 172800 IN A 192.228.90.21 C.NIC.fr. 172800 IN A 192.134.0.129 C.NIC.fr. 172800 IN AAAA 2001:660:3006:4::1:1 D.EXT.NIC.fr. 172800 IN A 204.152.184.85 D.EXT.NIC.fr. 172800 IN AAAA 2001:4f8:0:2::8 E.EXT.NIC.fr. 172800 IN A 193.176.144.6 E.NIC.fr. 172800 IN A 194.57.253.1 F.EXT.NIC.fr. 172800 IN A 194.146.106.46 G.EXT.NIC.fr. 172800 IN A 204.61.216.39 G.EXT.NIC.fr. 172800 IN AAAA 2001:500:14:6039:ad::1 ;; Query time: 132 msec ;; SERVER: 192.36.148.17#53(I.ROOT-SERVERS.NET) ;; WHEN: Mon Aug 17 14:31:40 2009 ;; MSG SIZE rcvd: 405 ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 42308 ;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 2, ADDITIONAL: 2 ;; QUESTION SECTION: ;www.atac.fr. IN A ;; AUTHORITY SECTION: atac.fr. 172800 IN NS dns2.atac.fr. atac.fr. 172800 IN NS dns.atac.fr. ;; ADDITIONAL SECTION: dns.atac.fr. 172800 IN A 62.160.25.65 dns2.atac.fr. 172800 IN A 195.68.125.36 ;; Query time: 108 msec ;; SERVER: 192.134.0.129#53(C.NIC.fr) ;; WHEN: Mon Aug 17 14:31:41 2009 ;; MSG SIZE rcvd: 98 dig: couldn't get address for 'dns2.atac.fr': not found ------------------------------------------------------------------------------------------------ traceroute 195.68.125.36 traceroute to 195.68.125.36 (195.68.125.36), 30 hops max, 40 byte packets 1 x.x.x.x (x.x.x.x) 0.211 ms 0.201 ms 0.199 ms 2 x.x.x.x (x.x.x.x) 1.103 ms 1.117 ms 0.872 ms 3 xe-3-0-0.bx01.asbn.va.aliant.net (207.231.227.6) 21.330 ms 21.179 ms 21.186 ms 4 xe-9-2-0.edge2.Washington4.Level3.net (4.53.114.13) 21.203 ms 21.192 ms 21.267 ms 5 vlan89.csw3.Washington1.Level3.net (4.68.17.190) 32.834 ms vlan79.csw2.Washington1.Level3.net (4.68.17.126) 34.681 ms 30.700 ms 6 ae-64-64.ebr4.Washington1.Level3.net (4.69.134.177) 35.436 ms 32.659 ms 25.709 ms 7 ae-3-3.ebr1.NewYork1.Level3.net (4.69.132.94) 26.966 ms 26.866 ms 26.734 ms 8 ae-81-81.csw3.NewYork1.Level3.net (4.69.134.74) 27.338 ms 27.391 ms ae-71-71.csw2.NewYork1.Level3.net (4.69.134.70) 34.384 ms 9 ae-1-69.edge1.NewYork1.Level3.net (4.68.16.14) 27.319 ms ae-3-89.edge1.NewYork1.Level3.net (4.68.16.142) 27.641 ms ae-2-79.edge1.NewYork1.Level3.net (4.68.16.78) 27.816 ms 10 COLT-TELECO.edge1.NewYork1.Level3.net (4.78.132.22) 88.956 ms 89.076 ms 89.154 ms 11 212.74.85.1 (212.74.85.1) 104.463 ms 104.253 ms 104.851 ms 12 90.168-14-84.ripe.coltfrance.com (84.14.168.90) 106.559 ms 107.168 ms 106.853 ms 13 * * * ---No further responses traceroute 62.160.25.65 traceroute to 62.160.25.65 (62.160.25.65), 30 hops max, 40 byte packets 1 x.x.x.x. (x.x.x.x) 0.213 ms 0.202 ms 0.198 ms 2 x.x.x.x (x.x.x.x) 1.601 ms 1.439 ms 0.743 ms 3 xe-3-0-0.bx01.asbn.va.aliant.net (207.231.227.6) 21.251 ms 21.258 ms 21.173 ms 4 xe-9-2-0.edge2.Washington4.Level3.net (4.53.114.13) 21.251 ms 21.417 ms 21.375 ms 5 vlan89.csw3.Washington1.Level3.net (4.68.17.190) 22.518 ms vlan69.csw1.Washington1.Level3.net (4.68.17.62) 24.455 ms vlan89.csw3.Washington1.Level3.net (4.68.17.190) 22.144 ms 6 ae-64-64.ebr4.Washington1.Level3.net (4.69.134.177) 30.684 ms ae-74-74.ebr4.Washington1.Level3.net (4.69.134.181) 29.177 ms 27.076 ms 7 ae-3-3.ebr1.NewYork1.Level3.net (4.69.132.94) 26.891 ms 26.730 ms 26.770 ms 8 ae-61-61.csw1.NewYork1.Level3.net (4.69.134.66) 35.472 ms ae-91-91.csw4.NewYork1.Level3.net (4.69.134.78) 38.017 ms ae-71-71.csw2.NewYork1.Level3.net (4.69.134.70) 38.655 ms 9 ae-4-99.edge2.NewYork1.Level3.net (4.68.16.208) 27.428 ms 27.855 ms ae-1-69.edge2.NewYork1.Level3.net (4.68.16.16) 27.529 ms 10 francetelecom-level3-te.NewYork1.Level3.net (4.68.111.86) 28.286 ms francetelecom-level3-te.NewYork1.Level3.net (4.68.111.82) 27.442 ms 27.764 ms 11 * * * 12 * * * ---No further responses ----- Original Message ---- From: Florian Weimer <fweimer@bfk.de> To: Serge Vautour <serge@nbnet.nb.ca> Cc: nanog@nanog.org Sent: Monday, August 17, 2009 11:43:46 AM Subject: Re: atac.fr DNS problem * Serge Vautour:
Hello,
Our AS855 can't seem to contact the DNS servers for atac.fr domains (dns.atac.fr [62.160.25.65] & dns2.atac.fr [195.68.125.36]). From our network, dig dies for both IPs:
Please post full trace output, e.g. the result of "dig www.atac.fr +trace +all +norecurse" if you still can reproduce the issue. (Perhaps this topic is more suitable for the dns-operations mailing list, BTW.) -- Florian Weimer <fweimer@bfk.de> BFK edv-consulting GmbH http://www.bfk.de/ Kriegsstraße 100 tel: +49-721-96201-1 D-76133 Karlsruhe fax: +49-721-96201-99 __________________________________________________________________ Be smarter than spam. See how smart SpamGuard is at giving junk email the boot with the All-new Yahoo! Mail. Click on Options in Mail and switch to New Mail today or register for free at http://mail.yahoo.ca
participants (2)
-
Florian Weimer -
Serge Vautour