Re: g.root-servers.net returns NXDOMAIN for com.

From: Greg A. Woods (no email)
Date: Fri Aug 04 2000 - 12:49:05 EDT


[ On Friday, August 4, 2000 at 09:23:48 (-0500), Jeffrey C. Ollie wrote: ]
> Subject: Re: g.root-servers.net returns NXDOMAIN for com.
>
> Because g.root-servers.net should still return a list of authoritative
> name servers for .com *even if* g.root-servers.net is no longer
> authoritative for .com.
>
> When g.root-servers.net returns an *AUTHORITATIVE NXDOMAIN* for .com
> things start breaking.

I was going to write:

        Anyone asking g.root-servers.net for anything in .com is who's
        broken. Any delegation pointing .com to g.root-servers.net
        should have long long ago timed out from any properly running
        nameserver out there.

but then I see this little surprise from a "host -C com.":

        com NS G.ROOT-SERVERS.NET
        com SOA record currently not present at G.ROOT-SERVERS.NET
        com has lame delegation to G.ROOT-SERVERS.NET

When I look at the delegations directly in the two copies of the root
zone now in active use (2000080400 and 2000080301) I do not find where
my local copy of the above NS record originated! When I do a dumpdb I
find that it has the following origination:

com 81712 IN NS G.ROOT-SERVERS.NET. ;Cr=addtnl [192.203.230.10]

Oddly it's not there now:

        # host -r -t ns com. 192.203.230.10
        com NS I.GTLD-SERVERS.NET
        com NS B.GTLD-SERVERS.NET
        com NS A.ROOT-SERVERS.NET
        com NS E.GTLD-SERVERS.NET
        com NS F.GTLD-SERVERS.NET
        com NS F.ROOT-SERVERS.NET
        com NS J.GTLD-SERVERS.NET
        com NS K.GTLD-SERVERS.NET
        com NS A.GTLD-SERVERS.NET
        com NS M.GTLD-SERVERS.NET
        com NS G.GTLD-SERVERS.NET
        com NS C.GTLD-SERVERS.NET

G.root-servers.net is also found in my cache as an NS for .ORG and .NET,
neither of which should be there according to the current root zone at
a.root-servers.net, nor even the older 2000080301 '.' zone still at some
other root servers!

org 116876 IN NS G.ROOT-SERVERS.NET. ;Cr=addtnl [192.33.4.12]
NET 115866 IN NS G.ROOT-SERVERS.NET. ;Cr=addtnl [198.41.0.10]

So I can see clearly where the bogus NS records came from, and I can see
approximately when too (the above dump records were generated at 12:29 EDT).

Does this mean someone foolishly made some radically BAD changes within
the 144-hour window where no changes should have been made!?!?!?!?!?

Can 'g.root-servers.net' QUICKLY be brought back online for com/org/net
until the 144-hour window necessary for a root zone change properly
expires?

-- 
							Greg A. Woods
+1 416 218-0098      VE3TCP      <>      <robohack!woods>
Planix, Inc. <>; Secrets of the Weird <>







Hosted Email Solutions

Invaluement Anti-Spam DNSBLs



Powered By FreeBSD   Powered By FreeBSD