View Single Post
  #3   (View Single Post)  
Old 14th May 2008
J65nko J65nko is offline
Administrator
 
Join Date: May 2008
Location: Budel - the Netherlands
Posts: 4,128
Default

I had something similar yesterday. On preview of a an composed answer,Firefox gave me the message that www.daemonforum.org could not be found.

A manual trace from the root name servers showed that one of the nameservers forums misbehaved
Code:
j65nko@hercules[~]dig +norecurse daemonforums.org @m.root-servers.net

; <<>> DiG 9.3.4 <<>> +norecurse daemonforums.org @m.root-servers.net
; (2 servers found)
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 1647
;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 6, ADDITIONAL: 11

;; QUESTION SECTION:
;daemonforums.org.              IN      A

;; AUTHORITY SECTION:
org.                    172800  IN      NS      D0.ORG.AFILIAS-NST.org.
org.                    172800  IN      NS      TLD1.ULTRADNS.NET.
org.                    172800  IN      NS      TLD2.ULTRADNS.NET.
org.                    172800  IN      NS      A0.ORG.AFILIAS-NST.INFO.
org.                    172800  IN      NS      B0.ORG.AFILIAS-NST.org.
org.                    172800  IN      NS      C0.ORG.AFILIAS-NST.INFO.

;; ADDITIONAL SECTION:
A0.ORG.AFILIAS-NST.INFO. 172800 IN      A       199.19.56.1
B0.ORG.AFILIAS-NST.org. 172800  IN      A       199.19.54.1
C0.ORG.AFILIAS-NST.INFO. 172800 IN      A       199.19.53.1
D0.ORG.AFILIAS-NST.org. 172800  IN      A       199.19.57.1
TLD1.ULTRADNS.NET.      172800  IN      A       204.74.112.1
TLD2.ULTRADNS.NET.      172800  IN      A       204.74.113.1
A0.ORG.AFILIAS-NST.INFO. 172800 IN      AAAA    2001:500:e::1
B0.ORG.AFILIAS-NST.org. 172800  IN      AAAA    2001:500:c::1
C0.ORG.AFILIAS-NST.INFO. 172800 IN      AAAA    2001:500:b::1
D0.ORG.AFILIAS-NST.org. 172800  IN      AAAA    2001:500:f::1
TLD1.ULTRADNS.NET.      172800  IN      AAAA    2001:502:d399::1

;; Query time: 34 msec
;; SERVER: 202.12.27.33#53(202.12.27.33)
;; WHEN: Wed May 14 00:40:42 2008
;; MSG SIZE  rcvd: 424

j65nko@hercules[~]dig +norecurse daemonforums.org @199.19.56.1        

; <<>> DiG 9.3.4 <<>> +norecurse daemonforums.org @199.19.56.1
; (1 server found)
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 57424
;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 2, ADDITIONAL: 0

;; QUESTION SECTION:
;daemonforums.org.              IN      A

;; AUTHORITY SECTION:
daemonforums.org.       86400   IN      NS      ns7.ixwebhosting.com.
daemonforums.org.       86400   IN      NS      ns8.ixwebhosting.com.

;; Query time: 174 msec
;; SERVER: 199.19.56.1#53(199.19.56.1)
;; WHEN: Wed May 14 00:41:11 2008
;; MSG SIZE  rcvd: 86
j65nko@hercules[~]dig +norecurse daemonforums.org @ns7.ixwebhosting.com.

; <<>> DiG 9.3.4 <<>> +norecurse daemonforums.org @ns7.ixwebhosting.com.
; (1 server found)
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 28311
;; flags: qr aa; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:
;daemonforums.org.              IN      A

;; ANSWER SECTION:
daemonforums.org.       86400   IN      A       76.162.25.203

;; AUTHORITY SECTION:
daemonforums.org.       86400   IN      NS      ns7.ixwebhosting.com.
daemonforums.org.       86400   IN      NS      ns8.ixwebhosting.com.

;; ADDITIONAL SECTION:
ns7.ixwebhosting.com.   116233  IN      A       71.18.255.99
ns8.ixwebhosting.com.   116233  IN      A       71.18.216.3

;; Query time: 138 msec
;; SERVER: 71.18.255.99#53(71.18.255.99)
;; WHEN: Wed May 14 00:41:28 2008
;; MSG SIZE  rcvd: 134

j65nko@hercules[~]dig +norecurse daemonforums.org @ns8.ixwebhosting.com. 

; <<>> DiG 9.3.4 <<>> +norecurse daemonforums.org @ns8.ixwebhosting.com.
; (1 server found)
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 57401
;; flags: qr aa; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;daemonforums.org.              IN      A

;; AUTHORITY SECTION:
daemonforums.org.       86400   IN      SOA     ns7.ixwebhosting.com. tticket.ixwebhostin
0 10800 3600 604800 86400

;; Query time: 135 msec
;; SERVER: 71.18.216.3#53(71.18.216.3)
;; WHEN: Wed May 14 00:41:53 2008
;; MSG SIZE  rcvd: 98
__________________
You don't need to be a genius to debug a pf.conf firewall ruleset, you just need the guts to run tcpdump
Reply With Quote