Sonic DNS servers returning NXDOMAIN for *.nyud.net

[jmmorlan]

Both 208.201.224.11 and 208.201.224.33 give an NXDOMAIN reply for *.nyud.net queries:

Code: Select all

C:\>dig www.example.com.nyud.net

; <<>> DiG 9.2.2 <<>> www.example.com.nyud.net
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 58823
;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;www.example.com.nyud.net.      IN      A

;; ANSWER SECTION:
nyud.net.               73112   IN      DNAME   http.l2.l1.l0.nyucd.net.
www.example.com.nyud.net. 73112 IN      CNAME   www.example.com.http.l2.l1.l0.nyucd.net.
www.example.com.http.l2.l1.l0.nyucd.net. 86400 IN CNAME http.l2.l1.l0.nyucd.net.


;; AUTHORITY SECTION:
l0.nyucd.net.           3333    IN      SOA     216.165.109.82.ip4.nyucd.net. ho
stmaster.nyucd.net. 0 1800 3600 7200 3600

;; Query time: 433 msec
;; SERVER: 208.201.224.33#53(208.201.224.33)
;; WHEN: Sun Jul 21 20:12:35 2013
;; MSG SIZE  rcvd: 189

Note there are no A records for the canonical name http.l2.l1.l0.nyucd.net. Other DNS servers correctly provide them:

Code: Select all

C:\>dig @8.8.4.4 www.example.com.nyud.net

; <<>> DiG 9.2.2 <<>> @8.8.4.4 www.example.com.nyud.net
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 33797
;; flags: qr rd ra; QUERY: 1, ANSWER: 6, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;www.example.com.nyud.net.      IN      A

;; ANSWER SECTION:
nyud.net.               21600   IN      DNAME   http.l2.l1.l0.nyucd.net.
www.example.com.nyud.net. 21600 IN      CNAME   www.example.com.http.l2.l1.l0.nyucd.net.
www.example.com.http.l2.l1.l0.nyucd.net. 21600 IN CNAME http.l2.l1.l0.nyucd.net.

http.l2.l1.l0.nyucd.net. 30     IN      A       129.82.12.188
http.l2.l1.l0.nyucd.net. 30     IN      A       128.6.192.158
http.l2.l1.l0.nyucd.net. 30     IN      A       129.130.252.141

;; Query time: 164 msec
;; SERVER: 8.8.4.4#53(8.8.4.4)
;; WHEN: Sun Jul 21 20:12:39 2013
;; MSG SIZE  rcvd: 191

[thulsa_doom]

We had something bad cached on three of our name servers. It looks like they were the ones with the oldest cached entries for that name, so something may have changed over there. The SOA record for nyud.net has a serial number of zero, which is inadvisable and may result in future problems if the folks maintaining this record aren't in the habit of incrementing it.