bind, FORMERR on quad A records

ezekieldas · 11-03-2010, 08:24 PM

Greetings --I'm not able to get much info on this --nor do I fully understand what's going on. The unfortunate symptom of this issue is that an application of ours, acting as a web client sometimes times out entirely when trying to reach this host. I can see that it's load balanced, or has multiple A records --however I don't understand why I'm getting all these FORMERRs and why the queries are soley quad A (ipv6). Could somebody please help me with a play by play here? I'd appreciate the insight.

ezekieldas.com and ezekieldas.pri are bogus domains to mask the client company --these come from the "search" line in resolv.conf.

Code:

03-Nov-2010 15:56:49.935 queries: info: client 10.3.4.31#36567: query: www.alaskausa.org IN AAAA +
03-Nov-2010 15:56:50.524 lame-servers: info: FORMERR resolving 'www.alaskausa.org/AAAA/IN': 208.69.199.114#53
03-Nov-2010 15:56:50.633 lame-servers: info: FORMERR resolving 'www.alaskausa.org/AAAA/IN': 208.69.197.114#53
03-Nov-2010 15:56:50.854 queries: info: client 10.3.4.31#36568: query: www.alaskausa.org IN AAAA +
03-Nov-2010 15:56:51.135 lame-servers: info: FORMERR resolving 'www.alaskausa.org/AAAA/IN': 208.69.197.114#53
03-Nov-2010 15:56:51.189 lame-servers: info: FORMERR resolving 'www.alaskausa.org/AAAA/IN': 208.69.199.114#53
03-Nov-2010 15:56:51.409 queries: info: client 10.3.4.31#36568: query: www.alaskausa.org.ezekieldas.com IN AAAA +
03-Nov-2010 15:56:51.409 queries: info: client 10.3.4.31#36568: query: www.alaskausa.org.ezekieldas.pri IN AAAA +
03-Nov-2010 15:56:51.414 queries: info: client 10.3.4.31#36568: query: www.alaskausa.org IN A +
03-Nov-2010 15:56:52.927 lame-servers: info: network unreachable resolving 'gss1.alaskausa.org/AAAA/IN': 2001:500:48::1#53
03-Nov-2010 15:56:52.927 lame-servers: info: network unreachable resolving 'gss1.alaskausa.org/AAAA/IN': 2001:500:40::1#53
03-Nov-2010 15:56:52.928 lame-servers: info: network unreachable resolving 'gss1.alaskausa.org/AAAA/IN': 2001:500:f::1#53
03-Nov-2010 15:56:52.990 lame-servers: info: FORMERR resolving 'gss2.alaskausa.org/AAAA/IN': 208.69.199.114#53
03-Nov-2010 15:56:53.044 lame-servers: info: FORMERR resolving 'gss2.alaskausa.org/AAAA/IN': 208.69.197.114#53
03-Nov-2010 15:56:53.153 lame-servers: info: FORMERR resolving 'gss1.alaskausa.org/AAAA/IN': 208.69.199.114#53
03-Nov-2010 15:56:53.207 lame-servers: info: FORMERR resolving 'gss1.alaskausa.org/AAAA/IN': 208.69.197.114#53

ezekieldas · 11-04-2010, 12:29 PM

I'm bumping this. Help w/any part of this situation would be helpful. I understand these query logs to be *my* name server is confused about the formatting of the records from *their* name server. Anyone with dig skills help walk me through what's going on with www.alaskausa.org ? I have a decent enough understanding of bind to maybe see the relationships clearly. Thank you.

bathory · 11-04-2010, 06:35 PM

Hi,

Take a look at this.
If you are the admin of alaskausa.org you have to change the authoritative dns servers to ns1 and ns2 instead of gss1 and gss2. Or you should contact the domain registrar.
I guess the FORMERR is because the answer for AAAA from 208.69.197.114 has a wrong SOA record (it has the . as the zone name):

Code:

; <<>> DiG 9.7.2-P2 <<>> AAAA www.alaskausa.org @208.69.199.114
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 11889
;; flags: qr aa rd; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; WARNING: recursion requested but not available

;; QUESTION SECTION:
;www.alaskausa.org.             IN      AAAA

;; AUTHORITY SECTION:
.                       3455    IN      SOA     ns1.alaskausa.org. dnsadmin.alaskausa.org. 157 7200 300 86400 3600

while 208.69.197.7 has the correct zone name:

Code:

; <<>> DiG 9.7.2-P2 <<>> AAAA www.alaskausa.org @208.69.197.7
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 9669
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;www.alaskausa.org.             IN      AAAA

;; AUTHORITY SECTION:
alaskausa.org.          3600    IN      SOA     ns1.alaskausa.org. dnsadmin.alaskausa.org. 157 7200 300 86400 3600