problems with recursive queries

[Nathan Zaugg]

public DNS servers, including UDP 1024 to 65534. Yes, that is a WIDE range.
But that's how MS DNS works. There's a reg entry to change that, but haven't
had much luck with it as of yet.

I tried opening up that port range for a while and it
didn't seem to have any effect. I also ran the DIG tool
with the parameters specified and here are the results,
which are incorrect.

C:\>dig @166.70.205.185 www.google.com a

; <<>> DiG 8.3 <<>> @166.70.205.185 www.google.com a
; (1 server found)
;; res options: init recurs defnam dnsrch
;; got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 4
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0,
ADDITIONAL: 0
;; QUERY SECTION:
;; www.google.com, type = A, class = IN

;; ANSWER SECTION:
www.google.com. 1H IN CNAME
www.google.akadns.net.
www.google.akadns.net. 0S IN A 166.70.205.185

;; Total query time: 0 msec
;; FROM: neo to SERVER: 166.70.205.185 166.70.205.185
;; WHEN: Sun Sep 21 20:50:46 2003
;; MSG SIZE sent: 32 rcvd: 83

 

[Ace Fekay [MVP]]

Strange that you didn't get a answer for the IP for www.google.com, such as
this:
==================================================
C:\bind>dig @166.70.205.185 www.google.com a +vc

; <<>> DiG 9.2.2rc1 <<>> @166.70.205.185 www.google.com a +vc
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 41
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;www.google.com. IN A

;; ANSWER SECTION:
www.google.com. 3097 IN CNAME www.google.akadns.net.
www.google.akadns.net. 293 IN A 216.239.53.99

;; Query time: 125 msec
;; SERVER: 166.70.205.185#53(166.70.205.185)
;; WHEN: Sun Sep 21 22:53:14 2003
;; MSG SIZE rcvd: 83
==================================================

TCP and UDP 53 and the UDP 1024 and above range are all wide open as you
mentioned, so you should have received an answer.

What are you using for NAT?

--
Regards,
Ace

Please direct all replies to the newsgroup so all can benefit.

Ace Fekay, MCSE 2000, MCSE+I, MCSA, MCT, MVP
Microsoft Windows MVP - Active Directory

 

[Jonathan de Boyne Pollard]

NZ> C:\>dig @166.70.205.185 www.google.com a

On 2003-09-15 I gave you a whole list of other tests to
run, and where then to proceed based upon their results.

 

[Jonathan de Boyne Pollard]

AF> Strange that you didn't get a answer for the IP for
AF> www.google.com, such as this:

He did. He just erroneously word-wrapped it when posting.

 

[Jonathan de Boyne Pollard]

JdeBP> He did. He just erroneously word-wrapped it when posting.

AF> But my results showed the A record, where his didn't,
AF> unless I missed something since I didn't see any wrapping.
AF> Mine:
AF> ;; ANSWER SECTION:
AF> www.google.com. 3097 IN CNAME www.google.akadns.net.
AF> www.google.akadns.net. 293 IN A 216.239.53.99
AF>
AF> His:
AF> ;; ANSWER SECTION:
AF> www.google.com. 1H IN CNAME
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
AF> www.google.akadns.net.
^^^^^^^^^^^^^^^^^^^^^^^^^^
AF> www.google.akadns.net. 0S IN A 166.70.205.185

There's the word-wrapping, right there.

 

[Ace Fekay [MVP]]

"Jonathan de Boyne Pollard"

AF> Strange that you didn't get a answer for the IP for
AF> www.google.com, such as this:

He did. He just erroneously word-wrapped it when posting.

But my results showed the A record, where his didn't, unless I missed
something since I didn't see any wrapping.
Mine:
;; ANSWER SECTION:
www.google.com. 3097 IN CNAME www.google.akadns.net.
www.google.akadns.net. 293 IN A 216.239.53.99

His:
;; ANSWER SECTION:
www.google.com. 1H IN CNAME
www.google.akadns.net.
www.google.akadns.net. 0S IN A 166.70.205.185

Ace

 

[Jonathan de Boyne Pollard]

N> Could you re-post that information?

Google Groups is your friend.

<URL:http://groups.google.com/[email protected]>

N> Also, can you reccomend a good windows based news reader [...?]

I leave that to others. I've mainly used Netscape Communicator
on Windows.