Re: Pb DNS

[debian-mail <theedge456.nospam@free.fr>]

Stephane Bortzmeyer wrote:
> On Wed, Oct 11, 2006 at 09:50:03PM +0200,
>  debian-mail <theedge456.nospam@free.fr> wrote 
>  a message of 101 lines which said:
>
>   
> > > dig @127.0.0.1 NS .
> > >  
> > >       
> > $ dig @127.0.0.1 NS
> >     
>
> Non ! Je cherchais les serveurs de la racine (".") et vous avez oublié
> le point.
>
>   
> > $ dig @127.0.0.1 A www.wikipedia.fr
> >
> > ; <<>> DiG 9.3.2-P1 <<>> @127.0.0.1 A www.wikipedia.fr
> > ; (1 server found)
> > ;; global options:  printcmd
> > ;; Got answer:
> > ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 28688
> >     
>
> Comme votre BIND répond SERVFAIL (Server failure) à toutes les
> requêtes, j'en déduis qu'il ne peut pas joindre les autres
> serveurs. En attendant le test ci-dessus (pour voir s'il connait les
> serveurs de la racine), peut-être y a t-il un problème de
> connectivité. Que donnent :
>
> dig @216.239.32.10 A www.google.com.
> dig @193.189.143.10 A www.wikipedia.fr.
>
> (Utilisation de l'adresse IP d'un serveur faisant autorité pour la
> zone.)
>
>
>   
Apparamment certaines requêtes fonctionnent...
******************************************************
#dig @127.0.0.1 NS .

; <<>> DiG 9.3.2-P1 <<>> @127.0.0.1 NS .
; (1 server found)
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 32853
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;.                              IN      NS

;; Query time: 24 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Thu Oct 12 21:34:55 2006
;; MSG SIZE  rcvd: 17
*******************************************************************
# dig @216.239.32.10 A www.google.com.

; <<>> DiG 9.3.2-P1 <<>> @216.239.32.10 A www.google.com.
; (1 server found)
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 17812
;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 6, ADDITIONAL: 6

;; QUESTION SECTION:
;www.google.com.                        IN      A

;; ANSWER SECTION:
www.google.com.         604800  IN      CNAME   www.l.google.com.

;; AUTHORITY SECTION:
l.google.com.           86400   IN      NS      a.l.google.com.
l.google.com.           86400   IN      NS      b.l.google.com.
l.google.com.           86400   IN      NS      c.l.google.com.
l.google.com.           86400   IN      NS      d.l.google.com.
l.google.com.           86400   IN      NS      e.l.google.com.
l.google.com.           86400   IN      NS      g.l.google.com.

;; ADDITIONAL SECTION:
a.l.google.com.         86400   IN      A       216.239.53.9
b.l.google.com.         86400   IN      A       64.233.179.9
c.l.google.com.         86400   IN      A       64.233.161.9
d.l.google.com.         86400   IN      A       64.233.183.9
e.l.google.com.         86400   IN      A       66.102.11.9
g.l.google.com.         86400   IN      A       64.233.167.9

;; Query time: 196 msec
;; SERVER: 216.239.32.10#53(216.239.32.10)
;; WHEN: Thu Oct 12 21:35:34 2006
;; MSG SIZE  rcvd: 244
*******************************************************************
# dig @193.189.143.10 A www.wikipedia.fr.

; <<>> DiG 9.3.2-P1 <<>> @193.189.143.10 A www.wikipedia.fr.
; (1 server found)
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 59257
;; flags: qr aa rd; QUERY: 1, ANSWER: 2, AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:
;www.wikipedia.fr.              IN      A

;; ANSWER SECTION:
www.wikipedia.fr.       86400   IN      CNAME   wikipedia.fr.
wikipedia.fr.           86400   IN      A       193.189.143.7

;; AUTHORITY SECTION:
wikipedia.fr.           86400   IN      NS      ns2.typhon.net.
wikipedia.fr.           86400   IN      NS      ns1.typhon.net.

;; ADDITIONAL SECTION:
ns1.typhon.net.         800     IN      A       193.189.143.10
ns2.typhon.net.         800     IN      A       213.251.166.204

;; Query time: 43 msec
;; SERVER: 193.189.143.10#53(193.189.143.10)
;; WHEN: Thu Oct 12 21:35:34 2006
;; MSG SIZE  rcvd: 142

Est-ce free peut interdire l'implémentation des fowarders ?