Tickets - Reverse delegation partially working :: SixXS

Ticket ID: SIXXS #806375
Ticket Status: Resolved

PoP:

Reverse delegation partially working

Carmen Sandiego on Sunday, 14 September 2008 12:12:27

I have read and followed the "Reporting Problems" section on the Contact page and am providing the following details for this report based on the list of items stated there: Hi, I'm Cedric Schieli (CS3203-RIPE) Tunnel: T16703 (2001:6f8:202:209::2) Subnet: R7248 (2001:6f8:141e::/48) PoP: bebru01 - Easynet I've setup two nameservers for reverse delegation on my subnet and everything is working except when the request path goes through dns0.easynet.be. Here are some dig traces (both working and not working) :

; <<>> DiG 9.4.2-P1 <<>> -x 2001:6f8:141e:4::1 +trace ;; global options: printcmd .435917INNSh.root-servers.net. .435917INNSg.root-servers.net. .435917INNSi.root-servers.net. .435917INNSd.root-servers.net. .435917INNSb.root-servers.net. .435917INNSe.root-servers.net. .435917INNSa.root-servers.net. .435917INNSm.root-servers.net. .435917INNSk.root-servers.net. .435917INNSl.root-servers.net. .435917INNSc.root-servers.net. .435917INNSf.root-servers.net. .435917INNSj.root-servers.net. ;; Received 449 bytes from 212.27.40.240#53(212.27.40.240) in 47 ms ip6.arpa.172800INNSNS.ICANN.ORG. ip6.arpa.172800INNSNS.LACNIC.NET. ip6.arpa.172800INNSSEC1.APNIC.NET. ip6.arpa.172800INNSNS-SEC.RIPE.NET. ip6.arpa.172800INNSTINNIE.ARIN.NET. ;; Received 220 bytes from 192.228.79.201#53(b.root-servers.net) in 199 ms 6.0.1.0.0.2.ip6.arpa.84600INNSns3.nic.fr. 6.0.1.0.0.2.ip6.arpa.84600INNSns-pri.ripe.net. 6.0.1.0.0.2.ip6.arpa.84600INNStinnie.arin.net. 6.0.1.0.0.2.ip6.arpa.84600INNSsec1.apnic.net. 6.0.1.0.0.2.ip6.arpa.84600INNSsunic.sunet.se. 6.0.1.0.0.2.ip6.arpa.84600INNSsec3.apnic.net. ;; Received 373 bytes from 2001:610:240:0:53::4#53(NS-SEC.RIPE.NET) in 52 ms 8.f.6.0.1.0.0.2.ip6.arpa. 172800 INNSns.ripe.net. 8.f.6.0.1.0.0.2.ip6.arpa. 172800 INNSns.easynet.de. 8.f.6.0.1.0.0.2.ip6.arpa. 172800 INNSns.easybone.net. 8.f.6.0.1.0.0.2.ip6.arpa. 172800 INNSns2.easynet.net. 8.f.6.0.1.0.0.2.ip6.arpa. 172800 INNSdns0.easynet.be. ;; Received 267 bytes from 2001:6b0:7::2#53(sunic.sunet.se) in 76 ms 1.8.f.6.0.1.0.0.2.ip6.arpa. 43200 INNSns1.sixxs.net. 1.8.f.6.0.1.0.0.2.ip6.arpa. 43200 INNSns2.sixxs.net. 1.8.f.6.0.1.0.0.2.ip6.arpa. 43200 INNSns3.sixxs.net. ;; Received 153 bytes from 2001:610:240:0:53::193#53(ns.ripe.net) in 52 ms e.1.4.1.8.f.6.0.1.0.0.2.ip6.arpa. 604800 IN NSns.newel.net. e.1.4.1.8.f.6.0.1.0.0.2.ip6.arpa. 604800 IN NSkenzo.newel.net. ;; Received 136 bytes from 2001:7b8:3:1e:290:27ff:fe0c:5c5e#53(ns2.sixxs.net) in 59 ms 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.4.0.0.0.e.1.4.1.8.f.6.0.1.0.0.2.ip6.arpa. 3600 IN PTR gw-private.ipv6.newel.net. e.1.4.1.8.f.6.0.1.0.0.2.ip6.arpa. 3600 IN NSkenzo.newel.net. e.1.4.1.8.f.6.0.1.0.0.2.ip6.arpa. 3600 IN NSns.newel.net. ;; Received 198 bytes from 80.77.225.7#53(ns.newel.net) in 52 ms

; <<>> DiG 9.4.2-P1 <<>> -x 2001:6f8:141e:4::1 +trace ;; global options: printcmd .436305INNSd.root-servers.net. .436305INNSc.root-servers.net. .436305INNSi.root-servers.net. .436305INNSb.root-servers.net. .436305INNSj.root-servers.net. .436305INNSe.root-servers.net. .436305INNSg.root-servers.net. .436305INNSh.root-servers.net. .436305INNSk.root-servers.net. .436305INNSf.root-servers.net. .436305INNSl.root-servers.net. .436305INNSa.root-servers.net. .436305INNSm.root-servers.net. ;; Received 449 bytes from 212.27.40.240#53(212.27.40.240) in 47 ms ip6.arpa.172800INNSNS.ICANN.ORG. ip6.arpa.172800INNSNS.LACNIC.NET. ip6.arpa.172800INNSNS-SEC.RIPE.NET. ip6.arpa.172800INNSTINNIE.ARIN.NET. ip6.arpa.172800INNSSEC1.APNIC.NET. ;; Received 220 bytes from 192.112.36.4#53(g.root-servers.net) in 153 ms 6.0.1.0.0.2.ip6.arpa.84600INNSns3.nic.fr. 6.0.1.0.0.2.ip6.arpa.84600INNSsec1.apnic.net. 6.0.1.0.0.2.ip6.arpa.84600INNSsec3.apnic.net. 6.0.1.0.0.2.ip6.arpa.84600INNStinnie.arin.net. 6.0.1.0.0.2.ip6.arpa.84600INNSns-pri.ripe.net. 6.0.1.0.0.2.ip6.arpa.84600INNSsunic.sunet.se. ;; Received 373 bytes from 2001:610:240:0:53::4#53(NS-SEC.RIPE.NET) in 53 ms 8.f.6.0.1.0.0.2.ip6.arpa. 172800 INNSns.ripe.net. 8.f.6.0.1.0.0.2.ip6.arpa. 172800 INNSns.easynet.de. 8.f.6.0.1.0.0.2.ip6.arpa. 172800 INNSns.easybone.net. 8.f.6.0.1.0.0.2.ip6.arpa. 172800 INNSns2.easynet.net. 8.f.6.0.1.0.0.2.ip6.arpa. 172800 INNSdns0.easynet.be. ;; Received 223 bytes from 2001:610:240:0:53::3#53(ns-pri.ripe.net) in 52 ms 4.1.8.f.6.0.1.0.0.2.ip6.arpa. 86400 INSOAdns0.easynet.be. hostmaster.be.easynet.net. 2008041012 28000 7200 864000 86400 ;; Received 166 bytes from 212.100.160.53#53(dns0.easynet.be) in 51 ms

And now some more specific queries to track down the problem :

; <<>> DiG 9.4.2-P1 <<>> -x 2001:6f8:1000:: @dns0.easynet.be ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 41872 ;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 3, ADDITIONAL: 0 ;; WARNING: recursion requested but not available ;; QUESTION SECTION: ;0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.1.8.f.6.0.1.0.0.2.ip6.arpa. IN PTR ;; AUTHORITY SECTION: 1.8.f.6.0.1.0.0.2.ip6.arpa. 43200 INNSns1.sixxs.net. 1.8.f.6.0.1.0.0.2.ip6.arpa. 43200 INNSns2.sixxs.net. 1.8.f.6.0.1.0.0.2.ip6.arpa. 43200 INNSns3.sixxs.net.

; <<>> DiG 9.4.2-P1 <<>> -x 2001:6f8:1400:: @dns0.easynet.be ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 36306 ;; flags: qr aa rd; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0 ;; WARNING: recursion requested but not available ;; QUESTION SECTION: ;0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.4.1.8.f.6.0.1.0.0.2.ip6.arpa. IN PTR ;; AUTHORITY SECTION: 4.1.8.f.6.0.1.0.0.2.ip6.arpa. 86400 INSOAdns0.easynet.be. hostmaster.be.easynet.net. 2008041012 28000 7200 864000 86400

It seems dns0.easynet.be wants to be authoritative for 2001:6f8:1400::/40 while delegating 2001:6f8:1000::/36 to SixXS Thank you in advance for any help.

State change: resolved Locked