Hi Mike

Our DNS-Specialist declines any problems.

Cheers, Günti

-----Original Message----- From: swinog-bounces@lists.swinog.ch [mailto:swinog-bounces@lists.swinog.ch] On Behalf Of Mike Kellenberger Sent: Friday, January 25, 2008 11:49 AM To: swinog@swinog.ch Subject: [swinog] dns1.bluewin.ch not replicating

Hi all

Is there a problem with dns1.bluewin.ch? Requests for domains which were recently registered with switch do not resolve...

The serial number on the response supports my theory.

; <<>> DiG 8.3 <<>> bilder-floriannussbaumer.ch ANY @dns1.bluewin.ch ; (1 server found) ;; res options: init recurs defnam dnsrch ;; got answer: ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 4 ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0 ;; QUERY SECTION: ;; bilder-floriannussbaumer.ch, type = ANY, class = IN

;; AUTHORITY SECTION: ch. 39m51s IN SOA domreg.nic.ch. helpdesk.nic.ch. ( 2008012300 ; serial 1H ; refresh 30M ; retry 4w2d ; expiry 1H ) ; minimum

; <<>> DiG 8.3 <<>> bilder-floriannussbaumer.ch ANY @dns2.bluewin.ch ; (1 server found) ;; res options: init recurs defnam dnsrch ;; got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 4 ;; flags: qr rd ra; QUERY: 1, ANSWER: 5, AUTHORITY: 0, ADDITIONAL: 0 ;; QUERY SECTION: ;; bilder-floriannussbaumer.ch, type = ANY, class = IN

;; ANSWER SECTION: bilder-floriannussbaumer.ch. 23h39m IN MX 10 hermes.escapenet.ch. bilder-floriannussbaumer.ch. 23h39m IN SOA dns1.escapenet.ch. webmaster.escapenet.ch. ( 200801221 ; serial 3H ; refresh 1H ; retry 1W ; expiry 1D ) ; minimum

bilder-floriannussbaumer.ch. 23h39m IN A 193.9.122.15 bilder-floriannussbaumer.ch. 23h39m IN NS dns2.escapenet.ch. bilder-floriannussbaumer.ch. 23h39m IN NS dns1.escapenet.ch.

Regards

ok, but why is there no answer?

Does 194.42.48.120 work correctly?

Regards, Adrian

Does 194.42.48.120 work correctly?

Obviously not, it has a different SOA serial for the .ch TLD than the other nameservers:

tulku.nic.ar : 2008012501 rip.psg.com : 2008012501 domreg.nic.ch : 2008012501 ch1.dnsnode.net : 2008012501 dns.princeton.edu: 2008012501 sec3.apnic.net : 2008012501 merapi.switch.ch : 2008012501 ccTLD.tix.ch : 2008012300 ^^^^^^^^^^

Looks like ccTLD.tix.ch is out of sync..

cheers, - Fabian

On Fri, Jan 25, 2008 at 02:06:49PM +0100, Erich Hohermuth wrote:

Hi

...

ok, but why is there no answer?

Cause cctld.tix.ch which is one of the .ch nameservers doesn't give the right answer.

;bilder-floriannussbaumer.ch. IN NS

;; AUTHORITY SECTION: ch. 3600 IN SOA domreg.nic.ch. helpdesk.nic.ch. 2008012300 3600 1800 2592000 3600

I think you have to ask Switch how long it takes for the next reload cycle.

This is fixed now. For some reasons nsd no longer updated the zone internaly after 40 days of uptime.

On Fri, Jan 25, 2008 at 02:48:08PM +0100, Claudio Jeker wrote:

On Fri, Jan 25, 2008 at 02:06:49PM +0100, Erich Hohermuth wrote:

...

Hi

...

ok, but why is there no answer?

Cause cctld.tix.ch which is one of the .ch nameservers doesn't give the right answer.

;bilder-floriannussbaumer.ch. IN NS

;; AUTHORITY SECTION: ch. 3600 IN SOA domreg.nic.ch. helpdesk.nic.ch. 2008012300 3600 1800 2592000 3600

I think you have to ask Switch how long it takes for the next reload cycle.

This is fixed now. For some reasons nsd no longer updated the zone internaly after 40 days of uptime.

For the curious ones:

It seems that nsd grows bigger and bigger over time if the zone is updated via IXFR instead of being reloaded once in a while. So after 40 days it hit the process memory limit and the zone transfers failed.

I modified the cronjob to patch the local domain db from using nsd-patch to nsdc patch -- the latter calls nsd-patch and reloads the db afterwards.

Here some syslog porn: Jan 25 13:05:22 ccTLD nsd[70689]: signal received, reloading... Jan 25 13:05:22 ccTLD nsd[86414]: memory recyclebin holds 73492 bytes Jan 25 13:05:22 ccTLD nsd[86414]: malloc failed: Cannot allocate memory Jan 25 13:05:22 ccTLD nsd[70689]: handle_reload_cmd: reload closed cmd channel Jan 25 13:05:22 ccTLD nsd[70689]: Reload process 86414 failed with status 256, continuing with old database Jan 25 13:05:22 ccTLD nsd[13262]: xfrd: zone ch.: soa serial 2008012501 update failed restarting transfer (notified zone)