[GTER] Teste da zona trf3.gov.br no DNSStuff.

[Frederico A C Neves]

Marlon,

Não existe problema algum na delegação desta zona [1]. Na dúvida
confie no dig/tcpdump e em mais nada.

O motivo deste diagnóstico é uma boa pergunta mas deve ser feita para
o pessoal do DNSStuff.

Fred

On Wed, Feb 11, 2004 at 02:16:54PM -0300, MARLON BORBA wrote:
> Prezados, 
> 
>
> Estava eu fazendo meus testes de configuração de DNS no "site"
> www.dnsstuff.com quando fui surpreendido por este resultado:-
>
> "Your NS records APPEAR to be:
> 
> dns-1.trf3.gov.br. [200.178.82.130 (NO GLUE)] [BR]
> dns-2.trf3.gov.br. [200.178.82.131 (NO GLUE)] [BR]
>
>  NOTE: These records may be inaccurate, since the parent servers
> (NS.DNS.br.) do not know the NS records for trf3.gov.br (or give a
> referral to other DNS servers)! This may cause other tests not to
> work properly, such as the 'Nameservers on separate class C' test"
>
> O que me intrigou é exatamente essa afirmação de que "the parent
> servers do not know the NS records for trf3.gov.br, or give a
> referral to other DNS servers". Por que isso acontece? O domínio não
> está publicado há bastante tempo?
>
> []s, 
> 
> Marlon.

On Wed, Feb 11, 2004 at 02:18:24PM -0300, MARLON BORBA wrote:
> E tem mais!
> 
> "WARNING. The parent servers (NS.DNS.br.) are not providing glue for
> all your nameservers. This means that they are supplying the NS records
> (host.example.com), but not supplying the A records (192.0.2.53), which
> can cause slightly slower connections, and may cause incompatibilities
> with some non-RFC-compliant programs. This is perfectly acceptable
> behavior per the RFCs. This will usually occur if your DNS servers are
> not in the same TLD as your domain (for example, a DNS server of
> "ns1.example.org" for the domain "example.com"). In this case, you can
> speed up the connections slightly by having NS records that are in the
> same TLD as your domain."
> 
> O que acham? Tenho, daqui, de fazer alguma coisa?
> 
> []s,
> 
> Marlon.

[1]

> dig @200.160.0.5 trf3.gov.br soa +norec

; <<>> DiG 8.3 <<>> @200.160.0.5 trf3.gov.br soa +norec 
; (1 server found)
;; res options: init defnam dnsrch
;; got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 61947
;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 2, ADDITIONAL: 2
;; QUERY SECTION:
;;      trf3.gov.br, type = SOA, class = IN

;; AUTHORITY SECTION:
trf3.gov.br.            1D IN NS        DNS-1.trf3.gov.br.
trf3.gov.br.            1D IN NS        DNS-2.trf3.gov.br.

;; ADDITIONAL SECTION:
DNS-1.trf3.gov.br.      1D IN A         200.178.82.130
DNS-2.trf3.gov.br.      1D IN A         200.178.82.131

;; Total query time: 1 msec
;; FROM: .registro.br to SERVER: 200.160.0.5
;; WHEN: Wed Feb 11 15:04:08 2004
;; MSG SIZE  sent: 29  rcvd: 101

15:04:08.590260 200.160.x.x.56213 > 200.160.0.5.53:  61947 SOA? trf3.gov.br. (29)
15:04:08.590727 200.160.0.5.53 > 200.160.x.x.56213:  61947- 0/2/2 (101)


> dig @200.178.82.130 trf3.gov.br soa +norec

; <<>> DiG 8.3 <<>> @200.178.82.130 trf3.gov.br soa +norec 
; (1 server found)
;; res options: init defnam dnsrch
;; got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 40603
;; flags: qr aa; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2
;; QUERY SECTION:
;;      trf3.gov.br, type = SOA, class = IN

;; ANSWER SECTION:
trf3.gov.br.            15M IN SOA      dns-1.trf3.gov.br. hostmaster.trf3.gov.br. (
                                        2003050108      ; serial
                                        2H              ; refresh
                                        2H              ; retry
                                        1W              ; expiry
                                        1D )            ; minimum


;; AUTHORITY SECTION:
trf3.gov.br.            15M IN NS       dns-1.trf3.gov.br.
trf3.gov.br.            15M IN NS       dns-2.trf3.gov.br.

;; ADDITIONAL SECTION:
dns-1.trf3.gov.br.      15M IN A        200.178.82.130
dns-2.trf3.gov.br.      15M IN A        200.178.82.131

;; Total query time: 132 msec
;; FROM: .registro.br to SERVER: 200.178.82.130
;; WHEN: Wed Feb 11 15:04:16 2004
;; MSG SIZE  sent: 29  rcvd: 148


15:04:16.759456 200.160.x.x.56214 > 200.178.82.130.53:  40603 SOA? trf3.gov.br. (29)
15:04:16.891058 200.178.82.130.53 > 200.160.x.x.56214:  40603*- 1/2/2 SOA[|domain] (DF)