DNS lameサーバ 何がおかしいか追跡~

ふとログを見ていたら、lame って多いなー。

named[1874]: lame server resolving 'amo.glb.mozilla.net' (in 'glb.m

ozilla.NET'?): 63.245.212.25#53

[root@alaska ]# dig @127.1 amo.glb.mozilla.net

; <<>> DiG 9.6.1-P1-RedHat-9.6.1-10.P1.fc12 <<>> @127.1 amo.glb.mozilla.net

; (1 server found)

;; global options: +cmd

;; Got answer:

;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 34368

;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 0

;; QUESTION SECTION:

;amo.glb.mozilla.net. IN A

;; ANSWER SECTION:

amo.glb.mozilla.net. 300 IN A 63.245.209.91

;; AUTHORITY SECTION:

glb.mozilla.net. 300 IN NS ns2-glb.mozilla.net.

glb.mozilla.net. 300 IN NS ns4-glb.mozilla.net.

glb.mozilla.net. 300 IN NS ns1-glb.mozilla.net.

glb.mozilla.net. 300 IN NS ns3-glb.mozilla.net.

---

ns1-glb.mozilla.net. 300 IN A 63.245.208.15

ns2-glb.mozilla.net. 300 IN A 63.245.212.24

ns3-glb.mozilla.net. 300 IN A 63.245.208.16

ns4-glb.mozilla.net. 300 IN A 63.245.212.25

amo.glb.mozilla.net の名前はひける。問題は ns1(-4)-glb.mozilla.net のどれかなんだろう。。

[root@alaska ]# dig @ns1-glb.mozilla.net. amo.glb.mozilla.net +norec

; <<>> DiG 9.6.1-P1-RedHat-9.6.1-10.P1.fc12 <<>> @ns1-glb.mozilla.net. amo.glb.mozilla.net +norec

; (1 server found)

;; global options: +cmd

;; Got answer:

;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 17486

;; flags: qr aa ra; QUERY: 1, ANSWER: 2, AUTHORITY: 4, ADDITIONAL: 0

;; QUESTION SECTION:

;amo.glb.mozilla.net. IN A

;; ANSWER SECTION:

amo.glb.mozilla.net. 300 IN A 63.245.209.91

amo.glb.mozilla.net. 300 IN A 63.245.209.91

;; AUTHORITY SECTION:

glb.mozilla.net. 300 IN NS ns4-glb.mozilla.net.

glb.mozilla.net. 300 IN NS ns1-glb.mozilla.net.

glb.mozilla.net. 300 IN NS ns2-glb.mozilla.net.

glb.mozilla.net. 300 IN NS ns3-glb.mozilla.net.

glb.mozilla.net の NS は ns1(-4)-glb.mozilla.net 。

ってことは、ns1(-4)-glb.mozilla.net のいずれかに聞けば、amo.glb.mozilla.net　の名前解決ができる。。

って理解でいいのかな。。

[root@alaska ]# dig glb.mozilla.net. ns

; <<>> DiG 9.6.1-P1-RedHat-9.6.1-10.P1.fc12 <<>> @127.1 glb.mozilla.net. ns

; (1 server found)

;; global options: +cmd

;; Got answer:

;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 25701

;; flags: qr rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 4

;; QUESTION SECTION:

;glb.mozilla.net. IN NS

;; ANSWER SECTION:

glb.mozilla.net. 35 IN NS ns2-glb.mozilla.net.

glb.mozilla.net. 35 IN NS ns3-glb.mozilla.net.

glb.mozilla.net. 35 IN NS ns4-glb.mozilla.net.

glb.mozilla.net. 35 IN NS ns1-glb.mozilla.net.

;; ADDITIONAL SECTION:

ns1-glb.mozilla.net. 136 IN A 63.245.208.15

ns2-glb.mozilla.net. 147 IN A 63.245.212.24

ns3-glb.mozilla.net. 150 IN A 63.245.208.16

ns4-glb.mozilla.net. 154 IN A 63.245.212.25

んじゃー、ns1(ns2,ns3,ns4)-glb.mozilla.net に順番に聞いてみよう。。

うーん、奇妙な応答だ。。

ns1-glb 、ns3-glb は、、名前解決できたけど、、ANSWER に同じ回答(IPアドレス)が2個はいってる。。

ns2 は NOERROR で、Anser なし、Auth に ns1,3,4 で、自分(ns2)は、このドメインのauthじゃないっていってる(って理解でよい?)

ns4も同様。

glb ...global load balance ... グローバルロードバランスしている??

あんど、version.bind でバージョン見えちゃう。。文字列をそのまま鵜呑みすれば、BINDっぽい。。

( というか、デフォルトのまんまの文字列のような。。)

[root@alaska ]# dig @ns1-glb.mozilla.net. amo.glb.mozilla.net +norec

;; Got answer:

;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 17486

;; flags: qr aa ra; QUERY: 1, ANSWER: 2, AUTHORITY: 4, ADDITIONAL: 0

;; QUESTION SECTION:

;amo.glb.mozilla.net. IN A

;; ANSWER SECTION:

amo.glb.mozilla.net. 300 IN A 63.245.209.91

amo.glb.mozilla.net. 300 IN A 63.245.209.91

;; AUTHORITY SECTION:

glb.mozilla.net. 300 IN NS ns4-glb.mozilla.net.

glb.mozilla.net. 300 IN NS ns1-glb.mozilla.net.

glb.mozilla.net. 300 IN NS ns2-glb.mozilla.net.

glb.mozilla.net. 300 IN NS ns3-glb.mozilla.net.

[root@alaska ]# dig @ns2-glb.mozilla.net. amo.glb.mozilla.net +norec

;; Got answer:

;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 48466

;; flags: qr ra; QUERY: 1, ANSWER: 0, AUTHORITY: 3, ADDITIONAL: 3

;; QUESTION SECTION:

;amo.glb.mozilla.net. IN A

;; AUTHORITY SECTION:

glb.mozilla.net. 300 IN NS ns1-glb.mozilla.net.

glb.mozilla.net. 300 IN NS ns3-glb.mozilla.net.

glb.mozilla.net. 300 IN NS ns4-glb.mozilla.net.

;; ADDITIONAL SECTION:

ns1-glb.mozilla.net. 300 IN A 63.245.208.15

ns3-glb.mozilla.net. 300 IN A 63.245.208.16

ns4-glb.mozilla.net. 300 IN A 63.245.212.25

[root@alaska ]# dig @ns3-glb.mozilla.net. amo.glb.mozilla.net +norec

;; Got answer:

;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 14418

;; flags: qr aa ra; QUERY: 1, ANSWER: 2, AUTHORITY: 4, ADDITIONAL: 0

;; QUESTION SECTION:

;amo.glb.mozilla.net. IN A

;; ANSWER SECTION:

amo.glb.mozilla.net. 300 IN A 63.245.209.91

amo.glb.mozilla.net. 300 IN A 63.245.209.91

;; AUTHORITY SECTION:

glb.mozilla.net. 300 IN NS ns3-glb.mozilla.net.

glb.mozilla.net. 300 IN NS ns4-glb.mozilla.net.

glb.mozilla.net. 300 IN NS ns1-glb.mozilla.net.

glb.mozilla.net. 300 IN NS ns2-glb.mozilla.net.

[root@alaska ]# dig @ns4-glb.mozilla.net. amo.glb.mozilla.net +norec

;; Got answer:

;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 49996

;; flags: qr ra; QUERY: 1, ANSWER: 0, AUTHORITY: 3, ADDITIONAL: 3

;; QUESTION SECTION:

;amo.glb.mozilla.net. IN A

;; AUTHORITY SECTION:

glb.mozilla.net. 300 IN NS ns3-glb.mozilla.net.

glb.mozilla.net. 300 IN NS ns4-glb.mozilla.net.

glb.mozilla.net. 300 IN NS ns1-glb.mozilla.net.

;; ADDITIONAL SECTION:

ns1-glb.mozilla.net. 300 IN A 63.245.208.15

ns3-glb.mozilla.net. 300 IN A 63.245.208.16

ns4-glb.mozilla.net. 300 IN A 63.245.212.25

[root@alaska ]#

Thx for reading n' cheers ! XD