OT: lots of IPv6 DNS requests

Jon Radel jon at radel.com
Tue Jun 10 15:51:49 UTC 2008


Wojciech Puchar wrote:

> Jun 10 17:14:32 wojtek named[909]: client 
> 2001:4830:167d:5237::3:1#59882: query (cache) 
> 'wojtek.tensor.gdynia.pl/AAAA/IN' denied
> Jun 10 17:14:32 wojtek named[909]: client 
> 2001:4830:167d:5237::3:1#59882: query (cache) 
> 'wojtek.tensor.gdynia.pl/ANY/IN' denied
> 
> 
> 
> my computer is NOT set up as DNS server for any domain.
> 
> why they are asking?

Because your computer is reachable on either

dns.tensor.gdynia.pl.   10800   IN      AAAA    2001:4070:101::1

or

dns2.tensor.gdynia.pl.  10732   IN      AAAA    2001:4070:101:1::2

and that pesky set of parent zone DNS servers insists on handing those 
addresses out in NS records?

Aha, found the matching log entries on my side:

Jun 10 15:14:33 billow named[581]: client 192.168.43.18#45589: query: 
wojtek.tensor.gdynia.pl IN AAAA +
Jun 10 15:14:33 billow named[581]: client 192.168.43.19#1873: query: 
wojtek.tensor.gdynia.pl IN ANY +
Jun 10 15:14:34 billow named[581]: unexpected RCODE (REFUSED) resolving 
'wojtek.tensor.gdynia.pl/AAAA/IN': 2001:4070:101:2::1#53
Jun 10 15:14:34 billow named[581]: unexpected RCODE (REFUSED) resolving 
'wojtek.tensor.gdynia.pl/ANY/IN': 2001:4070:101:2::1#53

Hmmm...different IP address.   Hmmm..... Hey, what about you look at 
what bilbo.nask.org.pl. is returning when asked for your nameservers:

;; AUTHORITY SECTION:
tensor.gdynia.pl.       28800   IN      NS      dns2.tensor.gdynia.pl.
tensor.gdynia.pl.       28800   IN      NS      dns3.tensor.gdynia.pl.
tensor.gdynia.pl.       28800   IN      NS      dns.tensor.gdynia.pl.

;; ADDITIONAL SECTION:
dns.tensor.gdynia.pl.   28800   IN      A       213.192.74.1
dns.tensor.gdynia.pl.   28800   IN      AAAA    2001:4070:101::1
dns2.tensor.gdynia.pl.  28800   IN      A       83.18.148.142
dns2.tensor.gdynia.pl.  28800   IN      AAAA    2001:4070:101::1
dns3.tensor.gdynia.pl.  28800   IN      A       83.12.228.78
dns3.tensor.gdynia.pl.  28800   IN      AAAA    2001:4070:101:2::1

Inconsistent from some of your other parents.  Might want to clean up a 
bit.  ;-)

--Jon Radel




-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3283 bytes
Desc: S/MIME Cryptographic Signature
Url : http://lists.freebsd.org/pipermail/freebsd-questions/attachments/20080610/cc6da5da/smime.bin


More information about the freebsd-questions mailing list