Groups | Search | Server Info | Keyboard shortcuts | Login | Register


Groups > comp.protocols.dns.bind > #16055

Re: Error "Query section mismatch : got"

From Mark Andrews <marka@isc.org>
Newsgroups comp.protocols.dns.bind
Subject Re: Error "Query section mismatch : got"
Date 2020-08-20 00:59 +1000
Message-ID <mailman.809.1597849159.942.bind-users@lists.isc.org> (permalink)
References <CA+N48Xf8vKph42T4xq_KgnwjzpQV1YVboWztm6CmPcMok6_GQA@mail.gmail.com> <20200819114133.GA6272@fantomas.sk> <CAGrdBBuZgP3oR3Q5zJjR6W-p8zB3GD-ggYPp0CFXE6mAdPfYiA@mail.gmail.com> <20200819144110.GA15085@fantomas.sk> <807AE33D-182E-459A-BEEB-9CE46854548E@isc.org>

Show all headers | View raw



> On 20 Aug 2020, at 00:41, Matus UHLAR - fantomas <uhlar@fantomas.sk> wrote:
> 
>> On Wed, Aug 19, 2020 at 7:42 AM Matus UHLAR - fantomas
>> <uhlar@fantomas.sk> wrote:
>>> again, why you query for 250.0-24.199.212.125.in-addr.arpa
>>> under normal circumstances there's no point of querying that name.
> 
> On 19.08.20 10:05, tale via bind-users wrote:
>> Well yes and no.   While an individual user would typically not,
>> resolvers sure will.  While trying to resolve
>> 250.199.212.125.in-addr.arpa, it will eventually get to
>> 250.199.212.125.in-addr.arpa CNAME 250.0-24.199.212.125.in-addr.arpa.
> 
> my question is why would anyone do this, as this apparently does not make
> sense.

Presumably because they don’t know that APNIC can delegate the /24s that make
up the /17 independently of each other.

> someone (vietel) illogically delegated whole /24 subnet to broken servers:
> 
> 199.212.125.in-addr.arpa. 86400 IN      NS      dns2.vietel.com.vn.
> 199.212.125.in-addr.arpa. 86400 IN      NS      dns1.vietel.com.vn.
> 
> 0.199.212.125.in-addr.arpa has address 125.235.4.59
> 1.199.212.125.in-addr.arpa is an alias for 1.0-24.199.212.125.in-addr.arpa.
> ...
> 255.199.212.125.in-addr.arpa is an alias for 255.0-24.199.212.125.in-addr.arpa.
> 
> 
>> Then it will need to resolve the canonical name, and a response like
>> the original one that was shown will be clearly buggy.
>> 
>> I say "possibly" because from my vantage, all three of
>> ns{,1,2}.viettelidc.com.vn, the authorities for
>> 0-24.199.212.125.in-addr.arpa, are giving fine answers right now (on
>> udp; blocked on tcp).   This includes the originally reported problem
>> IP, 115.84.177.8
> 
> 
> 
> -- 
> Matus UHLAR - fantomas, uhlar@fantomas.sk ; http://www.fantomas.sk/
> Warning: I wish NOT to receive e-mail advertising to this address.
> Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
> Fucking windows! Bring Bill Gates! (Southpark the movie)
> _______________________________________________
> Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list
> 
> ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information.
> 
> 
> bind-users mailing list
> bind-users@lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users

-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742              INTERNET: marka@isc.org

Back to comp.protocols.dns.bind | Previous | Next | Find similar


Thread

Re: Error "Query section mismatch : got" Mark Andrews <marka@isc.org> - 2020-08-20 00:59 +1000

csiph-web