Re: Understanding cause of DNS format error (FORMERR)

2012-06-26 Thread Gabriele Paggi
Hello Sam, > There's some kind of delegation bug as well.  If I query > dns1[0-3].one.microsoft.com for SOA and NS for > partners.extranet.microsoft.com you get sensible answers though the > origin host is different for each server queried and those origins are > privately addressed. Which kind o

Re: Understanding cause of DNS format error (FORMERR)

2012-06-23 Thread Gabriele Paggi
Hello Jeffry, FWIW I'm not able to reproduce this using a BIND 9.9.1-P1 recursive resolver. On this system "dig @localhost vlasext.partners.extranet.microsoft.com a" returns the answer 70.42.230.20 and identifies dns11.one.microsoft.com (94.245.124.49) as one of four authoritative servers. "dig @

Re: Understanding cause of DNS format error (FORMERR)

2012-06-23 Thread Gabriele Paggi
Hello Carsten, At Men& Mice I've investigated this issue a few weeks ago for one of our customers. At that point of time, we've seen NS records with private addresses: That's interesting but it still doesn't explain why BIND reports a format error in the reply it receives. The reply is nonsens

Re: Understanding cause of DNS format error (FORMERR)

2012-06-23 Thread Gabriele Paggi
Hello Carsten, Thanks for your reply! about the FORMERR. This might be caused by a Firewall or other middlebox that truncates the large answer containing the NS record set for this domain. I see the same if I try to fetch the delegation NS records from the parent domain (microsoft.com) for part

Understanding cause of DNS format error (FORMERR)

2012-06-22 Thread Gabriele Paggi
Hello, I'm a BIND novice and I'm trying to understand what causes my BIND9 resolver (bind97-9.7.0-10.P2) to return an error when queried for the A record of vlasext.partners.extranet.microsoft.com: Jun 22 11:14:47 res1 named[32210]: DNS format error from 94.245.124.49#53 resolving vlasext.partner