Re: [public-dns-discuss] Google DNS is returning a SERVFAIL for PTR

[Stefan Schmidt]

On Mon, May 13, 2013 at 2:52 PM, Chris Piety <jcp...@gmail.com> wrote:

Forward lookup works but not reverse DNS.

 

DNS-DMZ1:/# dig @8.8.8.8 -x 161.45.157.30

; <<>> DiG 9.8.3-P4 <<>> @8.8.8.8 -x 161.45.157.30
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 20870
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;30.157.45.161.in-addr.arpa.    IN      PTR

;; Query time: 4018 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Sat May 11 12:56:34 2013
;; MSG SIZE  rcvd: 44

This is just the usual thing that happens when none of the authoritative nameservers for a domain are responding.

➜  ~  dig -x 161.45.157.30 +trace

...

45.161.in-addr.arpa. 86400 IN NS dns-dmz1.mtsu.edu.

45.161.in-addr.arpa. 86400 IN NS dns-dmz2.mtsu.edu.

45.161.in-addr.arpa. 86400 IN NS dns-res1.mtsu.edu.

;; connection timed out; no servers could be reached

➜  ~  dig @dns-dmz1.mtsu.edu. -x 161.45.157.30

; <<>> DiG 9.9.2-P1 <<>> @dns-dmz1.mtsu.edu. -x 161.45.157.30

; (1 server found)

;; global options: +cmd

;; connection timed out; no servers could be reached

➜  ~  dig @dns-dmz2.mtsu.edu. -x 161.45.157.30

; <<>> DiG 9.9.2-P1 <<>> @dns-dmz2.mtsu.edu. -x 161.45.157.30

; (1 server found)

;; global options: +cmd

;; connection timed out; no servers could be reached

➜  ~  dig @dns-res1.mtsu.edu. -x 161.45.157.30

dig: couldn't get address for 'dns-res1.mtsu.edu.': not found 

[Yunhong Gu]

We cannot reach any of your nameservers. Can you check if there is any firewall that blocks our IP address, listed here: https://developers.google.com/speed/public-dns/faq#locations

On Tue, May 14, 2013 at 10:53 AM, Chris Piety <jcp...@gmail.com> wrote:

According to googles own troubleshooting recomendations here is the output from another open resolver.

 

C:\Users\cpiety>nslookup -debug 161.45.157.30 4.2.2.2
------------
Got answer:
    HEADER:
        opcode = QUERY, id = 1, rcode = NOERROR
        header flags:  response, want recursion, recursion avail.
        questions = 1,  answers = 1,  authority records = 0,  additional = 0

    QUESTIONS:
        2.2.2.4.in-addr.arpa, type = PTR, class = IN
    ANSWERS:
    ->  2.2.2.4.in-addr.arpa
        name = b.resolvers.Level3.net
        ttl = 5902 (1 hour 38 mins 22 secs)

------------
Server:  b.resolvers.Level3.net
Address:  4.2.2.2

------------
Got answer:
    HEADER:
        opcode = QUERY, id = 2, rcode = NOERROR
        header flags:  response, want recursion, recursion avail.
        questions = 1,  answers = 2,  authority records = 0,  additional = 0

    QUESTIONS:
        30.157.45.161.in-addr.arpa, type = PTR, class = IN
    ANSWERS:
    ->  30.157.45.161.in-addr.arpa
        name = w1.mtsu.edu
        ttl = 86400 (1 day)
    ->  30.157.45.161.in-addr.arpa
        name = mtsu.edu
        ttl = 86400 (1 day)

------------
Name:    w1.mtsu.edu
Address:  161.45.157.30

C:\Users\cpiety>

On Monday, May 13, 2013 7:52:32 AM UTC-5, Chris Piety wrote:

Forward lookup works but not reverse DNS.

 

DNS-DMZ1:/# dig @8.8.8.8 -x www.mtsu.edu

; <<>> DiG 9.8.3-P4 <<>> @8.8.8.8 -x www.mtsu.edu

; (1 server found)
;; global options: +cmd
;; Got answer:

;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 15273
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;edu.mtsu.www.in-addr.arpa.     IN      PTR

;; AUTHORITY SECTION:
in-addr.arpa.           1800    IN      SOA     b.in-addr-servers.arpa. nstld.iana.org. 2011028415 1800 900 604800 3600

;; Query time: 34 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Mon May 13 07:51:28 2013
;; MSG SIZE  rcvd: 111

DNS-DMZ1:/#

 

DNS-DMZ1:/# dig @8.8.8.8 -x 161.45.157.30

; <<>> DiG 9.8.3-P4 <<>> @8.8.8.8 -x 161.45.157.30
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 20870
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;30.157.45.161.in-addr.arpa.    IN      PTR

;; Query time: 4018 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Sat May 11 12:56:34 2013
;; MSG SIZE  rcvd: 44

--
--
========================================================
You received this message because you are subscribed to the Google
Groups "public-dns-discuss" group.
To post to this group, send email to public-dn...@googlegroups.com
To unsubscribe from this group, send email to
public-dns-disc...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/public-dns-discuss?hl=en
For more information on Google Public DNS, please visit
http://code.google.com/speed/public-dns
========================================================
 
---
You received this message because you are subscribed to the Google Groups "public-dns-discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an email to public-dns-disc...@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.