1. リゾルバーからの返答

すくなくとも5種類の返答がある。

これも参考になる。 https://dnschecker.org/#NS/nike.co.jp

1.1. dnscache

FreeBSD, Ubuntu (TTL から見て、親・JPからの返答../を返しているようだ。)

%dig -t ns nike.co.jp @127.0.0.1                                         ~

; <<>> DiG 9.12.1 <<>> -t ns nike.co.jp @127.0.0.1
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 24152
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;nike.co.jp.                    IN      NS

;; ANSWER SECTION:
nike.co.jp.             39894   IN      NS      dns02.bekknet.ad.jp.
nike.co.jp.             39894   IN      NS      dns01.bekknet.ad.jp.

;; Query time: 0 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Tue Oct 25 09:27:37 JST 2022
;; MSG SIZE  rcvd: 79

1.2. unbound

手元で動かしているもの。 NS, CNAMEをともに返してくるのはおかしい。

$ dig -t ns nike.co.jp @127.0.0.2

; <<>> DiG 9.18.1-1ubuntu1.2-Ubuntu <<>> -t ns nike.co.jp @127.0.0.2
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 28978
;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; QUESTION SECTION:
;nike.co.jp.                    IN      NS

;; ANSWER SECTION:
nike.co.jp.             600     IN      NS      dns02.bekknet.ad.jp.
nike.co.jp.             600     IN      NS      dns01.bekknet.ad.jp.
nike.co.jp.             600     IN      CNAME   cojp.nike.jp.

;; Query time: 251 msec
;; SERVER: 127.0.0.2#53(127.0.0.2) (UDP)
;; WHEN: Tue Oct 25 09:24:25 JST 2022
;; MSG SIZE  rcvd: 114

類似

%dig -t ns nike.co.jp @218.216.176.116

1.3. 1.1.1.1/8.8.8.8

RCode NXDOMAIN

NSを問い合わせているのに、 CNAMEを返すのも変だ。-- ToshinoriMaeno 2022-10-25 00:23:59

$ dig -t ns nike.co.jp @1.1.1.1

; <<>> DiG 9.18.1-1ubuntu1.2-Ubuntu <<>> -t ns nike.co.jp @1.1.1.1
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 63455
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
; NSID: 34 34 38 6d 31 32 38 ("448m128")
;; QUESTION SECTION:
;nike.co.jp.                    IN      NS

;; ANSWER SECTION:
nike.co.jp.             600     IN      CNAME   cojp.nike.jp.

;; AUTHORITY SECTION:
nike.jp.                900     IN      SOA     ns-1870.awsdns-41.co.uk. awsdns-hostmaster.amazon.com. 1 7200 900 1209600 86400

;; Query time: 20 msec
;; SERVER: 1.1.1.1#53(1.1.1.1) (UDP)
;; WHEN: Tue Oct 25 09:20:51 JST 2022
;; MSG SIZE  rcvd: 161

1.4. OpenDNS

$ dig -t ns nike.co.jp @208.67.222.220

; <<>> DiG 9.18.1-1ubuntu1.2-Ubuntu <<>> -t ns nike.co.jp @208.67.222.220
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 3055
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
; NSID: 6d 35 33 2e 6e 72 74 ("m53.nrt")
;; QUESTION SECTION:
;nike.co.jp.                    IN      NS

;; ANSWER SECTION:
nike.co.jp.             600     IN      CNAME   cojp.nike.jp.

;; AUTHORITY SECTION:
nike.jp.                900     IN      SOA     ns-1870.awsdns-41.co.uk. awsdns-hostmaster.amazon.com. 1 7200 900 1209600 86400

;; Query time: 15 msec
;; SERVER: 208.67.222.220#53(208.67.222.220) (UDP)
;; WHEN: Tue Oct 25 09:54:43 JST 2022
;; MSG SIZE  rcvd: 161

1.5. 9.9.9.9

NS, CNAMEの両方を返すのはもっと変か。(Unbound ?)

$ dig -t ns nike.co.jp @9.9.9.9

; <<>> DiG 9.18.1-1ubuntu1.2-Ubuntu <<>> -t ns nike.co.jp @9.9.9.9
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 27575
;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
; NSID: 72 65 73 37 32 30 2e 71 68 6e 64 31 2e 72 72 64 6e 73 2e 70 63 68 2e 6e 65 74 ("res720.qhnd1.rrdns.pch.net")
;; QUESTION SECTION:
;nike.co.jp.                    IN      NS

;; ANSWER SECTION:
nike.co.jp.             600     IN      NS      dns01.bekknet.ad.jp.
nike.co.jp.             600     IN      NS      dns02.bekknet.ad.jp.
nike.co.jp.             600     IN      CNAME   cojp.nike.jp.

;; Query time: 8 msec
;; SERVER: 9.9.9.9#53(9.9.9.9) (UDP)
;; WHEN: Tue Oct 25 09:23:07 JST 2022
;; MSG SIZE  rcvd: 144

1.6. ?

おかしな返答

;; ANSWER SECTION:
nike.co.jp.             600     IN      NS      dns01.bekknet.ad.jp.
nike.co.jp.             600     IN      NS      dns02.bekknet.ad.jp.


CategoryDns CategoryWatch CategoryTemplate

MoinQ: watchNS/jp/nike.co.jp/リゾルバー (last edited 2022-10-25 10:10:28 by ToshinoriMaeno)