1. さくらNSの返事がおかしい

1.1. sakura/euro.jp

さくらNSの返事がおかしい。そのことがよく分かるドメインを発見した。

$ dig dns111.euro.jp @a.dns.jp

; <<>> DiG 9.16.1-Ubuntu <<>> dns111.euro.jp @a.dns.jp
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 47004
;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 3, ADDITIONAL: 4
;; WARNING: recursion requested but not available

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
; NSID: 61 32 32 2e 74 79 6f ("a22.tyo")
; COOKIE: 964066d92aa79e27d994dc1462066c2191ec5b046bdaea98 (good)
;; QUESTION SECTION:
;dns111.euro.jp.                        IN      A

;; AUTHORITY SECTION:
euro.jp.                86400   IN      NS      dns111.euro.jp.
euro.jp.                86400   IN      NS      ns2.dns.ne.jp.
euro.jp.                86400   IN      NS      ns1.dns.ne.jp.

;; ADDITIONAL SECTION:
dns111.euro.jp.         86400   IN      A       27.134.252.194
ns2.dns.ne.jp.          86400   IN      A       133.167.21.1
ns1.dns.ne.jp.          86400   IN      A       61.211.236.1

;; Query time: 12 msec
;; SERVER: 203.119.1.1#53(203.119.1.1)
;; WHEN: 金  2月 11 23:01:05 JST 2022
;; MSG SIZE  rcvd: 189

1.2. ns1

SERVFAIL/REFUSEDが返る。

$ dig dns111.euro.jp @ns1.dns.ne.jp

; <<>> DiG 9.16.1-Ubuntu <<>> dns111.euro.jp @ns1.dns.ne.jp
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: REFUSED, id: 51572
;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
;; WARNING: recursion requested but not available

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
; NSID: 66 38 62 30 36 35 39 66 2d 35 39 31 39 2d 34 35 66 36 2d 62 62 62 33 2d 65 65 30 66 34 64 37 39 64 32 32 36 ("f8b0659f-5919-45f6-bbb3-ee0f4d79d226")
;; QUESTION SECTION:
;dns111.euro.jp.                        IN      A

;; Query time: 16 msec
;; SERVER: 61.211.236.1#53(61.211.236.1)
;; WHEN: 金  2月 11 21:39:59 JST 2022
;; MSG SIZE  rcvd: 83

複数のバックエンドがあるが、このNSIDを返答するものがREFUSEDを返す。

$ dig -t ns dns111.euro.jp @ns1.dns.ne.jp

; <<>> DiG 9.16.1-Ubuntu <<>> -t ns dns111.euro.jp @ns1.dns.ne.jp
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: REFUSED, id: 39093
;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
;; WARNING: recursion requested but not available

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
; NSID: 66 38 62 30 36 35 39 66 2d 35 39 31 39 2d 34 35 66 36 2d 62 62 62 33 2d 65 65 30 66 34 64 37 39 64 32 32 36 ("f8b0659f-5919-45f6-bbb3-ee0f4d79d226")
;; QUESTION SECTION:
;dns111.euro.jp.                        IN      NS

;; Query time: 16 msec
;; SERVER: 61.211.236.1#53(61.211.236.1)
;; WHEN: 金  2月 11 21:43:58 JST 2022
;; MSG SIZE  rcvd: 83

1.3. ns2

こっちはもっともらしい返事だ。(a.dns.jpからの返事と整合している。)

$ dig dns111.euro.jp @ns2.dns.ne.jp

; <<>> DiG 9.16.1-Ubuntu <<>> dns111.euro.jp @ns2.dns.ne.jp
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 38025
;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 3, ADDITIONAL: 1
;; WARNING: recursion requested but not available

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;dns111.euro.jp.                        IN      A

;; ANSWER SECTION:
dns111.euro.jp.         3600    IN      A       27.134.252.194

;; AUTHORITY SECTION:
euro.jp.                3600    IN      NS      ns2.dns.ne.jp.
euro.jp.                3600    IN      NS      dns111.euro.jp.
euro.jp.                3600    IN      NS      ns1.dns.ne.jp.

;; Query time: 24 msec
;; SERVER: 133.167.21.1#53(133.167.21.1)
;; WHEN: 金  2月 11 21:42:27 JST 2022
;; MSG SIZE  rcvd: 116


CategoryDns CategoryWatch CategoryTemplate

MoinQ: watchNS/sakura/ns1/euro.jp (last edited 2022-02-14 02:50:13 by ToshinoriMaeno)