I'm currently trying to complete the guru test. My domain is tsemczyszyn.info. Step 2 is successful in finding the AAAA record for my NS, but step 3 is failing to query the name server. In trying to troubleshoot the issue, I did a tcpdump on my server and this is what I see when I click the test button:
listening on eth0, link-type EN10MB (Ethernet), capture size 96 bytes
10:30:34.265922 IP6 ipv6.he.net.43343 > cerberus.tsemczyszyn.info.domain: 10486+[|domain]
It seems to me like the query is reaching my server, so I'm not sure why it's not passing. Any ideas?
I don't quite remember what the guru test was looking for...could you refresh my memory?
It wants to verify that the there are AAAA records for the nameservers and that they are reachable on IPv6. I have no trouble with the AAAA records, but the reachability one seems to fail.
Seems to work on my end
[carl@mars ~]$ dig aaaa cerberus.tsemczyszyn.info @2001:470:1f11:48c:a00:20ff:feac:5025
; <<>> DiG 9.6.1-P1 <<>> aaaa cerberus.tsemczyszyn.info @2001:470:1f11:48c:a00:20ff:feac:5025
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 17215
;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 2
;; WARNING: recursion requested but not available
;; QUESTION SECTION:
;cerberus.tsemczyszyn.info. IN AAAA
;; ANSWER SECTION:
cerberus.tsemczyszyn.info. 3600 IN AAAA 2001:470:1f11:48c:a00:20ff:feac:5025
;; AUTHORITY SECTION:
tsemczyszyn.info. 3600 IN NS ns1.tsemczyszyn.info.
;; ADDITIONAL SECTION:
ns1.tsemczyszyn.info. 3600 IN A 24.109.54.84
ns1.tsemczyszyn.info. 3600 IN AAAA 2001:470:1f11:48c:a00:20ff:feac:5025
;; Query time: 1099 msec
;; SERVER: 2001:470:1f11:48c:a00:20ff:feac:5025#53(2001:470:1f11:48c:a00:20ff:feac:5025)
;; WHEN: Mon Jun 14 10:55:55 2010
;; MSG SIZE rcvd: 133
Did you try the troubleshooting steps listed in the video?
dig NS $domain +short
dig AAAA $NS +short
dig AAAA $domain @$nsAAAA
cerberus:/etc# dig NS tsemczyszyn.info +short
ns1.tsemczyszyn.info.
cerberus:/etc# dig AAAA ns1.tsemczyszyn.info +short
2001:470:1f11:48c:a00:20ff:feac:5025
cerberus:/etc# dig AAAA tsemczyszyn.info @2001:470:1f11:48c:a00:20ff:feac:5025
; <<>> DiG 9.5.1-P3 <<>> AAAA tsemczyszyn.info @2001:470:1f11:48c:a00:20ff:feac:5025
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 43362
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 2
;; QUESTION SECTION:
;tsemczyszyn.info. IN AAAA
;; ANSWER SECTION:
tsemczyszyn.info. 3600 IN AAAA 2001:470:1f11:48c:a00:20ff:feac:5025
;; AUTHORITY SECTION:
tsemczyszyn.info. 3600 IN NS ns1.tsemczyszyn.info.
;; ADDITIONAL SECTION:
ns1.tsemczyszyn.info. 3600 IN A 24.109.54.84
ns1.tsemczyszyn.info. 3600 IN AAAA 2001:470:1f11:48c:a00:20ff:feac:5025
;; Query time: 3 msec
;; SERVER: 2001:470:1f11:48c:a00:20ff:feac:5025#53(2001:470:1f11:48c:a00:20ff:feac:5025)
;; WHEN: Mon Jun 14 11:21:01 2010
;; MSG SIZE rcvd: 124
Yes, everything looks right I think, but still no luck.
dig @b0.info.afilias-nst.org ns tsemczyszyn.info
; <<>> DiG 9.7.0-P2 <<>> @b0.info.afilias-nst.org ns tsemczyszyn.info
; (2 servers found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 63615
;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 4, ADDITIONAL: 2
;; WARNING: recursion requested but not available
;; QUESTION SECTION:
;tsemczyszyn.info. IN NS
;; AUTHORITY SECTION:
tsemczyszyn.info. 86400 IN NS ns1.tsemczyszyn.info.
tsemczyszyn.info. 86400 IN NS ns3.he.net.
tsemczyszyn.info. 86400 IN NS ns2.he.net.
tsemczyszyn.info. 86400 IN NS ns1.he.net.
;; ADDITIONAL SECTION:
ns1.tsemczyszyn.info. 86400 IN A 24.109.54.84
ns1.tsemczyszyn.info. 86400 IN AAAA 2001:470:1f11:48c:a00:20ff:feac:5025
-----------------------------------------------------------
Glue seems to be there....
Works for me too. Could be negative cacheing on the HE NS. If it doesn't clear up in a bit, email ipv6@he.net .
Your website was entered as: ipv6.tsemczyszyn.info
So while we can find your NS, that AAAA record does not exist on it (which is the second test, looking up your entered url's AAAA record on your NS:
~$ dig aaaa ipv6.tsemczyszyn.info @2001:470:1f11:48c:a00:20ff:feac:5025
; <<>> DiG 9.4.2-P2.1 <<>> aaaa ipv6.tsemczyszyn.info @2001:470:1f11:48c:a00:20ff:feac:5025
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10443
;; flags: qr aa rd; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; WARNING: recursion requested but not available
;; QUESTION SECTION:
;ipv6.tsemczyszyn.info. IN AAAA
;; AUTHORITY SECTION:
tsemczyszyn.info. 3600 IN SOA ns1.tsemczyszyn.info. tsemczyszyn.gmail.com. 2010061400 28800 7200 604800 86400
;; Query time: 135 msec
;; SERVER: 2001:470:1f11:48c:a00:20ff:feac:5025#53(2001:470:1f11:48c:a00:20ff:feac:5025)
;; WHEN: Tue Jun 15 10:13:17 2010
;; MSG SIZE rcvd: 100
Thanks, I didn't realize it was looking for that specific record. After adding it in everything worked perfectly.