Hurricane Electric's IPv6 Tunnel Broker Forums

Advanced search  

News:

Welcome to Hurricane Electric's Tunnelbroker.net forums!

Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Messages - malcolmpdx

Pages: [1]
1
General Discussion / Re: Guru test - Couldn't get AAAA for NS
« on: July 13, 2017, 12:11:17 PM »
And, it turned out that the script is apparently checking if www.indeterminate.net is an AAAA NS.  removing the www. from the string fixed my issue.

Not to nitpick, but www in this case isn't a "subdomain".  You might want to look at changing the testing page to make this more clear.

2
General Discussion / Re: Guru test - Couldn't get AAAA for NS
« on: July 13, 2017, 10:01:26 AM »
I'm in a similar situation and I've run out of things to try.

Code: [Select]
$ dig +short NS net.
i.gtld-servers.net.
c.gtld-servers.net.
f.gtld-servers.net.
b.gtld-servers.net.
m.gtld-servers.net.
k.gtld-servers.net.
l.gtld-servers.net.
j.gtld-servers.net.
e.gtld-servers.net.
g.gtld-servers.net.
d.gtld-servers.net.
a.gtld-servers.net.
h.gtld-servers.net.

Code: [Select]
; <<>> DiG 9.8.3-P1 <<>> @c.gtld-servers.net. -t NS indeterminate.net
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 59682
;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 5, ADDITIONAL: 10
;; WARNING: recursion requested but not available

;; QUESTION SECTION:
;indeterminate.net. IN NS

;; AUTHORITY SECTION:
indeterminate.net. 172800 IN NS ns.indeterminate.net.
indeterminate.net. 172800 IN NS ns4.he.net.
indeterminate.net. 172800 IN NS ns3.he.net.
indeterminate.net. 172800 IN NS ns2.he.net.
indeterminate.net. 172800 IN NS ns1.he.net.

;; ADDITIONAL SECTION:
ns.indeterminate.net. 172800 IN A 69.168.54.75
ns.indeterminate.net. 172800 IN AAAA 2001:470:a:501::2
ns4.he.net. 172800 IN AAAA 2001:470:400::2
ns4.he.net. 172800 IN A 216.66.1.2
ns3.he.net. 172800 IN AAAA 2001:470:300::2
ns3.he.net. 172800 IN A 216.218.132.2
ns2.he.net. 172800 IN AAAA 2001:470:200::2
ns2.he.net. 172800 IN A 216.218.131.2
ns1.he.net. 172800 IN AAAA 2001:470:100::2
ns1.he.net. 172800 IN A 216.218.130.2

;; Query time: 58 msec
;; SERVER: 192.26.92.30#53(192.26.92.30)
;; WHEN: Thu Jul 13 09:54:20 2017
;; MSG SIZE  rcvd: 347
Code: [Select]
; <<>> DiG 9.8.3-P1 <<>> @indeterminate.net -t NS indeterminate.net
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 49830
;; flags: qr aa rd; QUERY: 1, ANSWER: 5, AUTHORITY: 0, ADDITIONAL: 2
;; WARNING: recursion requested but not available

;; QUESTION SECTION:
;indeterminate.net. IN NS

;; ANSWER SECTION:
indeterminate.net. 86400 IN NS ns1.he.net.
indeterminate.net. 86400 IN NS ns2.he.net.
indeterminate.net. 86400 IN NS ns3.he.net.
indeterminate.net. 86400 IN NS ns4.he.net.
indeterminate.net. 86400 IN NS ns.indeterminate.net.

;; ADDITIONAL SECTION:
ns.indeterminate.net. 86400 IN A 69.168.54.75
ns.indeterminate.net. 86400 IN AAAA 2001:470:a:501::2

Code: [Select]
; <<>> DiG 9.8.3-P1 <<>> @ns.indeterminate.net -t AAAA ns.indeterminate.net
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 21077
;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 5, ADDITIONAL: 1
;; WARNING: recursion requested but not available

;; QUESTION SECTION:
;ns.indeterminate.net. IN AAAA

;; ANSWER SECTION:
ns.indeterminate.net. 86400 IN AAAA 2001:470:a:501::2

;; AUTHORITY SECTION:
indeterminate.net. 86400 IN NS ns.indeterminate.net.
indeterminate.net. 86400 IN NS ns1.he.net.
indeterminate.net. 86400 IN NS ns2.he.net.
indeterminate.net. 86400 IN NS ns3.he.net.
indeterminate.net. 86400 IN NS ns4.he.net.

;; ADDITIONAL SECTION:
ns.indeterminate.net. 86400 IN A 69.168.54.75

;; Query time: 55 msec
;; SERVER: 69.168.54.75#53(69.168.54.75)
;; WHEN: Thu Jul 13 09:56:01 2017
;; MSG SIZE  rcvd: 171

The fact that the additional section only lists IPv4 A record for ns.indeterminate.net is due to the queries being done via ipv4 (cite: https://ftp.isc.org/isc/bind9/cur/9.9/doc/arm/Bv9ARM.ch06.html "preferred-glue
If specified, the listed type (A or AAAA) will be emitted before other glue in the additional section of a query response. The default is to prefer A records when responding to queries that arrived via IPv4 and AAAA when responding to queries that arrived via IPv6."

But even with the above results, the certification tool complains that I don't have AAAA records for (at least?) one of my nameservers.  I'm out of ideas.

Any thoughts?

Pages: [1]