Help with the Guru test

[tsemczyszyn]

I'm currently trying to complete the guru test. My domain is tsemczyszyn.info. Step 2 is successful in finding the AAAA record for my NS, but step 3 is failing to query the name server. In trying to troubleshoot the issue, I did a tcpdump on my server and this is what I see when I click the test button:

listening on eth0, link-type EN10MB (Ethernet), capture size 96 bytes
10:30:34.265922 IP6 ipv6.he.net.43343 > cerberus.tsemczyszyn.info.domain: 10486+[|domain]

It seems to me like the query is reaching my server, so I'm not sure why it's not passing. Any ideas?

[cholzhauer]

I don't quite remember what the guru test was looking for...could you refresh my memory?

[tsemczyszyn]

It wants to verify that the there are AAAA records for the nameservers and that they are reachable on IPv6. I have no trouble with the AAAA records, but the reachability one seems to fail.

[cholzhauer]

Seems to work on my end

Code Select Expand


[carl@mars ~]$ dig aaaa cerberus.tsemczyszyn.info @2001:470:1f11:48c:a00:20ff:feac:5025

; <<>> DiG 9.6.1-P1 <<>> aaaa cerberus.tsemczyszyn.info @2001:470:1f11:48c:a00:20ff:feac:5025
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 17215
;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 2
;; WARNING: recursion requested but not available

;; QUESTION SECTION:
;cerberus.tsemczyszyn.info.     IN      AAAA

;; ANSWER SECTION:
cerberus.tsemczyszyn.info. 3600 IN      AAAA    2001:470:1f11:48c:a00:20ff:feac:5025

;; AUTHORITY SECTION:
tsemczyszyn.info.       3600    IN      NS      ns1.tsemczyszyn.info.

;; ADDITIONAL SECTION:
ns1.tsemczyszyn.info.   3600    IN      A       24.109.54.84
ns1.tsemczyszyn.info.   3600    IN      AAAA    2001:470:1f11:48c:a00:20ff:feac:5025

;; Query time: 1099 msec
;; SERVER: 2001:470:1f11:48c:a00:20ff:feac:5025#53(2001:470:1f11:48c:a00:20ff:feac:5025)
;; WHEN: Mon Jun 14 10:55:55 2010
;; MSG SIZE  rcvd: 133




Did you try the troubleshooting steps listed in the video?

Code Select Expand



dig NS $domain +short
dig AAAA $NS +short
dig AAAA $domain @$nsAAAA


[tsemczyszyn]

Code Select Expand


cerberus:/etc# dig NS tsemczyszyn.info +short
ns1.tsemczyszyn.info.

cerberus:/etc# dig AAAA ns1.tsemczyszyn.info +short
2001:470:1f11:48c:a00:20ff:feac:5025

cerberus:/etc# dig AAAA tsemczyszyn.info @2001:470:1f11:48c:a00:20ff:feac:5025

; <<>> DiG 9.5.1-P3 <<>> AAAA tsemczyszyn.info @2001:470:1f11:48c:a00:20ff:feac:5025
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 43362
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 2

;; QUESTION SECTION:
;tsemczyszyn.info.              IN      AAAA

;; ANSWER SECTION:
tsemczyszyn.info.       3600    IN      AAAA    2001:470:1f11:48c:a00:20ff:feac:5025

;; AUTHORITY SECTION:
tsemczyszyn.info.       3600    IN      NS      ns1.tsemczyszyn.info.

;; ADDITIONAL SECTION:
ns1.tsemczyszyn.info.   3600    IN      A       24.109.54.84
ns1.tsemczyszyn.info.   3600    IN      AAAA    2001:470:1f11:48c:a00:20ff:feac:5025

;; Query time: 3 msec
;; SERVER: 2001:470:1f11:48c:a00:20ff:feac:5025#53(2001:470:1f11:48c:a00:20ff:feac:5025)
;; WHEN: Mon Jun 14 11:21:01 2010
;; MSG SIZE  rcvd: 124



Yes, everything looks right I think, but still no luck.

[kriteknetworks]

dig @b0.info.afilias-nst.org ns tsemczyszyn.info

; <<>> DiG 9.7.0-P2 <<>> @b0.info.afilias-nst.org ns tsemczyszyn.info
; (2 servers found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 63615
;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 4, ADDITIONAL: 2
;; WARNING: recursion requested but not available

;; QUESTION SECTION:
;tsemczyszyn.info.      IN   NS

;; AUTHORITY SECTION:
tsemczyszyn.info.   86400   IN   NS   ns1.tsemczyszyn.info.
tsemczyszyn.info.   86400   IN   NS   ns3.he.net.
tsemczyszyn.info.   86400   IN   NS   ns2.he.net.
tsemczyszyn.info.   86400   IN   NS   ns1.he.net.

;; ADDITIONAL SECTION:
ns1.tsemczyszyn.info.   86400   IN   A   24.109.54.84
ns1.tsemczyszyn.info.   86400   IN   AAAA   2001:470:1f11:48c:a00:20ff:feac:5025
-----------------------------------------------------------
Glue seems to be there....

[jimb]

Works for me too.  Could be negative cacheing on the HE NS.  If it doesn't clear up in a bit, email ipv6@he.net .

[broquea]

Your website was entered as: ipv6.tsemczyszyn.info

So while we can find your NS, that AAAA record does not exist on it (which is the second test, looking up your entered url's AAAA record on your NS:

Code Select Expand

~$ dig aaaa ipv6.tsemczyszyn.info @2001:470:1f11:48c:a00:20ff:feac:5025

; <<>> DiG 9.4.2-P2.1 <<>> aaaa ipv6.tsemczyszyn.info @2001:470:1f11:48c:a00:20ff:feac:5025
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10443
;; flags: qr aa rd; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; WARNING: recursion requested but not available

;; QUESTION SECTION:
;ipv6.tsemczyszyn.info. IN AAAA

;; AUTHORITY SECTION:
tsemczyszyn.info. 3600 IN SOA ns1.tsemczyszyn.info. tsemczyszyn.gmail.com. 2010061400 28800 7200 604800 86400

;; Query time: 135 msec
;; SERVER: 2001:470:1f11:48c:a00:20ff:feac:5025#53(2001:470:1f11:48c:a00:20ff:feac:5025)
;; WHEN: Tue Jun 15 10:13:17 2010
;; MSG SIZE  rcvd: 100

[tsemczyszyn]

Thanks, I didn't realize it was looking for that specific record. After adding it in everything worked perfectly.