• Welcome to Hurricane Electric's IPv6 Tunnel Broker Forums.

News:

Welcome to Hurricane Electric's Tunnelbroker.net forums!

Main Menu

ipv6 gleu record

Started by pjanzen, June 30, 2011, 10:53:24 PM

Previous topic - Next topic

pjanzen

Hi all,

I am struggeling to pass the sage test because j2ict.net does not have a glue record. j2ict.net is registerd at dyndns.com and in the domain name section I added 2 gleu records, ns{1,2}.j2ict.net with ipv4 and 6 addresses and I added those nameservers to the list of nameserver provided by dyndns however when executing the test (ie: press submit) I get the following output:

Quote
Domain: ipv6.j2ict.net
Domains TLD: net

--------------------------------------------------------------------------------
NS Records:
-TLD:
-Server: d.root-servers.net.
-Output: No Record

more errors.....

If I do a dig I get the following information back.

Quote
pjanzen@firewall:~$ dig @d.root-servers.net net NS

; <<>> DiG 9.7.0-P1 <<>> @d.root-servers.net net NS
; (2 servers found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 43418
;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 13, ADDITIONAL: 15
;; WARNING: recursion requested but not available

;; QUESTION SECTION:
;net.                           IN      NS

;; AUTHORITY SECTION:
net.                    172800  IN      NS      l.gtld-servers.net.
net.                    172800  IN      NS      m.gtld-servers.net.
more info....

digging on root server provided from the above list.

Quote
pjanzen@firewall:~$ dig @l.gtld-servers.net. j2ict.net NS

; <<>> DiG 9.7.0-P1 <<>> @l.gtld-servers.net. j2ict.net NS
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 11086
;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 6, ADDITIONAL: 2
;; WARNING: recursion requested but not available

;; QUESTION SECTION:
;j2ict.net.                     IN      NS

;; AUTHORITY SECTION:
j2ict.net.              172800  IN      NS      ns2.mydyndns.org.
j2ict.net.              172800  IN      NS      ns1.mydyndns.org.
j2ict.net.              172800  IN      NS      ns3.mydyndns.org.
j2ict.net.              172800  IN      NS      ns4.mydyndns.org.
j2ict.net.              172800  IN      NS      ns5.mydyndns.org.
j2ict.net.              172800  IN      NS      ns1.j2ict.net.

;; ADDITIONAL SECTION:
ns1.j2ict.net.          172800  IN      AAAA    2001:4dd0:ff00:984::2
ns1.j2ict.net.          172800  IN      A       81.169.128.183

;; Query time: 100 msec
;; SERVER: 192.41.162.30#53(192.41.162.30)
;; WHEN: Fri Jul  1 07:50:57 2011
;; MSG SIZE  rcvd: 191


I am unsure on how to procede futher to get this fixed. I am hopening this forum can provide some insight.

Thanks.
Paul

snarked

Did you add the glue records to your domain registration?  I don't see one for your "ns2."

pjanzen

Hi snarked,

yes I have added the glue records there, there is a ns2 which I now added but I cannot see how that would fix my problem.

Here is a screen schot of dyndns.

Paul

u8sf

I also have some questions regarding glue record.
see from previous 

"quote"

  ;; ADDITIONAL SECTION:
ns1.j2ict.net.          172800  IN      AAAA    2001:4dd0:ff00:984::2
ns1.j2ict.net.          172800  IN      A       81.169.128.183
"unquote"

See above quote,  I do not understand from where he got these ip address , 2001:4dd0:ff00.984::2 and 81.169.128.183 ?

Because I buy a domain from Godaddy, they just provide dns,  for example , ns65.domaincontrol.com and ns66.domaincontrol.com, ( no ip address) , also I do not set up other DNS server.  then  from where I can get  IP address to complete glue record?

Olipro

#4
If you specify nameservers that exist within the zone which is being queried then you must provide glue information to the authoritative zone which your domain is residing in; if your registrar is GoDaddy, that information should be inserted in the "hosts" section so that IPs exist for ns1 and ns2.

as far as I can tell, the glue you already have is correct (at least, ns1 and ns2 will respond to queries just fine), that does not change the fact that your DNS information contains bad nameservers; if I try to query information for your zone from any of the mydyndns.org servers, it results in a BAD REFERRAL error - or in other words, those nameservers DO NOT have authoritative information on your zone - either fix it, or remove them.

Also, maybe you care... maybe you don't, but your nameservers will allow anyone to AXFR them (http://pastebin.com/Gyz077Z5 <-- private paste, will expire in 24 hours)

pjanzen

Hi u8sf,

The ip adresses are my own NS server ip which I assign to Those servers. Those are not with go daddy.

You have to look at godaddy for glue records on your domain.

Regards.
Paul

pjanzen

Thnx for that, fixed this....

Quote from: Olipro on July 24, 2011, 06:00:54 AM
...........
Also, maybe you care... maybe you don't, but your nameservers will allow anyone to AXFR them (http://pastebin.com/Gyz077Z5 <-- private paste, will expire in 24 hours)

polarhome

Hello,

I wonder how you set up a glue record at godaddy?
I asked them for and they replied that it is not possible because I host my own DNS servers.
If need to let godaddy host my DNS servers in order to add a glue record.

And indeed in the godaddy interface it is not possible to add an IPv6 address for the DNS server.

Is there any solution for this or I am doomed to stay on "guru" level?

Thank you.

Regards,
Z


polarhome

Hello,

thank you very much. Following your link I arrived to http://www.tunnelbroker.net/forums/index.php?topic=157.0 Reply #10 that really worked.

Thank you very much.

Regards,
Z (Sage certified :) )