Bug in whois validation code...

[zestysoft]

Host: ftp2.ie.FreeBSD.org
AAAA: 2610:1c1:1:606c::15:0

Results when I run: 'whois 2610:1c1:1:606c::15:0'

[Querying whois.arin.net]
[Redirected to rwhois.nyi.net:4321]
[Querying rwhois.nyi.net]
[rwhois.nyi.net]
%rwhois V-1.5:003eff:00 rwhoisd.nyi.net (by Network Solutions, Inc. V-1.5.9.6)
%referral rwhois://root.rwhois.net:4321/auth-area=.
%ok

When I paste that into he, it response with:

It looks like you submitted an invalid whois query!

[broquea]

Not a bug, just paste the correct information. This is what I get from the same WHOIS query. Run your command again, you should be getting the same result, and the part that counts is from "NetRange" to "OrgTechRef". Also, what their rwhois provides, isn't even any information, so it couldn't qualify as useful. They seem to have a poorly configured rwhois server.

Code Select Expand

:~$ whois 2610:1c1:1:606c::15:0

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/public/whoisinaccuracy/index.xhtml
#


#
# The following results may also be obtained via:
# https://whois.arin.net/rest/nets;q=2610%3A1c1%3A1%3A606c%3A%3A15%3A0?showDetails=true&showARIN=false&showNonArinTopLevelNet=false&ext=netref2
#

NetRange:       2610:1C0:: - 2610:1C2:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF
CIDR:           2610:1C2::/32, 2610:1C0::/31
NetName:        NYNET22
NetHandle:      NET6-2610-1C0-1
Parent:         ARIN-2610 (NET6-2610-1)
NetType:        Direct Allocation
OriginAS:
Organization:   The New York Internet Company (NYIC)
RegDate:        2007-04-11
Updated:        2012-03-02
Ref:            https://whois.arin.net/rest/net/NET6-2610-1C0-1


OrgName:        The New York Internet Company
OrgId:          NYIC
Address:        100 William Street
Address:        21st Floor
City:           New York
StateProv:      NY
PostalCode:     10038
Country:        US
RegDate:        1998-08-10
Updated:        2011-09-24
Comment:        * Rwhois reassignment information for this block
Comment:        is available at
Comment:        * rwhois://rwhois.nyi.net:4321 or
Comment:        http://rwhois.nyi.net
Ref:            https://whois.arin.net/rest/org/NYIC

ReferralServer:  rwhois://rwhois.nyi.net:4321

OrgNOCHandle: EK121-ARIN
OrgNOCName:   Internetwork Engineering
OrgNOCPhone:  +1-212-269-1999
OrgNOCEmail:  inter-eng@nyi.net
OrgNOCRef:    https://whois.arin.net/rest/poc/EK121-ARIN

OrgAbuseHandle: EK121-ARIN
OrgAbuseName:   Internetwork Engineering
OrgAbusePhone:  +1-212-269-1999
OrgAbuseEmail:  inter-eng@nyi.net
OrgAbuseRef:    https://whois.arin.net/rest/poc/EK121-ARIN

OrgTechHandle: EK121-ARIN
OrgTechName:   Internetwork Engineering
OrgTechPhone:  +1-212-269-1999
OrgTechEmail:  inter-eng@nyi.net
OrgTechRef:    https://whois.arin.net/rest/poc/EK121-ARIN


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/public/whoisinaccuracy/index.xhtml
#



Found a referral to rwhois.nyi.net:4321.

%rwhois V-1.5:003eff:00 rwhoisd.nyi.net (by Network Solutions, Inc. V-1.5.9.6)
%referral rwhois://root.rwhois.net:4321/auth-area=.
%ok


[zestysoft]

I'm still getting the same result:

[user@workstation1]$ whois 2610:1c1:1:606c::15:0
[Querying whois.arin.net]
[Redirected to rwhois.nyi.net:4321]
[Querying rwhois.nyi.net]
[rwhois.nyi.net]
%rwhois V-1.5:003eff:00 rwhoisd.nyi.net (by Network Solutions, Inc. V-1.5.9.6)
%referral rwhois://root.rwhois.net:4321/auth-area=.
%ok

This is from a Fedora 23 host, running whois 5.2.11.

Besides, technically my query is valid, it's the answer that is wrong.  :)

Ah, if I disable redirection support I get the same answer as what you got.

[troz]

Ah, if I disable redirection support I get the same answer as what you got.

And that's the key. Your whois is seeing the referral in the data from ARIN and following it. NYI's rwhois server isn't answering your query.

Translation: NYI's rwhois service is broken.

[jbu46]

Host: ftp2.ie.FreeBSD.org
AAAA: 2610:1c1:1:606c::15:0

Results when I run: 'whois 2610:1c1:1:606c::15:0'

[Querying whois.arin.net]
[Redirected to rwhois.nyi.net:4321]
[Querying rwhois.nyi.net]
[rwhois.nyi.net]
%rwhois V-1.5:003eff:00 rwhoisd.nyi.net (by Network Solutions, Inc. V-1.5.9.6)
%referral rwhois://root.rwhois.net:4321/auth-area=.
%ok

When I paste that into he, it response with:

It looks like you submitted an invalid whois query!