Maintained by: NLnet Labs


Paul Wouters
Tue Feb 17 07:20:59 CET 2009

On Mon, 16 Feb 2009, krishna e bera wrote:

> > Anyone able to lookup
> > 
> > I tried using the resolvers running Unbound but keep getting NXDOMAIN. 
> > resolvers running BIND however returns the following:

I got ServFail.

it first gets the CNAME: is an alias for

Seems there is only 1 NS for, which is There is only one NS for,
which is So glue is needed from .com.

.com lists 2 NS records ( and,
both resolving to, which is the recursive nameserver. unbound
drops the second NS because the glue is bad, the child zone gives NXDOMAIN.

unbound does get there:

[1234850471] libunbound[14359:0] info: response for < A IN>
[1234850471] libunbound[14359:0] info: reply from <>
[1234850471] libunbound[14359:0] info: query response was ANSWER

But if you try to get an answer from there:

dig -t ns  +norecurse @


;; AUTHORITY SECTION:		3600	IN	SOA 2008031101 86400 3600 86400 3600

It does not know the answer. I am not sure where bind picked up the
answer (mine does the same, it did find it)