named caching server odd lookup issue!

Linux and Unix-Like Red Hat
1

Hello All,

I have resubmitted this issue I am having as the my last post was moved to programming as the issue appeared to be specific to java but on further investigation this is not the case.

The issues also arises when running the host command and appears to be either a problem with the named caching server running on Centos or the response is mangle in someway for the url webservices.securetrading.net.

The problem arrises as soon as the a lookup up is made for ipv6 AAAA record.
It only occurs with the above mentioned URL.

I have installed a separate instance of centos running named caching server on a virtualbox host running under OSX on my home network and can confirm the issue is still arising. So it's not limited to our business network.

I can also confirm the issue also arrises when changing to different nameservers ie when using google public nameserver 8.8.8.8

After a period of time the nslookup starts to resolve correctly but as soon as I execute a host command or a java program that requires a lookup to the ipv6 AAAA the issue returns.

Please find below details of issue.

Kind Regards,
SRG

nslookup one:

# nslookup webservices.securetrading.net
Server:		127.0.0.1
Address:	127.0.0.1#53

Non-authoritative answer:
Name:	webservices.securetrading.net
Address: 194.74.4.78

tcpdump output nslookup one:
11:39:40.014854 IP proxy.59045 > ns2.server.co.uk.domain:  39056+ [1au] A? webservices.securetrading.net. (58)
11:39:40.041373 IP ns2.server.co.uk.domain > proxy.59045:  39056 1/3/1 (135)

Host command lookup:

# host  webservices.securetrading.net
webservices.securetrading.net has address 195.224.56.78
Host webservices.securetrading.net not found: 3(NXDOMAIN)
Host webservices.securetrading.net not found: 3(NXDOMAIN)

tcpdump output from host command:
11:41:02.302382 IP proxy.50625 > ns2.server.co.uk.domain:  36747+ [1au] A? webservices.securetrading.net. (58)
11:41:02.303136 IP ns2.server.co.uk.domain > proxy.59482:  51587 1/8/9 (412)
11:41:02.334418 IP ns2.server.co.uk.domain> proxy.50625:  36747 1/3/1 (135)
11:41:02.335576 IP proxy.62245 > ns2.server.co.uk.domain:  13209+ [1au] AAAA? webservices.securetrading.net. (58)
11:41:02.366372 IP ns2.server.co.uk.domain > proxy.62245:  13209 NXDomain 0/1/1 (126)

nslookup two:

# nslookup webservices.securetrading.net
Server:		127.0.0.1
Address:	127.0.0.1#53

** server can't find webservices.securetrading.net: NXDOMAIN

Please note my original post is the following:
http://www.unix.com/programming/174294-java-strange-nslookup-issue-via-dns.html

2
  • did you capture network while process nslookup_2?
    for example
# tcpdump port 53 -s0 -nn -w nslookup_2.pcap
and you can check packet traffic on wireshark (or tshark) or similiar other progs
  • what is messages/logs from caching-server d(what is status caching-nameserver or named or ..) when received this error?
  • did you look to your cached server confs files may releated about this issue (any periods or ipv6)?
  • check your firewall settings if has?

regards
ygemici