## page was copied from DnsTemplate ##master-page:HelpTemplate <> <> = リゾルバーからの返答 = すくなくとも5種類の返答がある。 周辺のqueryも調査しておくとよさそう。-- ToshinoriMaeno <> これも参考になる。 https://dnschecker.org/#NS/nike.co.jp == dnscache == FreeBSD, Ubuntu (TTL から見て、親・JPからの返答[[../]]を返しているようだ。) {{{ %dig -t ns nike.co.jp @127.0.0.1 ~ ; <<>> DiG 9.12.1 <<>> -t ns nike.co.jp @127.0.0.1 ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 24152 ;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0 ;; QUESTION SECTION: ;nike.co.jp. IN NS ;; ANSWER SECTION: nike.co.jp. 39894 IN NS dns02.bekknet.ad.jp. nike.co.jp. 39894 IN NS dns01.bekknet.ad.jp. ;; Query time: 0 msec ;; SERVER: 127.0.0.1#53(127.0.0.1) ;; WHEN: Tue Oct 25 09:27:37 JST 2022 ;; MSG SIZE rcvd: 79 }}} == unbound == 手元で動かしているもの。 NS, CNAMEをともに返してくるのはおかしい。 {{{ $ dig -t ns nike.co.jp @127.0.0.2 ; <<>> DiG 9.18.1-1ubuntu1.2-Ubuntu <<>> -t ns nike.co.jp @127.0.0.2 ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 28978 ;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ;; QUESTION SECTION: ;nike.co.jp. IN NS ;; ANSWER SECTION: nike.co.jp. 600 IN NS dns02.bekknet.ad.jp. nike.co.jp. 600 IN NS dns01.bekknet.ad.jp. nike.co.jp. 600 IN CNAME cojp.nike.jp. ;; Query time: 251 msec ;; SERVER: 127.0.0.2#53(127.0.0.2) (UDP) ;; WHEN: Tue Oct 25 09:24:25 JST 2022 ;; MSG SIZE rcvd: 114 }}} 類似 %dig -t ns nike.co.jp @218.216.176.116 == 1.1.1.1/8.8.8.8 == RCode NXDOMAIN NSを問い合わせているのに、 CNAMEを返すのも変だ。-- ToshinoriMaeno <> {{{ $ dig -t ns nike.co.jp @1.1.1.1 ; <<>> DiG 9.18.1-1ubuntu1.2-Ubuntu <<>> -t ns nike.co.jp @1.1.1.1 ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 63455 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ; NSID: 34 34 38 6d 31 32 38 ("448m128") ;; QUESTION SECTION: ;nike.co.jp. IN NS ;; ANSWER SECTION: nike.co.jp. 600 IN CNAME cojp.nike.jp. ;; AUTHORITY SECTION: nike.jp. 900 IN SOA ns-1870.awsdns-41.co.uk. awsdns-hostmaster.amazon.com. 1 7200 900 1209600 86400 ;; Query time: 20 msec ;; SERVER: 1.1.1.1#53(1.1.1.1) (UDP) ;; WHEN: Tue Oct 25 09:20:51 JST 2022 ;; MSG SIZE rcvd: 161 }}} == OpenDNS == {{{ $ dig -t ns nike.co.jp @208.67.222.220 ; <<>> DiG 9.18.1-1ubuntu1.2-Ubuntu <<>> -t ns nike.co.jp @208.67.222.220 ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 3055 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ; NSID: 6d 35 33 2e 6e 72 74 ("m53.nrt") ;; QUESTION SECTION: ;nike.co.jp. IN NS ;; ANSWER SECTION: nike.co.jp. 600 IN CNAME cojp.nike.jp. ;; AUTHORITY SECTION: nike.jp. 900 IN SOA ns-1870.awsdns-41.co.uk. awsdns-hostmaster.amazon.com. 1 7200 900 1209600 86400 ;; Query time: 15 msec ;; SERVER: 208.67.222.220#53(208.67.222.220) (UDP) ;; WHEN: Tue Oct 25 09:54:43 JST 2022 ;; MSG SIZE rcvd: 161 }}} == 9.9.9.9 == NS, CNAMEの両方を返すのはもっと変か。(Unbound ?) {{{ $ dig -t ns nike.co.jp @9.9.9.9 ; <<>> DiG 9.18.1-1ubuntu1.2-Ubuntu <<>> -t ns nike.co.jp @9.9.9.9 ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 27575 ;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ; NSID: 72 65 73 37 32 30 2e 71 68 6e 64 31 2e 72 72 64 6e 73 2e 70 63 68 2e 6e 65 74 ("res720.qhnd1.rrdns.pch.net") ;; QUESTION SECTION: ;nike.co.jp. IN NS ;; ANSWER SECTION: nike.co.jp. 600 IN NS dns01.bekknet.ad.jp. nike.co.jp. 600 IN NS dns02.bekknet.ad.jp. nike.co.jp. 600 IN CNAME cojp.nike.jp. ;; Query time: 8 msec ;; SERVER: 9.9.9.9#53(9.9.9.9) (UDP) ;; WHEN: Tue Oct 25 09:23:07 JST 2022 ;; MSG SIZE rcvd: 144 }}} == ? == おかしな返答 {{{ ;; ANSWER SECTION: nike.co.jp. 600 IN NS dns01.bekknet.ad.jp. nike.co.jp. 600 IN NS dns02.bekknet.ad.jp. }}} ---- CategoryDns CategoryWatch CategoryTemplate