DNS for ben.edu

We are the primary DNS servers for the ben.edu domain. We seem to be having an issue with an AT&T server that is responding with incorrect A records for www.ben.edu<http://www.ben.edu> and ben.edu.

What it SHOULD be the response:
nslookup www.ben.edu
Server: 63.250.224.66
Address: 63.250.224.66#53

www.ben.edu canonical name = ben.edu.
Name: ben.edu
Address: 38.100.120.100

What 12.127.17.83 is responding with:

www.ben.edu

Server: tbru.br.rs.els-gms.att.net
Address: 12.127.17.83

Non-authoritative answer:
Name: www.ben.edu
Address: 208.91.197.132

This appears to be affecting only iPhones and iPads on the AT&T network. Is anybody else having problems with this? Are there any AT&T people on this list that can help?

Tim Huffman
Business Only Broadband
777 Oakmont Lane, Suite 2000, Westmont, IL 60559
Direct: 630.590.6012 | Main: 630.590.6000 | Fax: 630.986.2496
thuffman@bobbroadband.com<mailto:thuffman@bobbroadband.com> | http://www.bobbroadband.com/
Cell: 630.340.1925 | Toll-Free Customer Support: 877.262.4553
[https://staticapp.icpsc.com/icp/loadimage.php/mogile/933825/747f0f3e66a4e0ce7633ff898bfc5121/image/png] Follow Us on LinkedIn<http://www.linkedin.com/company/business-only-broadband> | [https://files.icontact.com/templates/v2/CleanAndSimple/images/twitter.gif] Follow Us on Twitter<https://twitter.com/#!/BOBbroadband>
P please consider the environment prior to printing

image001.png

image002.gif

We are the primary DNS servers for the ben.edu domain. We seem to be
having an issue with an AT&T server that is responding with incorrect A
records for www.ben.edu<http://www.ben.edu> and ben.edu.

What it SHOULD be the response:
nslookup www.ben.edu
Server: 63.250.224.66
Address: 63.250.224.66#53

www.ben.edu canonical name = ben.edu.
Name: ben.edu
Address: 38.100.120.100

What 12.127.17.83 is responding with:
> www.ben.edu
Server: tbru.br.rs.els-gms.att.net
Address: 12.127.17.83

Non-authoritative answer:
Name: www.ben.edu
Address: 208.91.197.132

Looks to be right now. Did you wait a full day for the old records
to timeout of the caches?

; <<>> DiG 9.10.0pre-alpha <<>> www.ben.edu @tbru.br.rs.els-gms.att.net
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 8202
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;www.ben.edu. IN A

;; ANSWER SECTION:
www.ben.edu. 86355 IN CNAME ben.edu.
ben.edu. 86355 IN A 38.100.120.100

;; Query time: 164 msec
;; SERVER: 12.127.17.83#53(12.127.17.83)
;; WHEN: Sat Oct 27 14:45:26 2012
;; MSG SIZE rcvd: 70

Mark,

Looks to be right now.

Nope. Depends on from where you ask (presumably the AT&T resolvers are anycast). This is from a machine at LINX just now:

% dig @12.127.17.83 www.ben.edu

; <<>> DiG 9.9.2-vjs287.12 <<>> @12.127.17.83 www.ben.edu
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 58630
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;www.ben.edu. IN A

;; ANSWER SECTION:
www.ben.edu. 300 IN A 208.91.197.132

;; Query time: 142 msec
;; SERVER: 12.127.17.83#53(12.127.17.83)
;; WHEN: Sat Oct 27 06:21:06 2012
;; MSG SIZE rcvd: 56

drc@shaun:~ % dig @12.127.17.83 www.ben.edu ns

; <<>> DiG 9.9.2-vjs287.12 <<>> @12.127.17.83 www.ben.edu ns
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 15853
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;www.ben.edu. IN NS

;; ANSWER SECTION:
www.ben.edu. 300 IN NS ns2432.ztomy.com.
www.ben.edu. 300 IN NS ns1432.ztomy.com.

;; Query time: 134 msec
;; SERVER: 12.127.17.83#53(12.127.17.83)
;; WHEN: Sat Oct 27 06:21:14 2012
;; MSG SIZE rcvd: 91

This is from a colo near Dallas:

% dig @12.127.17.83 www.ben.edu

; <<>> DiG 9.7.7 <<>> @12.127.17.83 www.ben.edu
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 61112
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;www.ben.edu. IN A

;; ANSWER SECTION:
www.ben.edu. 76133 IN CNAME ben.edu.
ben.edu. 76133 IN A 38.100.120.100

;; Query time: 2 msec
;; SERVER: 12.127.17.83#53(12.127.17.83)
;; WHEN: Sat Oct 27 05:22:51 2012
;; MSG SIZE rcvd: 59

and this is from Comcast in the Bay Area:

% dig @12.127.17.83 www.ben.edu

; <<>> DiG 9.9.0rc1 <<>> @12.127.17.83 www.ben.edu
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 51363
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;www.ben.edu. IN A

;; ANSWER SECTION:
www.ben.edu. 76097 IN CNAME ben.edu.
ben.edu. 76097 IN A 38.100.120.100

;; Query time: 110 msec
;; SERVER: 12.127.17.83#53(12.127.17.83)
;; WHEN: Fri Oct 26 22:23:46 2012
;; MSG SIZE rcvd: 70

Regards,
-drc