Hi,
Today, some of our customers could not resolve
state.gov by our cache server.
I found state.gov is served by dnsauth1.sys.gtei.net,
dnsauth2.sys.gtei.net, dnsauth3.sys.gtei.net. Using
some others' DNS servers I found their IP addresses
should be 4.2.49.2, 4.2.49.3, 4.2.49.4. But, our cache
server(BIND9.3.1) got some othere IPs( I've tried
restart bind9.3.1). So, it always failed to resolve
state.gov. After restarting BIND9.3.1 again, I did
"rndc flush" for several times, then it comes back.
Why? is there something poisoned ?
Joe
=========== BIND9 got wrong server IP ====
set debug
dnsauth1.sys.gtei.net
Server: dnsv2.zjhzptt.net.cn
Address: 202.101.172.133
;; res_nmkquery(QUERY, dnsauth1.sys.gtei.net, IN, A)