|
Zonecheck: Root-servers list is not consistent with ICANN
![[de]](/s/countries/de.gif) Shadow Hawkins on Friday, 01 February 2008 08:11:57
Hello,
i'm trying to get a "full" ipv6 setup working.
I have set up my subnets on three nameservers and from my point of view, all is correct ;)
But the zonecheck tool provided here is saying:
Fatal:
Root-servers list is not consistent with ICANN
Where do i have to start searching? In the db.root are only ipv4 hosts. Is that the problem? But ipv6 will be there at 4th of february or?
Zonecheck: Root-servers list is not consistent with ICANN
You might want to try and provide details on exactly which zone you are looking at and which Zonecheck with which parameters is giving any error.
db.root is irrelevant in most cases as the second a BIND or other dns server starts up, it uses that list to fetch the current db.root (the glue for .) from one of the listed servers. You can though update the db.root already to include the new IPv6 glued servers too.
Zonecheck: Root-servers list is not consistent with ICANN
Shadow Hawkins on Friday, 01 February 2008 10:24:48
Well that is the message i get on all my subets.
Every subnet is setup identically.
The url provided at the subnet overview is:
https://noc.sixxs.net/tools/zonecheck/?zone=7.6.3.1.8.f.6.0.1.0.0.2.ip6.arpa
Error message:
ZoneCheck: 7.6.3.1.8.f.6.0.1.0.0.2.ip6.arpa.
Test results
---- fatal ----
f: Root-servers list is not consistent with ICANN
* ns5.okg-computer.de./62.141.42.153
Final status
FAILURE
Any hints?
Zonecheck: Root-servers list is not consistent with ICANN
Do a "dig @ns5.okg-computer.de . NS", this reveals that that machine apparently doesn't have any information about where the root servers are, but it is returning NOERROR.
If it is an authoritative only server (which it should be), it should be returning "REFUSED" for all the zones it isn't authoritative for.
Zonecheck: Root-servers list is not consistent with ICANN
Shadow Hawkins on Friday, 01 February 2008 10:49:50
Yeah great, thx for the hint. It was a remaining config from an old setup :(
Now all zones are fine.
Zonecheck: Root-servers list is not consistent with ICANN
![[no]](/s/countries/no.gif) Shadow Hawkins on Friday, 01 February 2008 20:18:17
On a related issue:
I get a warning about "Root-servers IP addresses are not consistent with ICANN" when testing against any DNS server allowing recursive queries. I guess this might be because the Zonecheck tool has a hardcoded list of root server IP addresses which hasn't been updated since l.root-servers.net changed its address?
Example zone: https://noc.sixxs.net/tools/zonecheck/?zone=4.b.f.f.8.d.6.1.1.0.0.2.ip6.arpa
Zonecheck: Root-servers list is not consistent with ICANN
It indeed keeps a local list which is updated now.
You should though not have an open recursive DNS server for the obvious reasons...
|
![[ch]](/s/countries/ch.gif)
on Friday, 01 February 2008 10:04:37
Posting is only allowed when you are