DNS -- nameservers for .org TLD don't respond when queriednon-recursively

My domain is obliqueuniverse.org. I want to check to make sure that
the parent zone's nameservers have properly delegated to my domain.

I believe the following command outputs all-and-only TLD nameservers
for the .org TLD:

% nslookup -type=ns org.

Server: 192.168.2.2
Address: 192.168.2.2#53

Non-authoritative answer:
org nameserver = tld1.ultradns.net.
org nameserver = tld2.ultradns.net.
org nameserver = a0.org.afilias-nst.info.
org nameserver = b0.org.afilias-nst.org.
org nameserver = c0.org.afilias-nst.info.
org nameserver = d0.org.afilias-nst.org.

Authoritative answers can be found from:
a0.org.afilias-nst.info internet address = 199.19.56.1
a0.org.afilias-nst.info has AAAA address 2001:500:e::1
b0.org.afilias-nst.org internet address = 199.19.54.1
b0.org.afilias-nst.org has AAAA address 2001:500:c::1
c0.org.afilias-nst.info internet address = 199.19.53.1
c0.org.afilias-nst.info has AAAA address 2001:500:b::1
d0.org.afilias-nst.org internet address = 199.19.57.1
d0.org.afilias-nst.org has AAAA address 2001:500:f::1
tld1.ultradns.net internet address = 204.74.112.1
tld1.ultradns.net has AAAA address 2001:502:d399::1
tld2.ultradns.net internet address = 204.74.113.1
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
When I query tld2.ultradns.net (the last one in the list) , I get what
I think is confirmation of correct delegation:

% nslookup -type=ns -norecurse obliqueuniverse.org tld2.ultradns.net

Server: tld2.ultradns.net
Address: 204.74.113.1#53

Non-authoritative answer:
*** Can't find obliqueuniverse.org: No answer

Authoritative answers can be found from:
obliqueuniverse.org nameserver = ns2.dns.rcn.net.
obliqueuniverse.org nameserver = ns1.dns.rcn.net.
obliqueuniverse.org nameserver = jupiter.obliqueuniverse.org.
jupiter.obliqueuniverse.org internet address = 207.237.37.110
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
However, when I run the same query on any of the other nameservers
listed, I get:

"connection timed out; no servers could be reached"
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
I've tried this a number of times on different days, and I get the
same result. Does this really mean that only one TLD nameserver is
working for the .org domain?
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

As always, thanks for giving this matter your attention.

Best Regards,

Vwaju
New York City

Vwaju wrote:
> My domain is obliqueuniverse.org. I want to check to make sure that
> the parent zone's nameservers have properly delegated to my domain.
>
> I believe the following command outputs all-and-only TLD nameservers
> for the .org TLD:
>
> % nslookup -type=ns org.
>
> Server: 192.168.2.2
> Address: 192.168.2.2#53
>
> Non-authoritative answer:
> org nameserver = tld1.ultradns.net.
> org nameserver = tld2.ultradns.net.
> org nameserver = a0.org.afilias-nst.info.
> org nameserver = b0.org.afilias-nst.org.
> org nameserver = c0.org.afilias-nst.info.
> org nameserver = d0.org.afilias-nst.org.
>
> Authoritative answers can be found from:
> a0.org.afilias-nst.info internet address = 199.19.56.1
> a0.org.afilias-nst.info has AAAA address 2001:500:e::1
> b0.org.afilias-nst.org internet address = 199.19.54.1
> b0.org.afilias-nst.org has AAAA address 2001:500:c::1
> c0.org.afilias-nst.info internet address = 199.19.53.1
> c0.org.afilias-nst.info has AAAA address 2001:500:b::1
> d0.org.afilias-nst.org internet address = 199.19.57.1
> d0.org.afilias-nst.org has AAAA address 2001:500:f::1
> tld1.ultradns.net internet address = 204.74.112.1
> tld1.ultradns.net has AAAA address 2001:502:d399::1
> tld2.ultradns.net internet address = 204.74.113.1
> - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
> When I query tld2.ultradns.net (the last one in the list) , I get what
> I think is confirmation of correct delegation:
>
> % nslookup -type=ns -norecurse obliqueuniverse.org tld2.ultradns.net
>
> Server: tld2.ultradns.net
> Address: 204.74.113.1#53
>
> Non-authoritative answer:
> *** Can't find obliqueuniverse.org: No answer
>
> Authoritative answers can be found from:
> obliqueuniverse.org nameserver = ns2.dns.rcn.net.
> obliqueuniverse.org nameserver = ns1.dns.rcn.net.
> obliqueuniverse.org nameserver = jupiter.obliqueuniverse.org.
> jupiter.obliqueuniverse.org internet address = 207.237.37.110
> - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
> However, when I run the same query on any of the other nameservers
> listed, I get:
>
> "connection timed out; no servers could be reached"
> - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
> I've tried this a number of times on different days, and I get the
> same result. Does this really mean that only one TLD nameserver is
> working for the .org domain?
> - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

At first sight this looks like an IPv6 issue to me.
Note that tld2.ultradns.net, the only server listed above that works
for you, is the the only server in the list without an AAAA record.
I guess that your nslookup tries to query the IPv6 addresses of the
other servers while your network doesn't support IPv6.

nslookup -type=ns -norecurse obliqueuniverse.org <server-name>
works for me for each <server-name> you listed above. My nslookup
uses only IPv4 as I've blacklisted the ipv6 kernel module.

Regards,

Kees.

--
Kees Theunissen.

Hello,

Kees Theunissen a écrit :
> Vwaju wrote:
>> When I query tld2.ultradns.net (the last one in the list) , I get what
>> I think is confirmation of correct delegation:
>>
>> % nslookup -type=ns -norecurse obliqueuniverse.org tld2.ultradns.net
[...]
>> However, when I run the same query on any of the other nameservers
>> listed, I get:
>>
>> "connection timed out; no servers could be reached"
[...]
> At first sight this looks like an IPv6 issue to me.
> Note that tld2.ultradns.net, the only server listed above that works
> for you, is the the only server in the list without an AAAA record.
> I guess that your nslookup tries to query the IPv6 addresses of the
> other servers while your network doesn't support IPv6.
>
> nslookup -type=ns -norecurse obliqueuniverse.org <server-name>
> works for me for each <server-name> you listed above. My nslookup
> uses only IPv4 as I've blacklisted the ipv6 kernel module.

And it works fine on an IPv6-capable system with real IPv6 connectivity
too :

$ nslookup -type=ns -norecurse obliqueuniverse.org tld1.ultradns.net
Server: tld1.ultradns.net
Address: 2001:502:d399::1#53

Non-authoritative answer:
*** Can't find obliqueuniverse.org: No answer

Authoritative answers can be found from:
obliqueuniverse.org nameserver = ns2.dns.rcn.net.
obliqueuniverse.org nameserver = ns1.dns.rcn.net.
obliqueuniverse.org nameserver = jupiter.obliqueuniverse.org.
jupiter.obliqueuniverse.org internet address = 207.237.37.110

Same with the other servers. Whether the query is recursive or not does
not seem to make any difference.

I suggest the host tries with the IPv4 address instead of the server name.

> I suggest the host tries with the IPv4 address instead of the server name.

Yes, they all work!

> > I guess that your nslookup tries to query the IPv6 addresses of the
> > other servers while your network doesn't support IPv6.

How would I configure DNS to query the IPv4 addresses?

How would I go about configuring my network to support IPv6?


Thanks for your help, Kees and Pascal!

Best Regards,

Vwaju
New York City