ERROR: I could not get any A records for www.....

[redeye]

I have an issue with one domain and need some help.

A customer is complaining that his website is not visible by every one. Depending on which ISP they have the website can be found or not. The majoroty is working, but a few not. We've spend two days on checking what is wrong, but are on a dead end.

When we check the website with intodns we see:

http://www.intodns.com/xxx.nl

ERROR: I could not get any A records for www.xxxx.nl!

(I only do a cache request, if you recently added a WWW A record, it might not show up here.)

It could be solved allready (it's cached), but it's the only site that gives this error and I can't find anything that could be wrong.

When I use http://www.dnssniffer.com/en/report/www.xxxx.nl it's reporting fine.

Checking the nameservers itself:

dig @ns1.scrim.nl A www.xxx.nl

; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.17.rc1.el6_4.4 <<>> @ns1.scrim.nl A www.xxxx.nl
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 13506
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:
;www.xxxxx.nl. IN A

;; ANSWER SECTION:
www.xxxx.nl. 14400 IN A 93.184.96.xx

;; AUTHORITY SECTION:
xxx.nl. 14400 IN NS ns1.scrim.nl.
xxx.nl. 14400 IN NS ns2.scrim.nl.

;; ADDITIONAL SECTION:
ns1.scrim.nl. 14400 IN A 93.184.96.76
ns2.scrim.nl. 14400 IN A 93.184.96.70

;; Query time: 0 msec
;; SERVER: 93.184.96.76#53(93.184.96.76)
;; WHEN: Thu May 23 13:04:08 2013
;; MSG SIZE rcvd: 128


dig @ns2.scrim.nl A www.xxxx.nl

; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.17.rc1.el6_4.4 <<>> @ns2.scrim.nl A www.xxx.nl
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 53182
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:
;www.xxx.nl. IN A

;; ANSWER SECTION:
www.xxx.nl. 14400 IN A 93.184.96.68

;; AUTHORITY SECTION:
xxx.nl. 14400 IN NS ns1.scrim.nl.
xxx.nl. 14400 IN NS ns2.scrim.nl.

;; ADDITIONAL SECTION:
ns1.scrim.nl. 14400 IN A 93.184.96.76
ns2.scrim.nl. 14400 IN A 93.184.96.70

;; Query time: 3 msec
;; SERVER: 93.184.96.70#53(93.184.96.70)
;; WHEN: Thu May 23 13:04:44 2013
;; MSG SIZE rcvd: 128

I've tried to delete the account and set it up again, but no help.

Any experts have any tips????

 

[zEitEr]

Hello,

I'd guess either you are or your DC is blocking some countries, check this:

http://host-tracker.com/check_res_ajx/13156945-0/


Then if to do:

# nslookup www.beeldeningees.nl
I get Address: 93.184.96.68

If to do

# nslookup beeldeningees.nl
I get Address: 93.184.96.77



How does the DNS zone looks like?

 

[redeye]

Hello,

I'd guess either you are or your DC is blocking some countries, check this:

http://host-tracker.com/check_res_ajx/13156945-0/

I've checked the firewall, and there are some ip's blocked on UDP 53, this is now fixed, so this could be something. I will check in a few hours, nice tip!

Then if to do:

# nslookup www.beeldeningees.nl
I get Address: 93.184.96.68

If to do

# nslookup beeldeningees.nl
I get Address: 93.184.96.77

This is correct, the site is running on a external Windows server, but the 77 is the DA server.

How does the DNS zone looks like?

Did you mean this:
zone "beeldeningees.nl" { type master; file "/var/named/beeldeningees.nl.db"; };

 

[Richard G]

This is correct, the site is running on a external Windows server, but the 77 is the DA server.

Did you change that now? Because both beeldeningees.nl and www.beeldeningees.nl are on the 68 ip.

Website is looking fine from here (ziggo Netherlands).

 

[zEitEr]

Did you mean this:
zone "beeldeningees.nl" { type master; file "/var/named/beeldeningees.nl.db"; };

Please post results of

cat /var/named/beeldeningees.nl.db

 

[redeye]

Solved: This domain was transfered to us. The "old" hoster had DNSSEC enabled and we didn't. We had to change it through the registrar and after that it was solved.

The registrar told me that we could not see, nor change it ourselfs. I'm curious, how do other hosters deal with this?

 

[chatwizrd]

I have never heard of dnssec being enabled through a registrar.