error message Servfail

manjeetsmahi · ‎06-05-2009

Hi Experts,

If i try to nslookup directly with GSS ip address. I do get a responce with vip ip address.

When i use my local dns server.. where i have an entry to saying my authorative server for domain x.com is GSS.

If use the dns server ip address ..it is not resolving. I see the following message in tcp dump of GSS.

12:58:42.183691 IP (tos 0x20, ttl 55, id 0, offset 0, flags [DF], proto 17, length: 65) y.y.y.y.24275 > 10.71.200.10.domain: [udp sum ok] 27757 A? x.com. (37)

12:58:42.184066 IP (tos 0x0, ttl 64, id 343, offset 0, flags [DF], proto 17, length: 65) 10.71.200.10.domain > y.y.y.y.24275: [bad udp cksum 36e!] 27757 ServFail- q: A? x.com. 0/0/0 (37)

Request is coming to GSS but it is not sending out vip ip address..

Gss working on Version 3.0(2)

Any idea ?

Gilles Dufour · ‎06-08-2009

Did you define proximity constraints ?

CSCsi08784 GSS should send SERVFAIL rcode if proximity constraints are not met

Or does it match the same rule from the dns server and from a client directly ?

G.

manjeetsmahi · ‎06-09-2009

The bug was internal one .. but information was usful