[CentOS-mirror] Issue with mirror.lihnidos.org

Fri May 21 16:22:19 UTC 2010
Damjan Sirnik <damjan at sirnik.si>

> >From our mirror checking host:

> [ralph at server ~]$ host -a mirror.lihnidos.org Trying "mirror.lihnidos.org"
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 46473 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 0

> ;; QUESTION SECTION:
> ;mirror.lihnidos.org.           IN      ANY

> ;; ANSWER SECTION:
> mirror.lihnidos.org.    25746   IN      AAAA    2001:15c0:6626:19::2b

> ;; AUTHORITY SECTION:
> lihnidos.org.           25746   IN      NS      gimb-dijaki-1.lihnidos.org.
> lihnidos.org.           25746   IN      NS      ignacia.lihnidos.org.

> Received 115 bytes from 72.232.223.58#53 in 1 ms

> >From my home machine:

> iPanic:Music ralph$ host -a mirror.lihnidos.org Trying "mirror.lihnidos.org"
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 27295 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 0

> ;; QUESTION SECTION:
> ;mirror.lihnidos.org.           IN      ANY

> ;; ANSWER SECTION:
> mirror.lihnidos.org.    86334   IN      AAAA    2001:15c0:6626:19::2b

> ;; AUTHORITY SECTION:
> lihnidos.org.           86333   IN      NS      ignacia.lihnidos.org.
> lihnidos.org.           86333   IN      NS      gimb-dijaki-1.lihnidos.org.

> Yet I am able to reach your mirror with my browser, but (again from my home machine):

Thank you for your in-depth analyze

> iPanic:Music ralph$ curl http://mirror.lihnidos.org/CentOS/timestamp.txt
> curl: (6) Couldn't resolve host 'mirror.lihnidos.org'
iPanic:Music ralph$

>> Does anybody know why this happens? IPv6 firewall is configured to 
>> allow HTTP trafic.

> Looks like I only get the AAAA address. Home machine is OS X, mirror checker is CentOS.

You were right. I did only have AAAA record for mirror.lihnidos.org and A record for *.lihnidos.org. And because absolute A/AAAA entries override scaron entries (*), DNS system was only returning AAAA record. I have added A record now, so it should work normally now.


Thank you and best regards,
Damjan Sirnik