DNS showing a incorrect IP address

Eduardo_Dal_Molin · September 23, 2021, 11:59am

I have two unbound om servers until i reinstalled the s.o and unbound on both again already.

The problem that occurs is the following, when translating the name "cbpdigital.colegiobatistapalmas.com.br" the dns gives me a wrong IP and SOA:

"209.99.40.222" "dns9.parkpage.foundationapi.com. abuse.opticaljungle.com ." when restarting unbound it tells me the correct IP again
"162.214.113.50"

I restart the unbound from 1 to twice a day. Someone would know what that would be? Below are some tests.

root@dnsrec1:/home/marcelo # drill cbpdigital.colegiobatistapalmas.com.br
;; ->>HEADER<<- opcode: QUERY, rcode: NOERROR, id: 10919
;; flags: qr rd ra ; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION:
;; cbpdigital.colegiobatistapalmas.com.br.      IN      A

;; ANSWER SECTION:
cbpdigital.colegiobatistapalmas.com.br. 575     IN      A       209.99.40.222

;; AUTHORITY SECTION:

;; ADDITIONAL SECTION:

;; Query time: 0 msec
;; SERVER: 127.0.0.1
;; WHEN: Thu Sep 23 08:41:29 2021
;; MSG SIZE  rcvd: 72
root@dnsrec1:/home/marcelo # drill SOA cbpdigital.colegiobatistapalmas.com.br
;; ->>HEADER<<- opcode: QUERY, rcode: NOERROR, id: 34248
;; flags: qr rd ra ; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION:
;; cbpdigital.colegiobatistapalmas.com.br.      IN      SOA

;; ANSWER SECTION:
cbpdigital.colegiobatistapalmas.com.br. 3600    IN      SOA     dns9.parkpage.foundationapi.com. abuse.opticaljungle.com. 2011062801 3600 900 604800 86400

;; AUTHORITY SECTION:

;; ADDITIONAL SECTION:

;; Query time: 212 msec
;; SERVER: 127.0.0.1
;; WHEN: Thu Sep 23 08:41:31 2021
;; MSG SIZE  rcvd: 143
root@dnsrec1:/home/marcelo # /usr/local/etc/rc.d/unbound restart
Stopping unbound.
Waiting for PIDS: 35889.
Obtaining a trust anchor...
Starting unbound.
root@dnsrec1:/home/marcelo # drill cbpdigital.colegiobatistapalmas.com.br
;; ->>HEADER<<- opcode: QUERY, rcode: NOERROR, id: 63986
;; flags: qr rd ra ; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION:
;; cbpdigital.colegiobatistapalmas.com.br.      IN      A

;; ANSWER SECTION:
cbpdigital.colegiobatistapalmas.com.br. 14400   IN      A       162.214.113.50

;; AUTHORITY SECTION:

;; ADDITIONAL SECTION:

;; Query time: 248 msec
;; SERVER: 127.0.0.1
;; WHEN: Thu Sep 23 08:41:44 2021
;; MSG SIZE  rcvd: 72
root@dnsrec1:/home/marcelo # drill SOA cbpdigital.colegiobatistapalmas.com.br
;; ->>HEADER<<- opcode: QUERY, rcode: NOERROR, id: 33604
;; flags: qr rd ra ; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION:
;; cbpdigital.colegiobatistapalmas.com.br.      IN      SOA

;; ANSWER SECTION:
cbpdigital.colegiobatistapalmas.com.br. 3600    IN      SOA     dns9.parkpage.foundationapi.com. abuse.opticaljungle.com. 2011062801 3600 900 604800 86400

;; AUTHORITY SECTION:

;; ADDITIONAL SECTION:

;; Query time: 456 msec
;; SERVER: 127.0.0.1
;; WHEN: Thu Sep 23 08:41:47 2021
;; MSG SIZE  rcvd: 143

Renaud_Allard · September 23, 2021, 12:09pm

Hi,

I have two unbound om servers until i reinstalled the s.o and unbound on both again already.

The problem that occurs is the following, when translating the name "cbpdigital.colegiobatistapalmas.com.br" the dns gives me a wrong IP and SOA:

"209.99.40.222" "dns9.parkpage.foundationapi.com. abuse.opticaljungle.com ." when restarting unbound it tells me the correct IP again"162.214.113.50"

That's not an unbound problem, but a DNS problem at colegiobatistapalmas.com.br

whois colegiobatistapalmas.com.br 2>&1 | grep nserver
nserver: ns1.colegiobatistapalmas.com.br 162.214.113.50
nserver: ns2.colegiobatistapalmas.com.br 162.214.89.42

host -t ns colegiobatistapalmas.com.br
colegiobatistapalmas.com.br name server ns2.cbpdigital.life.
colegiobatistapalmas.com.br name server ns1.cbpdigital.life.

host ns1.cbpdigital.life
ns1.cbpdigital.life has address 209.99.40.222
host ns2.cbpdigital.life
ns2.cbpdigital.life has address 209.99.40.222

host -t ns colegiobatistapalmas.com.br ns1.cbpdigital.life
colegiobatistapalmas.com.br name server dns9.parkpage.foundationapi.com.
colegiobatistapalmas.com.br name server dns10.parkpage.foundationapi.com.

You can also check this page:
https://www.dnsinspect.com/colegiobatistapalmas.com.br/10582270

Jaap · September 23, 2021, 12:30pm

Renaud Allard via Unbound-users writes:

> I have two unbound om servers until i reinstalled the s.o and unbound on
> both again already.
>
> The problem that occurs is the following, when translating the name
> "cbpdigital.colegiobatistapalmas.com.br" the dns gives me a wrong IP and
> SOA:
>
> "209.99.40.222" "dns9.parkpage.foundationapi.com.
> abuse.opticaljungle.com ." when restarting unbound it tells me the
> correct IP again"162.214.113.50"
>

That's not an unbound problem, but a DNS problem at
colegiobatistapalmas.com.br

I was about to sate the same.

whois colegiobatistapalmas.com.br 2>&1 | grep nserver
nserver: ns1.colegiobatistapalmas.com.br 162.214.113.50
nserver: ns2.colegiobatistapalmas.com.br 162.214.89.42

A "drill -T colegiobatistapalmas.com.br" will show you that as well
(and find some more nameservers ns[12].cbpdigital which give wrong
answers). See below

jaap

$ drill -T colegiobatistapalmas.com.br
. 518400 IN NS a.root-servers.net.
. 518400 IN NS b.root-servers.net.
. 518400 IN NS c.root-servers.net.
. 518400 IN NS d.root-servers.net.
. 518400 IN NS e.root-servers.net.
. 518400 IN NS f.root-servers.net.
. 518400 IN NS g.root-servers.net.
. 518400 IN NS h.root-servers.net.
. 518400 IN NS i.root-servers.net.
. 518400 IN NS j.root-servers.net.
. 518400 IN NS k.root-servers.net.
. 518400 IN NS l.root-servers.net.
. 518400 IN NS m.root-servers.net.
br. 172800 IN NS a.dns.br.
br. 172800 IN NS b.dns.br.
br. 172800 IN NS c.dns.br.
br. 172800 IN NS d.dns.br.
br. 172800 IN NS e.dns.br.
br. 172800 IN NS f.dns.br.
colegiobatistapalmas.com.br. 3600 IN NS ns1.colegiobatistapalmas.com.br.
colegiobatistapalmas.com.br. 3600 IN NS ns2.colegiobatistapalmas.com.br.
colegiobatistapalmas.com.br. 14400 IN A 162.214.113.50
colegiobatistapalmas.com.br. 86400 IN NS ns2.cbpdigital.life.
colegiobatistapalmas.com.br. 86400 IN NS ns1.cbpdigital.life.

$ drill @ns1.cbpdigital.life colegiobatistapalmas.com.br
;; ->>HEADER<<- opcode: QUERY, rcode: NOERROR, id: 29959
;; flags: qr aa rd ; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION:
;; colegiobatistapalmas.com.br. IN A

;; ANSWER SECTION:
colegiobatistapalmas.com.br. 300 IN A 209.99.40.222

;; AUTHORITY SECTION:

;; ADDITIONAL SECTION:

;; Query time: 118 msec
;; SERVER: 209.99.40.222
;; WHEN: Thu Sep 23 14:28:20 2021
;; MSG SIZE rcvd: 61

Eduardo_Dal_Molin · September 23, 2021, 1:43pm

Thanks for the help, I will call the domain holder to solve the problem.