dig

hunter86_bg · 06-13-2021, 08:33 AM

I have recently noticed that my local firewall (which also plays the role of DNS) is behaving strangely and I got the following output:

Code:

user@laptop:~> dig +noall  +answer engine.localdomain  ANY
user@laptop:~> echo $?
0
user@laptop:~> dig +noall  +answer engine.localdomain  A
engine.localdomain.     3600    IN      A       192.168.1.2
user@laptop:~> echo $?
0

The full output is:

Code:

user@laptop:~> dig engine.localdomain

; <<>> DiG 9.16.6 <<>> engine.localdomain
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 36115
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; QUESTION SECTION:
;engine.localdomain.            IN      A

;; ANSWER SECTION:
engine.localdomain.     3600    IN      A       192.168.1.2

;; Query time: 0 msec
;; SERVER: 192.168.1.1#53(192.168.1.1)
;; WHEN: нд юни 13 16:31:48 EEST 2021
;; MSG SIZE  rcvd: 63

What's the difference between ANY and A ? I always thought that ANY should provide the A and any other type of record for this system.

berndbausch · 06-14-2021, 12:39 AM

Quote:

Originally Posted by hunter86_bg

What's the difference between ANY and A ? I always thought that ANY should provide the A and any other type of record for this system.

Me too. My conclusion is that this DNS server has a single resource record.

!!! · 06-14-2021, 12:56 AM

Might this be related (?):
https://blog.cloudflare.com/rfc8482-...oodbye-to-any/

hunter86_bg · 06-14-2021, 01:08 AM

Hm ... Most probably, yes.
I'll check with the oVirt's community and maybe we can use dig with A and AAAA instead.

elgrandeperro · 06-14-2021, 12:20 PM

The ANY request is totally optional now, and being phased out:

Oh, it is referenced above, but it has a RFC 8482. Some servers refuse, some just return.

vincix · 06-19-2021, 09:20 AM

With dig I've noticed that often you get the A record only, if you start querying with ANY, but then if you query for other types of records, such as MX, TXT, and then you use ANY again, these previous answers (for A, MX, TXT) are going to show up, as if they're in the dns cache, somewhere (maybe from local/ISP DNS server responds?)