mpt.gov.lb dead? o_O

nuclearcat

usa1 ~ # dig +trace www.mpt.gov.lb A

; <<>> DiG 9.4.3-P2 <<>> +trace www.mpt.gov.lb A
;; global options: printcmd
. 419221 IN NS e.root-servers.net.
. 419221 IN NS c.root-servers.net.
. 419221 IN NS f.root-servers.net.
. 419221 IN NS b.root-servers.net.
. 419221 IN NS i.root-servers.net.
. 419221 IN NS g.root-servers.net.
. 419221 IN NS a.root-servers.net.
. 419221 IN NS d.root-servers.net.
. 419221 IN NS k.root-servers.net.
. 419221 IN NS j.root-servers.net.
. 419221 IN NS m.root-servers.net.
. 419221 IN NS l.root-servers.net.
. 419221 IN NS h.root-servers.net.
;; Received 260 bytes from 127.0.0.1#53(127.0.0.1) in 0 ms

lb. 172800 IN NS zeina.aub.edu.lb.
lb. 172800 IN NS rip.psg.com.
lb. 172800 IN NS ns1.dns.aq.
lb. 172800 IN NS sunic.sunet.se.
;; Received 257 bytes from 192.112.36.4#53(g.root-servers.net) in 127 ms

gov.lb. 14400 IN NS ZEINA.AUB.EDU.lb.
gov.lb. 14400 IN NS lara.aub.EDU.
gov.lb. 14400 IN NS rip.psg.com.
gov.lb. 14400 IN NS elissa.AUB.EDU.lb.
;; Received 164 bytes from 203.119.56.132#53(ns1.dns.aq) in 206 ms

;; Warning: ID mismatch: expected ID 59085, got 25674
mpt.gov.lb. 86400 IN NS bow.rain.fr.
mpt.gov.lb. 86400 IN NS ns1.sodetel.net.lb.
;; Received 87 bytes from 147.28.0.39#53(rip.psg.com) in 73 ms

;; Received 32 bytes from 194.51.3.49#53(bow.rain.fr) in 79 ms

One of MPT nameservers fail.
usa1 ~ # dig @ns1.sodetel.net.lb www.mpt.gov.lb A

; <<>> DiG 9.4.3-P2 <<>> @ns1.sodetel.net.lb www.mpt.gov.lb A
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 52792
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:
;www.mpt.gov.lb. IN A

;; ANSWER SECTION:
www.mpt.gov.lb. 38400 IN A 89.108.129.100

;; AUTHORITY SECTION:
mpt.gov.lb. 38400 IN NS ns2.sodetel.net.lb.
mpt.gov.lb. 38400 IN NS ns1.sodetel.net.lb.

;; ADDITIONAL SECTION:
ns1.sodetel.net.lb. 38400 IN A 89.108.128.44
ns2.sodetel.net.lb. 38400 IN A 89.108.129.77

;; Query time: 399 msec
;; SERVER: 89.108.128.44#53(89.108.128.44)
;; WHEN: Mon Jul 12 19:39:55 2010
;; MSG SIZE rcvd: 128

usa1 ~ # dig @bow.rain.fr www.mpt.gov.lb A

; <<>> DiG 9.4.3-P2 <<>> @bow.rain.fr www.mpt.gov.lb A
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: REFUSED, id: 48770
;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
;; WARNING: recursion requested but not available

;; QUESTION SECTION:
;www.mpt.gov.lb. IN A

;; Query time: 79 msec
;; SERVER: 194.51.3.49#53(194.51.3.49)
;; WHEN: Mon Jul 12 19:40:05 2010
;; MSG SIZE rcvd: 32

What a shame...

mmk92

nope works fine

rolf

mmk92 wrotenope works fine

What a shame...

nuclearcat

I gave technical DNS query report, where you can see one DNS server failed.
It is still failed, i check it again (bow.rain.fr)

"Works fine" by opening a browser - it is a shameful way of checking things for "supposed to be a geek".

J4D

If its barely alive , i say we kill it . Can we :P ?

rolf

I dont know if it's any use to you, but here is the same command from within the ogero network:

rolf:~ rolf$ date
Mon Jul 12 21:36:33 EEST 2010
rolf:~ rolf$ dig +trace www.mpt.gov.lb A

; <<>> DiG 9.4.3-P3 <<>> +trace www.mpt.gov.lb A
;; global options:  printcmd
.			480381	IN	NS	g.root-servers.net.
.			480381	IN	NS	j.root-servers.net.
.			480381	IN	NS	d.root-servers.net.
.			480381	IN	NS	f.root-servers.net.
.			480381	IN	NS	m.root-servers.net.
.			480381	IN	NS	i.root-servers.net.
.			480381	IN	NS	b.root-servers.net.
.			480381	IN	NS	e.root-servers.net.
.			480381	IN	NS	h.root-servers.net.
.			480381	IN	NS	c.root-servers.net.
.			480381	IN	NS	a.root-servers.net.
.			480381	IN	NS	l.root-servers.net.
.			480381	IN	NS	k.root-servers.net.
;; Received 449 bytes from 80.118.192.100#53(80.118.192.100) in 136 ms

lb.			172800	IN	NS	zeina.aub.edu.lb.
lb.			172800	IN	NS	rip.psg.com.
lb.			172800	IN	NS	sunic.sunet.se.
lb.			172800	IN	NS	ns1.dns.aq.
;; Received 257 bytes from 192.203.230.10#53(e.root-servers.net) in 291 ms

gov.lb.			14400	IN	NS	ZEINA.AUB.EDU.lb.
gov.lb.			14400	IN	NS	lara.aub.EDU.
gov.lb.			14400	IN	NS	elissa.AUB.EDU.lb.
gov.lb.			14400	IN	NS	rip.psg.com.
;; Received 164 bytes from 192.36.125.2#53(sunic.sunet.se) in 162 ms

mpt.gov.lb.		86400	IN	NS	ns1.sodetel.net.lb.
mpt.gov.lb.		86400	IN	NS	bow.rain.fr.
;; Received 87 bytes from 147.28.0.39#53(rip.psg.com) in 267 ms

;; Received 32 bytes from 194.51.3.49#53(bow.rain.fr) in 208 ms

PS: I am not very advanced with DNS, and i dont understand exactly what the problem is, and what this is supposed to show.

nuclearcat

As u see
;; Received 32 bytes from 194.51.3.49#53(bow.rain.fr) in 208 ms
no answer from there, it is supposed to give A record.

Raficoo

given the last time the site's ever been updated.. i bet it has lots of security holes which some1 can *cough*... enter :P

rolf

When I do it manually, this is what I get.
Weird, something wrong in the trace?

dig +norecurse @elissa.aub.edu.lb www.mpt.gov.lb A

; <<>> DiG 9.4.3-P3 <<>> +norecurse @elissa.aub.edu.lb www.mpt.gov.lb A
; (1 server found)
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 14620
;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 2, ADDITIONAL: 0

;; QUESTION SECTION:
;www.mpt.gov.lb.			IN	A

;; AUTHORITY SECTION:
mpt.gov.lb.		86400	IN	NS	bow.rain.fr.
mpt.gov.lb.		86400	IN	NS	ns1.sodetel.net.lb.

;; Query time: 218 msec
;; SERVER: 194.126.15.169#53(194.126.15.169)
;; WHEN: Mon Jul 12 22:52:10 2010
;; MSG SIZE  rcvd: 87

elissa.aub.edu.lb send me to ns1.sodetel.net.lb

dig @ns1.sodetel.net.lb www.mpt.gov.lb A

; <<>> DiG 9.4.3-P3 <<>> @ns1.sodetel.net.lb www.mpt.gov.lb A
; (1 server found)
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 48817
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:
;www.mpt.gov.lb.			IN	A

;; ANSWER SECTION:
www.mpt.gov.lb.		38400	IN	A	89.108.129.100

;; AUTHORITY SECTION:
mpt.gov.lb.		38400	IN	NS	ns1.sodetel.net.lb.
mpt.gov.lb.		38400	IN	NS	ns2.sodetel.net.lb.

;; ADDITIONAL SECTION:
ns1.sodetel.net.lb.	38400	IN	A	89.108.128.44
ns2.sodetel.net.lb.	38400	IN	A	89.108.129.77

;; Query time: 500 msec
;; SERVER: 89.108.128.44#53(89.108.128.44)
;; WHEN: Mon Jul 12 22:44:28 2010
;; MSG SIZE  rcvd: 128

ns1.sodetel.net.lb returns what seems to be a sodetel webserver IP.
So it seems they are hosted with sodetel.
Their DNS is not well configured I think, maybe some dead entries.

Ah I think I nailed the problem, when you do
dig +norecurse @ns1.sodetel.net.lb www.mpt.gov.lb A
It takes more then 10 seconds to return
Without the norecurse option, it takes less then a second to return
When you do a trace, recursion is disabled. For some reason ns1.sodetel.net.lb becomes very slow when norecurse is set in the packet, so the trace probably times out at that points and you get nothing in the result.

So It's a problem with the sodetel nameserver.

nuclearcat

It is problem with gov.lb root servers, where is incorrectly set french server, who is not hosting anymore this domain

rolf

True bow.rain.fr has not records about this domain.
But what about the problem that I described, is it normal?

nuclearcat

No, also not normal seems. It is weird... last time i check sodetel NS servers - they was obsolete versions, and one of them was vulnerable to buffer overflow. So it is not surprising...

nuclearcat

I was seeking information about legal/illegal ISP's.

J4D

Nuc , provide the cash and everything becomes legal ;) Golden Lebanese rule .

Edit: of course that's corrupt .

nuclearcat

jadberro - nop.
Russian proverb "Proud indians do not take bribes"
I just want to say, corruption is everywhere, just in western world there is less need for it and much more difficult... but still. Here more dangerous than corruption - some personal attitude, that damaging whole country, when politician or executive take decisions not on interest of his workplace, but in his personal attitude.

J4D

nuclearcat wrotejadberro - nop.
Russian proverb "Proud indians do not take bribes"
I just want to say, corruption is everywhere, just in western world there is less need for it and much more difficult... but still. Here more dangerous than corruption - some personal attitude, that damaging whole country, when politician or executive take decisions not on interest of his workplace, but in his personal attitude.

Indeed, its corruption taken to a whole new level .