sbm.itb.ac.id dns problem

{'definitions': [{'query_class': 'IN', 'description': 'DNS resolution of sbm.itb.ac.id from ID', 'use_probe_resolver': True, 'af': 4, 'query_argument': 'sbm.itb.ac.id', 'query_type': 'SOA', 'type': 'dns', 'is_oneoff': True, 'recursion_desired': True, 'cd': True}], 'probes': [{'requested': 100, 'type': 'country', 'value': 'ID', 'tags': {'include': ['system-resolves-a-correctly', 'system-resolves-aaaa-correctly']}}]}

Measurement #7525864 for sbm.itb.ac.id/SOA uses 41 probes

Warning, probe 18845 never got reply from any resolver

Warning, probe 21067 never got reply from any resolver

Warning, probe 21083 never got reply from any resolver

Warning, probe 21758 never got reply from any resolver

Warning, probe 21849 never got reply from any resolver

Warning, probe 22201 never got reply from any resolver

Warning, probe 23007 never got reply from any resolver

Warning, probe 23331 never got reply from any resolver

Warning, probe 23423 never got reply from any resolver

Warning, probe 23473 never got reply from any resolver

Warning, probe 24260 never got reply from any resolver

Warning, probe 25259 never got reply from any resolver

Warning, probe 25592 never got reply from any resolver

Warning, probe 26852 never got reply from any resolver

Warning, probe 27468 never got reply from any resolver

Warning, probe 28081 never got reply from any resolver

Warning, probe 28619 never got reply from any resolver

Warning, probe 28681 never got reply from any resolver

Warning, probe 28697 never got reply from any resolver

Warning, probe 28719 never got reply from any resolver

Warning, probe 29291 never got reply from any resolver

Warning, probe 29296 never got reply from any resolver

Warning, probe 29356 never got reply from any resolver

Warning, probe 4941 never got reply from any resolver

Warning, probe 4985 never got reply from any resolver

Warning, probe 6169 never got reply from any resolver

[ns1.sbm.itb.ac.id. admin.sbm.itb.ac.id. 2017011003 10800 3600 3600 3600] : 1 occurrences (resolvers ['167.205.22.123'])

[ERROR: SERVFAIL] : 13 occurrences (resolvers ['103.21.229.11', '8.8.4.4', '8.8.8.8', '203.119.13.77', '192.168.1.254', '103.31.132.131', '203.89.31.13', '192.168.0.100', '180.211.88.211'])

[TIMEOUT(S)] : 26 occurrences (resolvers <__main__ .set="" 0x802334240="" at="" instance="">)

[ns1.sbm.itb.ac.id. admin.sbm.itb.ac.id. 2016112522 10800 3600 3600000 2592000] : 1 occurrences (resolvers ['2001:df0:ba:12::164'])

Test #7525864 done at 2017-01-10T12:36:45Z

SOA parameter distribution for second level ccTLD .id

Figure 1. CDF SOA Parameter for ac.id.

Figure 2. CDF SOA Parameter for co.id.

Figure 3. CDF SOA Parameter for go.id.

Figure 4. CDF SOA parameter for mil.id.

Figure 5. CDF SOA Parameter for net.id.

Figure 6. CDF SOA Parameter for or.id.

Figure 7. CDF SOA Parameter for sch.id.

Figure 8. CDF SOA Parameter for web.id.

bni-life.co.id

on January 2012, I found TTL for bni-life.co.id is 622080000 seconds or 7200 days or almost 20 years :)

Today, I found the TTL value is  38400 seconds.

TTL distribution for second level ccTLD .id

TTL CDF for ac.id zone. minimum = 60 seconds, maximum = 14 days.

TTL CDF for co.id zone. minimum = 0 seconds, maximum =  7200 days.

TTL CDF for go.id zone. minimum = 60 seconds, maximum =  7 days.

TTL CDF for mil.id zone. minimum = 300 seconds, maximum =  7 days.

TTL CDF for mil.id zone. minimum = 30 seconds, maximum =  14 days.

TTL CDF for or.id zone. minimum = 60 seconds, maximum =  30 days.

TTL CDF for sch.id zone. minimum = 300 seconds, maximum =  7 days.

TTL CDF for sch.id zone. minimum = 3 seconds, maximum =  90 days.

banksumut

looks good except:

WARNING Name server ns1.banksumut.com (202.95.138.18) is recursive.
WARNING Name server ns2.banksumut.com (202.95.138.18) is recursive.
Name server ns1.banksumut.com (202.95.138.18) open for zone transfer of banksumut.com.
Name server ns2.banksumut.com (202.95.138.18) open for zone transfer of banksumut.com.

;; global options: +cmd
banksumut.com. 3600 IN SOA ns1.banksumut.com. hostmaster.banksumut.com. 2012052223 3600 900 1209600 43200
banksumut.com. 3600 IN NS ns1.banksumut.com.
banksumut.com. 3600 IN NS ns2.banksumut.com.
banksumut.com. 3600 IN A 202.95.138.20
banksumut.com. 3600 IN MX 10 mail.banksumut.com.
#otrs.banksumut.com. 3600 IN CNAME banksumut.com.
magazine.banksumut.com. 3600 IN A 202.95.138.21
mail.banksumut.com. 3600 IN A 202.95.138.18
ns1.banksumut.com. 3600 IN A 202.95.138.18
ns2.banksumut.com. 3600 IN A 202.95.138.18
otrs.banksumut.com. 3600 IN A 202.95.138.22
webmail.banksumut.com. 3600 IN CNAME mail.banksumut.com.
www.banksumut.com. 3600 IN CNAME banksumut.com.
banksumut.com. 3600 IN SOA ns1.banksumut.com. hostmaster.banksumut.com. 2012052223 3600 900 1209600 43200
;; Query time: 185 msec
;; SERVER: 202.95.138.18#53(202.95.138.18)
;; WHEN: Fri Jun 15 20:01:59 2012
;; XFR size: 14 records (messages 1, bytes 341)

bank lampung

INFO Name servers listed at parent: ns1.cakraweb.com,ns2.cakraweb.com
INFO Name servers listed at child: ns1.daxa.net,ns2.daxa.net
ERROR Superfluous name server listed at parent: ns1.cakraweb.com
ERROR Superfluous name server listed at parent: ns2.cakraweb.com
ERROR Total parent/child glue mismatch.

bank nagari

INFO Name servers listed at parent: bn01.banknagari.co.id,bn02.banknagari.co.id
INFO Name servers listed at child: bn01.banknagari.co.id
ERROR Superfluous name server listed at parent: bn02.banknagari.co.id
ERROR Missing glue at child: bn02.banknagari.co.id

bankkalsel

this is bad.

bankkalsel.co.id INFO Name servers listed at parent: dns1.masterwebnet.com,dns2.masterwebnet.com,dns3.masterwebnet.com,dns4.masterwebnet.com
bankkalsel.co.id INFO Name servers listed at child: dns1.masterweb.net,dns2.masterweb.net,dns3.masterweb.net,dns4.masterweb.net
bankkalsel.co.id ERROR Superfluous name server listed at parent: dns1.masterwebnet.com
bankkalsel.co.id ERROR Superfluous name server listed at parent: dns2.masterwebnet.com
bankkalsel.co.id ERROR Superfluous name server listed at parent: dns3.masterwebnet.com
bankkalsel.co.id ERROR Superfluous name server listed at parent: dns4.masterwebnet.com
bankkalsel.co.id ERROR Total parent/child glue mismatch.

bankjambi

Very bad!
bankjambi.co.id INFO Begin testing zone bankjambi.co.id with version 1.2.6.
bankjambi.co.id INFO Begin testing delegation for bankjambi.co.id.
bankjambi.co.id INFO Name servers listed at parent: ns1.bankjambi.co.id,ns2.bankjambi.co.id
bankjambi.co.id ERROR Failed to find name servers of bankjambi.co.id/IN.
bankjambi.co.id ERROR No name servers found at child.
bankjambi.co.id ERROR Not enough nameserver information was found to test the zone bankjambi.co.id, but an IP address lookup succeeded in spite of that.
bankjambi.co.id INFO Done testing delegation for bankjambi.co.id.
bankjambi.co.id CRITICAL Fatal error in delegation for zone bankjambi.co.id.
bankjambi.co.id INFO Test completed for zone bankjambi.co.id.

brisyariah.co.id

this is bad.


brisyariah.co.id INFO Name servers listed at parent: ns1.brisyariah.co.id,ns2.brisyariah.co.id
brisyariah.co.id INFO Name servers listed at child: ns1.brisyariah.co.id,ns2.brisyariah.co.id
ERROR Inconsistent glue for name server ns2.brisyariah.co.id.
ERROR Nameserver ns1.brisyariah.co.id is listed for zone brisyariah.co.id without address information.
WARNING Name server ns1.brisyariah.co.id (116.90.165.74) is recursive.
WARNING Name server ns2.brisyariah.co.id (203.142.87.228) is recursive.
ERROR Name server ns2.brisyariah.co.id (203.142.87.228) not authoritative for brisyariah.co.id.

bjbsyariah

this is bad!
bjbsyariah.co.id INFO Name servers listed at parent: ns1.telkomhosting.com,ns2.telkomhosting.com
bjbsyariah.co.id INFO Name servers listed at child: ns1.jagoanhosting.com,ns2.jagoanhosting.com
bjbsyariah.co.id ERROR Superfluous name server listed at parent: ns1.telkomhosting.com
bjbsyariah.co.id ERROR Superfluous name server listed at parent: ns2.telkomhosting.com

Name server ns2.jagoanhosting.com (219.83.122.171) open for zone transfer of bjbsyariah.co.id
ERROR 2 different SOA records found.


; <<>> DiG 9.7.3-P3 <<>> @ns2.jagoanhosting.com bjbsyariah.co.id axfr
; (1 server found)
;; global options: +cmd
bjbsyariah.co.id. 86400 IN SOA ns1.jagoanhosting.com. admin.jagoanhosting.com. 2011103003 86400 7200 3600000 86400
bjbsyariah.co.id. 14400 IN MX 0 bjbsyariah.co.id.
bjbsyariah.co.id. 86400 IN NS ns1.jagoanhosting.com.
bjbsyariah.co.id. 86400 IN NS ns2.jagoanhosting.com.
bjbsyariah.co.id. 14400 IN A 101.50.1.221
cpanel.bjbsyariah.co.id. 14400 IN A 101.50.1.221
ftp.bjbsyariah.co.id. 14400 IN CNAME bjbsyariah.co.id.
localhost.bjbsyariah.co.id. 14400 IN A 127.0.0.1
mail.bjbsyariah.co.id. 14400 IN CNAME bjbsyariah.co.id.
test.bjbsyariah.co.id. 14400 IN A 101.50.1.221
www.test.bjbsyariah.co.id. 14400 IN A 101.50.1.221
webdisk.bjbsyariah.co.id. 14400 IN A 101.50.1.221
webmail.bjbsyariah.co.id. 14400 IN A 101.50.1.221
whm.bjbsyariah.co.id. 14400 IN A 101.50.1.221
www.bjbsyariah.co.id. 14400 IN CNAME bjbsyariah.co.id.
bjbsyariah.co.id. 86400 IN SOA ns1.jagoanhosting.com. admin.jagoanhosting.com. 2011103003 86400 7200 3600000 86400
;; Query time: 112 msec
;; SERVER: 219.83.122.171#53(219.83.122.171)
;; WHEN: Fri Jun 15 19:15:35 2012
;; XFR size: 16 records (messages 1, bytes 410)

bcasyariah

bcasyariah.co.id INFO Name servers listed at parent: jktns1.biz.net.id,jktns2.biz.net.id,ns3.biz.net.id,ns4.biz.net.id
bcasyariah.co.id INFO Name servers listed at child: jktns1.biz.net.id,jktns2.biz.net.id,ns3.biz.net.id,ns4.biz.net.id
unfortunately Name server ns3.biz.net.id (117.102.126.3) not authoritative for bcasyariah.co.id.
and  Name server ns4.biz.net.id (112.78.176.22) open for zone transfer of bcasyariah.co.id.


; <<>> DiG 9.7.3-P3 <<>> @ns4.biz.net.id bcasyariah.co.id axfr
; (1 server found)
;; global options: +cmd
bcasyariah.co.id. 38400 IN SOA jktns1.biz.net.id. hostmaster.biz.net.id. 2011050607 10800 3600 604800 38400
bcasyariah.co.id. 38400 IN NS ns3.biz.net.id.
bcasyariah.co.id. 38400 IN NS ns4.biz.net.id.
bcasyariah.co.id. 38400 IN NS jktns1.biz.net.id.
bcasyariah.co.id. 38400 IN NS jktns2.biz.net.id.
bcasyariah.co.id. 38400 IN A 202.169.44.135
bcasyariah.co.id. 38400 IN MX 10 mx-hosting.biz.net.id.
ftp.bcasyariah.co.id. 38400 IN CNAME bcasyariah.co.id.
mail.bcasyariah.co.id. 38400 IN CNAME imap.biz.net.id.
pop.bcasyariah.co.id. 38400 IN CNAME imap.biz.net.id.
smtp.bcasyariah.co.id. 38400 IN CNAME bcasyariah.co.id.
webmail.bcasyariah.co.id. 38400 IN CNAME bcasyariah.co.id.
www.bcasyariah.co.id. 38400 IN CNAME bcasyariah.co.id.
bcasyariah.co.id. 38400 IN SOA jktns1.biz.net.id. hostmaster.biz.net.id. 2011050607 10800 3600 604800 38400
;; Query time: 103 msec
;; SERVER: 112.78.176.22#53(112.78.176.22)
;; WHEN: Fri Jun 15 19:09:30 2012
;; XFR size: 14 records (messages 1, bytes 365)

bankmega

bankmega.com INFO Name servers listed at parent: hertz.xl.net.id,ns1.bankmega.com,ns1.saranadata.com,ns2.bankmega.com,ns2.saranadata.com,socrates.xl.net.id
bankmega.com INFO Name servers listed at child: 3dsecure.bankmega.com,hertz.xl.net.id,ns1.bankmega.com,ns1.saranadata.com,ns2.bankmega.com,ns2.saranadata.com,socrates.xl.net.id
Additional name server listed at child: 3dsecure.bankmega.com

ERROR Name server 3dsecure.bankmega.com (183.91.84.131) does not answer queries over UDP.
ERROR Name server 3dsecure.bankmega.com (183.91.84.131) does not answer queries over TCP.
Name server ns1.bankmega.com (121.52.49.101) open for zone transfer of bankmega.com.


;; global options: +cmd
bankmega.com. 900 IN SOA ns1.bankmega.com. admin.bankmega.com. 2011060912 10800 120 604800 86400
bankmega.com. 900 IN TXT " PT BANK MEGA TBK "
bankmega.com. 900 IN NS ns1.bankmega.com.
bankmega.com. 900 IN NS ns1.saranadata.com.
bankmega.com. 900 IN NS ns2.bankmega.com.
bankmega.com. 900 IN NS ns2.saranadata.com.
bankmega.com. 900 IN NS hertz.xl.net.id.
bankmega.com. 900 IN NS 3dsecure.bankmega.com.
bankmega.com. 900 IN NS socrates.xl.net.id.
bankmega.com. 900 IN MX 5 mail.bankmega.com.
bankmega.com. 900 IN A 202.43.162.29
3dsecure.bankmega.com. 900 IN A 183.91.84.131
ibank.bankmega.com. 900 IN A 121.52.49.107
karir.bankmega.com. 900 IN NS ns1.bankmega.com.
mail.bankmega.com. 900 IN A 121.52.49.100
mail2.bankmega.com. 900 IN A 121.52.49.122
mailrelay.bankmega.com. 900 IN A 121.52.49.100
mibweb.bankmega.com. 900 IN A 202.152.19.230
ns.bankmega.com. 900 IN A 121.52.49.101
ns1.bankmega.com. 900 IN A 121.52.49.101
ns2.bankmega.com. 900 IN A 121.52.49.242
proxy3.bankmega.com. 900 IN A 202.43.161.153
smtpin.bankmega.com. 900 IN A 121.52.49.100
web.bankmega.com. 900 IN A 202.152.1.154
webmail.bankmega.com. 900 IN A 121.52.49.100
webmail2.bankmega.com. 900 IN A 121.52.49.122
www.bankmega.com. 900 IN A 202.43.162.29
bankmega.com. 900 IN SOA ns1.bankmega.com. admin.bankmega.com. 2011060912 10800 120 604800 86400
;; Query time: 102 msec
;; SERVER: 121.52.49.101#53(121.52.49.101)
;; WHEN: Fri Jun 15 19:04:35 2012
;; XFR size: 28 records (messages 1, bytes 665)

bii

bii.co.id INFO Name servers listed at parent: jktns2.biz.net.id,ns2.bankbii.com
bii.co.id INFO Name servers listed at child: jktns2.biz.net.id,ns.idola.net.id,ns2.bankbii.com
additional ns.idola.net.id
therefore  ERROR Name server ns.idola.net.id (202.152.5.36) not authoritative for bii.co.id.

bank jatim

bankjatim.co.id dns zone looks good except they open zone transfer :)


;; global options: +cmd
bankjatim.co.id. 38400 IN SOA ns1.bankjatim.co.id. it.bankjatim.co.id. 2010031817 10800 3600 604800 38400
bankjatim.co.id. 38400 IN A 103.5.51.70
bankjatim.co.id. 38400 IN NS ns1.bankjatim.co.id.
bankjatim.co.id. 38400 IN NS ns2.bankjatim.co.id.
bankjatim.co.id. 38400 IN MX 0 mx2.bankjatim.co.id.
bankjatim.co.id. 1800 IN TXT "v=spf1  ip4:118.97.222.226 a mx ptr ~all"
bankjatim.co.id._domainkey.bankjatim.co.id. 38400 IN TXT "v=DKIM1\; g=*\; k=rsa\; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC2gJ8U2eL2F61dOIwVDz5ZTdhMCqpuY/9ZR6NtBpuoUKXU2RqBN0Ei/AENJhTAku4MdBvNR6OoI0XdFidVHqUwSaLq39lqLy4a7qSkG9UnVxJRYsULfcbVaZYlgmlHcDpODytltAGxplUw1oDhZooa5vGmrSWaR+382e6xhFWVTQIDAQAB"
admin.bankjatim.co.id. 38400 IN A 118.97.222.226
graph.bankjatim.co.id. 38400 IN A 118.97.222.226
imap.bankjatim.co.id. 38400 IN A 118.97.222.226
mail.bankjatim.co.id. 38400 IN CNAME mx2.bankjatim.co.id.
mun.bankjatim.co.id. 38400 IN A 118.97.222.226
mx1.bankjatim.co.id. 38400 IN A 118.97.222.227
mx2.bankjatim.co.id. 38400 IN A 118.97.222.226
ns1.bankjatim.co.id. 38400 IN A 118.97.222.226
ns2.bankjatim.co.id. 38400 IN A 118.97.222.227
oldimap.bankjatim.co.id. 38400 IN A 118.97.245.31
oldmail.bankjatim.co.id. 38400 IN A 118.97.222.226
pop3.bankjatim.co.id. 38400 IN A 118.97.222.226
portal.bankjatim.co.id. 38400 IN A 196.168.99.21
smtp.bankjatim.co.id. 38400 IN A 118.97.222.226
www.bankjatim.co.id. 38400 IN A 103.5.51.70
bankjatim.co.id. 38400 IN SOA ns1.bankjatim.co.id. it.bankjatim.co.id. 2010031817 10800 3600 604800 38400
;; Query time: 118 msec
;; SERVER: 118.97.222.227#53(118.97.222.227)
;; WHEN: Fri Jun 15 18:47:54 2012
;; XFR size: 23 records (messages 1, bytes 817)

bankjabar

bankjabar.co.id INFO Name servers listed at parent: dns1.masterwebnet.com,dns2.masterwebnet.com,dns3.masterwebnet.com,dns4.masterwebnet.com
bankjabar.co.id INFO Name servers listed at child: dns1.masterweb.net,dns2.masterweb.net,dns3.masterweb.net,dns4.masterweb.net
bankjabar.co.id ERROR Total parent/child glue mismatch.
SOA TTL for bankjabar.co.id = 300 second

again bad DNS zone management by a bank!
i dont understand why they need low TTL.

bpddiy

INFO Name servers listed at parent: svr1.bpddiy.co.id,svr2.bpddiy.co.id
INFO Name servers listed at child: svr1.bpddiy.co.id
ERROR Superfluous name server listed at parent: svr2.bpddiy.co.id
ERROR Too few name servers (1).

ERROR Host name mail.bpddiy.co.id refers to a CNAME.

bad dns zone management by a bank! 

klikbca again.

hmmm interesting.


klikbca.com.                   IN      NS
;;ANSWER SECTION:
klikbca.com.            86400   IN      NS      ns1.cbn.net.id.
klikbca.com.            86400   IN      NS      ns2.angkasa.net.id.
klikbca.com.            86400   IN      NS      ns3.angkasa.net.id.
klikbca.com.            86400   IN      NS      ns1.angkasa.net.id.
klikbca.com.            86400   IN      NS      ns2.cbn.net.id.

dig @ns1.angkasa.net.id www.klikbca.com a +norec

;; ANSWER SECTION:
www.klikbca.com.        3330    IN      A       202.6.208.8

dig @ns2.angkasa.net.id www.klikbca.com a +norec

;; ANSWER SECTION:
www.klikbca.com.        3316    IN      A       202.6.211.8


dig @ns3.angkasa.net.id www.klikbca.com a +norec

;; ANSWER SECTION:


www.klikbca.com.        2431    IN      A       202.6.208.8



dig @ns1.cbn.net.id www.klikbca.com a +norec
;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 2, ADDITIONAL: 3

;; AUTHORITY SECTION:
www.klikbca.com.        604800  IN      NS      ns20.klikbca.com.
www.klikbca.com.        604800  IN      NS      ns10.klikbca.com.

;; ADDITIONAL SECTION:
ns10.klikbca.com.       604800  IN      A       202.6.219.138
ns20.klikbca.com.       604800  IN      A       202.6.218.138



dig @ns2.cbn.net.id www.klikbca.com a +norec

;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 2, ADDITIONAL: 3

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;www.klikbca.com.               IN      A

;; AUTHORITY SECTION:
www.klikbca.com.        604800  IN      NS      ns10.klikbca.com.
www.klikbca.com.        604800  IN      NS      ns20.klikbca.com.

;; ADDITIONAL SECTION:
ns20.klikbca.com.       604800  IN      A       202.6.218.138
ns10.klikbca.com.       604800  IN      A       202.6.219.138

btpn

another indonesian bank that can not manage their naming:

btpn.com INFO Name servers listed at parent: ns1.bankbtpn.co.id,ns1.btpn.com,ns2.bankbtpn.co.id,ns2.btpn.com,ns3.bankbtpn.co.id,ns3.btpn.com
btpn.com INFO Name servers listed at child: ns001.btpn.com,ns002.btpn.com,ns003.btpn.com
btpn.com ERROR Superfluous name server listed at parent: ns1.bankbtpn.co.id
btpn.com ERROR Superfluous name server listed at parent: ns1.btpn.com
btpn.com ERROR Superfluous name server listed at parent: ns2.bankbtpn.co.id
btpn.com ERROR Superfluous name server listed at parent: ns2.btpn.com
btpn.com ERROR Superfluous name server listed at parent: ns3.bankbtpn.co.id
btpn.com ERROR Superfluous name server listed at parent: ns3.btpn.com
btpn.com ERROR Total parent/child glue mismatch.

bukopin

another indonesian bank that can not manage their naming.

bukopin.co.id INFO Name servers listed at parent: dns1.nap.net.id,dns2.nap.net.id,ns1.bukopin.co.id,ns2.bukopin.co.id

bukopin.co.id INFO Name servers listed at child: dns1.nap.net.id,ns1.bukopin.co.id,ns2.bukopin.co.id
ERROR Superfluous name server listed at parent: dns2.nap.net.id
ERROR Nameserver ns2.bukopin.co.id is listed for zone bukopin.co.id without address information.
ERROR Name server dns1.nap.net.id (202.59.163.1) not authoritative for bukopin.co.id.
WARNING Name server ns1.bukopin.co.id (203.128.67.233) is recursive.
ERROR Name server ns2.bukopin.co.id (203.128.67.234) does not answer queries over UDP.
ERROR Name server ns2.bukopin.co.id (203.128.67.234) does not answer queries over TCP.