Quantcast
Channel: Sophos User Bulletin Board
Viewing all articles
Browse latest Browse all 14361

DNS groups not resolving correctly?

$
0
0
Maybe I do not understand DNS groups correctly. I thought it would resolve all IP's related to that FQDN.

EX: ksn3.kaspersky-labs.com

I added this to a DNS group and when it gets resolved by Astaro, it shows up as:
PHP Code:

http://dnl-03.geo.kaspersky.com [63.251.179.60 (2 IPs total)] 


Running dig on the same url shows me this:

; <<>> DiG 9.7.0-P1 <<>> ksn3.kaspersky-labs.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 59723
;; flags: qr rd ra; QUERY: 1, ANSWER: 14, AUTHORITY: 3, ADDITIONAL: 6

;; QUESTION SECTION:
;ksn3.kaspersky-labs.com. IN A

;; ANSWER SECTION:
ksn3.kaspersky-labs.com. 569 IN A 62.128.100.41
ksn3.kaspersky-labs.com. 569 IN A 62.128.100.43
ksn3.kaspersky-labs.com. 569 IN A 119.254.93.33
ksn3.kaspersky-labs.com. 569 IN A 119.254.93.36
ksn3.kaspersky-labs.com. 569 IN A 202.177.216.233
ksn3.kaspersky-labs.com. 569 IN A 202.177.216.236
ksn3.kaspersky-labs.com. 569 IN A 38.113.165.77
ksn3.kaspersky-labs.com. 569 IN A 38.113.165.80
ksn3.kaspersky-labs.com. 569 IN A 38.113.165.83
ksn3.kaspersky-labs.com. 569 IN A 38.113.165.86
ksn3.kaspersky-labs.com. 569 IN A 62.128.100.29
ksn3.kaspersky-labs.com. 569 IN A 62.128.100.31
ksn3.kaspersky-labs.com. 569 IN A 62.128.100.35
ksn3.kaspersky-labs.com. 569 IN A 62.128.100.37


;; AUTHORITY SECTION:
kaspersky-labs.com. 2368 IN NS ns3.kasperskylabs.net.
kaspersky-labs.com. 2368 IN NS ns1.kasperskylabs.net.
kaspersky-labs.com. 2368 IN NS ns2.kasperskylabs.net.

;; ADDITIONAL SECTION:
ns1.kasperskylabs.net. 70543 IN A 81.176.69.119
ns1.kasperskylabs.net. 70543 IN A 4.53.58.198
ns2.kasperskylabs.net. 70583 IN A 195.27.181.3
ns2.kasperskylabs.net. 70583 IN A 38.117.98.203
ns3.kasperskylabs.net. 70583 IN A 202.177.216.198
ns3.kasperskylabs.net. 70583 IN A 4.28.136.47


Nowhere in that list does 63.251.179.60 show up.
I have entries for 5 different URLs (ksn[00-04].kaspersky-labs.com) and they all resolve to

PHP Code:

 [63.251.179.60 (2 IPs total)] 

There are more then 2 IP's when using dig.

What gives?

Thank you,

C68

Viewing all articles
Browse latest Browse all 14361

Trending Articles