MoinQ:

DNS/watch/www.iij.ad.jpについて、ここに記述してください。

$ dig +dnssec a www1.qmail.jp @dns0.iij.ad.jp 

; <<>> DiG 9.7.3 <<>> +dnssec a www1.qmail.jp @dns0.iij.ad.jp
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: REFUSED, id: 29085
;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
;; WARNING: recursion requested but not available

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 4096
;; QUESTION SECTION:
;www1.qmail.jp.                 IN      A

;; Query time: 36 msec
;; SERVER: 210.138.174.16#53(210.138.174.16)
;; WHEN: Tue Jun 14 09:09:55 2011
;; MSG SIZE  rcvd: 42

tmaeno@:~$ dig +dnssec a www.iij.ad.jp @dns0.iij.ad.jp

; <<>> DiG 9.7.3 <<>> +dnssec a www.iij.ad.jp @dns0.iij.ad.jp
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 1071
;; flags: qr aa rd; QUERY: 1, ANSWER: 2, AUTHORITY: 3, ADDITIONAL: 9
;; WARNING: recursion requested but not available

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 4096
;; QUESTION SECTION:
;www.iij.ad.jp.                 IN      A

;; ANSWER SECTION:
www.iij.ad.jp.          300     IN      A       210.130.137.80
www.iij.ad.jp.          300     IN      RRSIG   A 8 4 300 20110713151005 20110613151005 21105 iij.ad.jp. BJoa0qWs5eXpHwrV0Z6Ua6gRfm8YBBIMoCAJC+IXKVeBNRAczsGpvoGW qJeKYVbd5NresRUm7DWqk3K/HVswA0sxAeyyd0/QlF1Ymg8wgoU9qSxP tIIMr2vHhm6I7J80JgwdyrvZfEzWriBBFjhyXbQWY108BMjkEiOxNHhi d7c=

;; AUTHORITY SECTION:
iij.ad.jp.              604800  IN      NS      dns1.iij.ad.jp.
iij.ad.jp.              604800  IN      NS      dns0.iij.ad.jp.
iij.ad.jp.              604800  IN      RRSIG   NS 8 3 604800 20110713151005 20110613151005 21105 iij.ad.jp. Fybvuo2rwOthFj0papFrhWCqgCueNhaZTOVY4njyrE+m3z9CRs0P+YiH W8wfq8fOcxRgcWo8d6ltjOw/2Yf3Vmfo35jzt99NiLCLtlgjPZ17TZTt 1Ftz8NcEfAVqlYOvPIkFm4SSNYV9wUkxYIenC8cF7SDk5ccDCHjvswtv NPQ=

;; ADDITIONAL SECTION:
dns0.iij.ad.jp.         86400   IN      A       210.138.174.16
dns0.iij.ad.jp.         86400   IN      AAAA    2001:240:bb41:8002::1:16
dns1.iij.ad.jp.         86400   IN      A       210.138.175.5
dns1.iij.ad.jp.         86400   IN      AAAA    2001:240:bb4c:8000::1:5
dns0.iij.ad.jp.         86400   IN      RRSIG   A 8 4 86400 20110713151005 20110613151005 21105 iij.ad.jp. hEELgnTt1ah6IOuKH8Q6YRSGeOF8pPtAD0lqKA5dQyOKntat3BFHFtVp hiKfqrbDsoD9dxVnYOkgyYnchEuiK+jRZ2tD9nPgdVySHp++cwQMme1O Ff1LOOBbKWhgjungJ/KoSG1jGBJgBmKBjTaVbss1Q8hpMliLQVrHIBcZ yXg=
dns0.iij.ad.jp.         86400   IN      RRSIG   AAAA 8 4 86400 20110713151005 20110613151005 21105 iij.ad.jp. bO48PhgLqZEMJf27cHSHPpru4r07Bm7Ls6GshvvnwNG+xI5JspqRVtr7 8w/E64fygtY5+MIfP1HPFmEXJa4vdo8O+mFKKz3BueKsOe8pzoApcUUh jAs2ImJ2tIhXRWX5MosrBsZUU5sopW3GEqdMInnF58yjTAvIbntWfFQ3 nEI=
dns1.iij.ad.jp.         86400   IN      RRSIG   A 8 4 86400 20110713151005 20110613151005 21105 iij.ad.jp. HVKjUW+PvXkfSsLP/CPGB6EryTgU0I5BDpxg8Gz9ZmYmOZg9oqoE42AE AXMBLF2BzCh1ApV2/CnVLAQkINPqDICFn2VgH13b4W+q7x6TW6kDpJM5 sFBpNBzsfqB/L1pC7XlD3hDu9zHPVJuHzlExpHOkPTDy0A2YBidNo946 tIM=
dns1.iij.ad.jp.         86400   IN      RRSIG   AAAA 8 4 86400 20110713151005 20110613151005 21105 iij.ad.jp. j5uq4kK3GUnowNBwkb5cUQfH9CIRcbwuHP9E0L28be/O9ND8a9Icjj7p QdElSTAbcUNg1KBOxXyxSrR0wAUjMukOimVbEKBEyUyZE3Pkytf9n4fm XjjsqqKhhnnwfC6vHLGzEnR49Zd6mMIog1BdSdfS3XkCjrKTbQz/nHXN Fm0=

;; Query time: 40 msec
;; SERVER: 210.138.174.16#53(210.138.174.16)
;; WHEN: Tue Jun 14 09:11:06 2011
;; MSG SIZE  rcvd: 1198

1. www2.iij.ad.jp (nxdomain)

additional 1 は変だ。 

; <<>> DiG 9.7.3 <<>> +dnssec a www2.iij.ad.jp @dns0.iij.ad.jp
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 29503
;; flags: qr aa rd; QUERY: 1, ANSWER: 0, AUTHORITY: 8, ADDITIONAL: 1
;; WARNING: recursion requested but not available

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 4096
;; QUESTION SECTION:
;www2.iij.ad.jp.                        IN      A

;; AUTHORITY SECTION:
iij.ad.jp.              3600    IN      SOA     bh0.iij.ad.jp. postmaster.iij.ad.jp. 1307981405 3600 1800 1209600 3600
iij.ad.jp.              3600    IN      RRSIG   SOA 8 3 86400 20110713151005 20110613151005 21105 iij.ad.jp. P6NFZIOOiPc5+X/8Gm4EpQMugfGzdDWo/yF5MkOy+OwbXlL04Amze/VV V2Mq5S6srKx0n/P1eNUxh1myGMuEF4L45a+6N5fOIV19RfQUpBPE9+kR M4M9DdElexLDPA05kO1uvOgw46w44whUcAsJaJLYp1obLWIjSggZWGyb qGY=
V8Q9F7PQBI6FEHKCEPI6L3T3NEFLUKRG.iij.ad.jp. 3600 IN NSEC3 1 1 8 4B8139A132625FDF VB7E03K3FJ0UUBKE5LJPH5CMPOQ5J1AK NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM
V8Q9F7PQBI6FEHKCEPI6L3T3NEFLUKRG.iij.ad.jp. 3600 IN RRSIG NSEC3 8 4 3600 20110713151005 20110613151005 21105 iij.ad.jp. Nrugm1AUENg4kL0v0CMN77cIT3ImYVMPiY2yGCbsLtKMO97TZIjcwbzQ EdpGi/YbpQruI5JdpuQ36WIBkf380C3KLFTPX33luxD1fjL+ZFwrfhxJ 7MiEWIqVoVb2kgUxT+KBXSV1lHVLIKZUiVDsfQE+zFwOBymPZB/KF3ri REU=
8GPVM0OSNALAEM9Q366R7QP77HGRQOQI.iij.ad.jp. 3600 IN NSEC3 1 1 8 4B8139A132625FDF 8M2B7LSRD81PT3KTJ2JC8NTNVV7ADP86 A RRSIG
8GPVM0OSNALAEM9Q366R7QP77HGRQOQI.iij.ad.jp. 3600 IN RRSIG NSEC3 8 4 3600 20110713151005 20110613151005 21105 iij.ad.jp. dvUhK9p1s4Sp+BwTbh7iPu4Mrhmb7y0J4pij9+yDfR3uXAWz9OTuHMrW +hhCUw/5FU1DkovWUuTrKxu7OfDq8zKdaW2548dKsx+lnqIz8jl7IHrz TZMe+YAetN5PqR88iROM8PUWAlCLYGAc1KcLuyHcDPLmWfUF5vQCT+9V 6uo=
L58CSMH87K7JJBEPCCVT8TV9NOGOEV3A.iij.ad.jp. 3600 IN NSEC3 1 1 8 4B8139A132625FDF L7OV61V7LFKSGER2OI34GD0V5ODEEL37 A RRSIG
L58CSMH87K7JJBEPCCVT8TV9NOGOEV3A.iij.ad.jp. 3600 IN RRSIG NSEC3 8 4 3600 20110713151005 20110613151005 21105 iij.ad.jp. NgvAS0e2cAOR0Rt5DX8r6fT/BKhh1dNSyIOFMSa+Ev5dWO+Mvf0H0Z9R UcVtobLNV+o4DP9PGtbwUOvgdiuvy0kPN632Vli0gpG8HJOlXKGWdahk fO5KfSVgB7lBFcxleBAPMngOFTFPg2aWFfIbzTQU3opR2dnoi00TQOyu MA4=

;; Query time: 37 msec
;; SERVER: 210.138.174.16#53(210.138.174.16)
;; WHEN: Tue Jun 14 09:13:47 2011
;; MSG SIZE  rcvd: 1032

どうも、TYPE OPT (EDNS0 option) を数えているようです。 -- tss 2011-06-14 00:55:12