DNS strange query?

[turnbui]

Hello folks,
I have a query that appears every so often in my ethereal trace. I use Linux Mandrake 10.1 with BIND 9.
The trace shows a query with src=192.168.3.1:32887 and dest-192.168.3.1:53 to the name turnbui.com.turnbui.com and my domain name is only turnbui,com.
All other DNS appears to be working including the reverse lookups.
Immediately after this turnbui.com.turnbui.com query is what I believe to be the correct one to just tirnbui.com.

Is this normal since the request appears to be coming from the same machine which is the DNS server?

Thanks for any help you can give.

 

[ITPangaeaArchitect]

it sounds like they have an additional suffix specified for that name...that is normal behavior if the domain the machine belongs to has the same name...as that suffix is appended by default....it will then begin querying the additional suffixes (DNS suffix for this connection in conjunction with use this dns suffix in dns registration options can also get this result)...

default for a child domain member would be:
query for server.child.domain.com - no record found then
query for server.domain.com - no record found then
query for server.domain.com in first forwarder...and so on and so forth

with a dns suffix specified of say child.domain.com...
query for server.child.domain.com.child.domain.com - no record found then
query for server.child.domain.com - no record found then
query for server.domain.com - no record found then begin other DNS suffixes and then forwarders

-Brandon Wilson
MCSE00/03, MCSA:Messaging, MCSA03, A+
almost got a paragraph there