From mboxrd@z Thu Jan 1 00:00:00 1970 From: Michael Tremer To: development@lists.ipfire.org Subject: Re: [PATCH] DNS: Fall back to permissive mode if recursor mode is unavailable Date: Wed, 08 Mar 2017 12:09:54 +0000 Message-ID: <1488974994.24229.38.camel@ipfire.org> In-Reply-To: <1488903324.21248.2.camel@hughes.net> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============5756738275515749645==" List-Id: --===============5756738275515749645== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Hmm... That's interesting that only AAAA records fail. No idea why the system is resolving those any ways, but hey... So when you do =C2=A0 dig @198.41.0.4 a.root-servers.net AAAA +dnssec does that work? What does =C2=A0 dig @8.8.8.8 +sigchase +dnssec www.ipfire.org do? -Michael On Tue, 2017-03-07 at 10:15 -0600, Paul Simmons wrote: > On Tue, 2017-03-07 at 09:58 -0600, Paul Simmons wrote: > > On Tue, 2017-03-07 at 12:06 +0000, Michael Tremer wrote: > > >=20 > > > No, it is supposed to resolve everything. > > >=20 > > > For that it only needs to be able to contact the root name servers > > > and practically all others on the internet. That seems to fail here. > > >=20 > > > What does unbound log? > > >=20 > > > >=20 > > > > On 6 Mar 2017, at 11:29 pm, Paul Simmons > > > > wrote: > > > >=20 > > > > >=20 > > > > > On Mon, 2017-03-06 at 22:37 +0000, Michael Tremer wrote: > > > > > Hi, > > > > >=20 > > > > > >=20 > > > > > > On Mon, 2017-03-06 at 15:47 -0600, Paul Simmons wrote: > > > > > > >=20 > > > > > > > On Mon, 2017-03-06 at 21:00 +0000, Michael Tremer wrote: > > > > > > >=20 > > > > > > > Hi, > > > > > > >=20 > > > > > > > >=20 > > > > > > > > On Mon, 2017-03-06 at 12:18 -0600, Paul Simmons wrote: > > > > > > > >=20 > > > > > > > > >=20 > > > > > > > > > On Sun, 2017-03-05 at 11:42 +0000, Michael Tremer wrote: > > > > > > > > >=20 > > > > > > > > >=20 > > > > > > > > > Hi, > > > > > > > > >=20 > > > > > > > > > can you confirm if unbound is running? > > > > > > > > >=20 > > > > > > > > > What is the output of /etc/init.d/unbound restart? > > > > > > > > >=20 > > > > > > > > > -Michael > > > > > > > > >=20 > > > > > > > > > >=20 > > > > > > > > > >=20 > > > > > > > > > >=20 > > > > > > > > > > >=20 > > > > > > > > > > >=20 > > > > > > > > > > >=20 > > > > > > > > > > > >=20 > > > > > > > > > > > >=20 > > > > > > > > > > > >=20 > > > > > > > > > > > > ----<% snip %>---- > > > > > > > > > > >=20 > > > > > > > > > > > I have nightly commit > > > > > > > > > > > c016773b9816ad9be4ffc8643c30457e87c094e3 > > > > > > > > > > > available locally, and will beg my users for downtime > > > > > > > > > > > to > > > > > > > > > > > test. > > > > > > > > > > >=20 > > > > > > > > > > > Thank you, and best regards, > > > > > > > > > > > Paul > > > > > > > > > > >=20 > > > > > > > > > > >=20 > > > > > > > > > >=20 > > > > > > > > > > Bad juju - build c016773b couldn't resolve any hosts > > > > > > > > > > (other > > > > > > > > > > than > > > > > > > > > > those in "localdomain"). > > > > > > > > > >=20 > > > > > > > > > > Provider is "hughes.net" and is the only ISP available > > > > > > > > > > (no > > > > > > > > > > hardlines > > > > > > > > > > or other LOS/NLOS WISPs available). > > > > > > > > > >=20 > > > > > > > > > > Tried assigning DNS servers 74.113.60.185 and > > > > > > > > > > 156.154.70.1 > > > > > > > > > > - no > > > > > > > > > > change. > > > > > > > > > >=20 > > > > > > > > > > Paul > > > > > > > > > >=20 > > > > > > > >=20 > > > > > > > > Sorry for the lllooonnnggg delay - had to get a testing > > > > > > > > time > > > > > > > > window. > > > > > > > >=20 > > > > > > > > Unbound was indeed running - verified with > > > > > > > > "/etc/init.d/unbound > > > > > > > > status" > > > > > > > >=20 > > > > > > > > Command and output from "restart": > > > > > > > >=20 > > > > > > > > # /etc/init.d/unbound restart > > > > > > > > Stopping Unbound DNS > > > > > > > > Proxy...=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0[=C2=A0=C2=A0OK=C2=A0=C2= =A0] > > > > > > > > Starting Unbound DNS > > > > > > > > Proxy...=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0[=C2=A0=C2=A0OK=C2=A0=C2= =A0] > > > > > > > > Ignoring broken upstream name server(s): 74.113.60.185 > > > > > > > > 156.154.70.1=C2=A0=C2=A0=C2=A0=C2=A0[ WARN ] > > > > > > > > Falling back to recursor > > > > > > > > mode=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0[ WARN ] > > > > > > >=20 > > > > > > > So, can you remind me what your provider does again? Is any > > > > > > > access to > > > > > > > other name > > > > > > > servers forbidden? If so the updated script should have > > > > > > > detected > > > > > > > that > > > > > > > and should > > > > > > > not have activated the recursor mode. > > > > > > >=20 > > > > > > > Could you manually execute the following commands from the > > > > > > > console of > > > > > > > IPFire for > > > > > > > me? > > > > > > >=20 > > > > > > > =C2=A0 dig @198.41.0.4 +dnssec SOA . > > > > > > >=20 > > > > > > > The dot at the end is important. What is the output of it? > > > > > > >=20 > > > > > > > Best, > > > > > > > -Michael > > > > > > >=20 > > > > > > > >=20 > > > > > > > >=20 > > > > > > > >=20 > > > > > > > >=20 > > > > > > > > Thank you, > > > > > > > > Paul > > > > > >=20 > > > > > > # dig @198.41.0.4 +dnssec SOA . > > > > > >=20 > > > > > > ; <<>> DiG 9.11.0-P3 <<>> @198.41.0.4 +dnssec SOA . > > > > > > ; (1 server found) > > > > > > ;; global options: +cmd > > > > > > ;; Got answer: > > > > > > ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 811 > > > > > > ;; flags: qr aa rd; QUERY: 1, ANSWER: 2, AUTHORITY: 14, > > > > > > ADDITIONAL: > > > > > > 27 > > > > > > ;; WARNING: recursion requested but not available > > > > > >=20 > > > > > > ;; OPT PSEUDOSECTION: > > > > > > ; EDNS: version: 0, flags: do; udp: 4096 > > > > > > ;; QUESTION SECTION: > > > > > > ;.=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0SOA > > > > > >=20 > > > > > > ;; ANSWER SECTION: > > > > > > .=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A086400=C2=A0=C2=A0=C2=A0=C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0SOA=C2=A0=C2= =A0=C2=A0=C2=A0a.root- > > > > > > servers.net. nstld.verisign-grs.com. 2017030601 1800 900 604800 > > > > > > 86400 > > > > > > .=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A086400=C2=A0=C2=A0=C2=A0=C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0RRSIG=C2=A0= =C2=A0=C2=A0=C2=A0SOA 8 > > > > > > 0 > > > > > > 86400 20170319170000 20170306160000 61045 . > > > > > > X2xWv3z0ZmFxXkF9ybMgxMv6dcZ+SmnG3XHcNtAavuPNPLW3cVBwolDP > > > > > > lOU5/tfOaKwbu7HENFWysaekMpb6O7ycg+kryuCP7z6Q4WyG0O2160l1 > > > > > > DDG0UbBW5yidfcghq1r6sdz30RI5cSBGcAOmlktnPkjs9wv9/S/ZPyrC > > > > > > qMPJR9A60R52NcWEONS3DiyGxR66KA4S4grJnDgcI6pcytJGXm/b5WRO > > > > > > +v51tnLT0UVbgXvV03Itn/3MR72muzKXWzzj5LFJST5iqWCgAHJryG3T > > > > > > vNKEYLQ76nwl6B3YVJDjC1InmpIujwXBbxMKpyL1Sh0RLdlHq2TtZS8O > > > > > > qk4V0Q=3D=3D > > > > > >=20 > > > > > > ;; AUTHORITY SECTION: > > > > > > .=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0518400=C2=A0=C2=A0=C2=A0=C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0NS=C2=A0=C2= =A0=C2=A0=C2=A0e.root- > > > > > > servers.net. > > > > > > .=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0518400=C2=A0=C2=A0=C2=A0=C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0NS=C2=A0=C2= =A0=C2=A0=C2=A0h.root- > > > > > > servers.net. > > > > > > .=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0518400=C2=A0=C2=A0=C2=A0=C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0NS=C2=A0=C2= =A0=C2=A0=C2=A0l.root- > > > > > > servers.net. > > > > > > .=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0518400=C2=A0=C2=A0=C2=A0=C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0NS=C2=A0=C2= =A0=C2=A0=C2=A0i.root- > > > > > > servers.net. > > > > > > .=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0518400=C2=A0=C2=A0=C2=A0=C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0NS=C2=A0=C2= =A0=C2=A0=C2=A0a.root- > > > > > > servers.net. > > > > > > .=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0518400=C2=A0=C2=A0=C2=A0=C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0NS=C2=A0=C2= =A0=C2=A0=C2=A0d.root- > > > > > > servers.net. > > > > > > .=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0518400=C2=A0=C2=A0=C2=A0=C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0NS=C2=A0=C2= =A0=C2=A0=C2=A0c.root- > > > > > > servers.net. > > > > > > .=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0518400=C2=A0=C2=A0=C2=A0=C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0NS=C2=A0=C2= =A0=C2=A0=C2=A0b.root- > > > > > > servers.net. > > > > > > .=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0518400=C2=A0=C2=A0=C2=A0=C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0NS=C2=A0=C2= =A0=C2=A0=C2=A0j.root- > > > > > > servers.net. > > > > > > .=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0518400=C2=A0=C2=A0=C2=A0=C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0NS=C2=A0=C2= =A0=C2=A0=C2=A0k.root- > > > > > > servers.net. > > > > > > .=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0518400=C2=A0=C2=A0=C2=A0=C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0NS=C2=A0=C2= =A0=C2=A0=C2=A0g.root- > > > > > > servers.net. > > > > > > .=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0518400=C2=A0=C2=A0=C2=A0=C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0NS=C2=A0=C2= =A0=C2=A0=C2=A0m.root- > > > > > > servers.net. > > > > > > .=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0518400=C2=A0=C2=A0=C2=A0=C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0NS=C2=A0=C2= =A0=C2=A0=C2=A0f.root- > > > > > > servers.net. > > > > > > .=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0518400=C2=A0=C2=A0=C2=A0=C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0RRSIG=C2=A0= =C2=A0=C2=A0=C2=A0NS 8 > > > > > > 0 > > > > > > 518400 20170319170000 20170306160000 61045 . > > > > > > iQVPY67dNDj6w14dY1tDFgwRFqhEXVVLmY8q1woIX1eU7t1k/XaPi+tX > > > > > > 3+PDCFQlrQmWSWUtLPaA6pmrACB6EL2YvWzAiLVyocGCBpUpnbUCNAwm > > > > > > nD4SvBZb0ET2jWbSiAzo8iy+1+Hr84I8RXtbcrcpF5Y/J5Oataxt5z9o > > > > > > dHGQSKru0eYEbwfszq0L5L8KECk6skm7iQ0RAIspdTfjDsIwtvoAhEGV > > > > > > B8qjFQP5Bkcn38b35eWHneCmc3cgG0J+pK/eX/YHpqClcINGh3eavBlC > > > > > > 1KpUkDDMAwCvo+X/MhDE2Ol/VR00/M/YCzXbEv97IWenM1Xi4ArX9F1C > > > > > > xBc0gA=3D=3D > > > > > >=20 > > > > > > ;; ADDITIONAL SECTION: > > > > > > e.root-servers.net.=C2=A0=C2=A0=C2=A0=C2=A0518400=C2=A0=C2=A0=C2= =A0=C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0A=C2=A0=C2=A0=C2=A0=C2=A0192.203 > > > > > > .230 > > > > > > .10 > > > > > > e.root-servers.net.=C2=A0=C2=A0=C2=A0=C2=A0518400=C2=A0=C2=A0=C2= =A0=C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0AAAA=C2=A0=C2=A0=C2=A0=C2=A02001 > > > > > > :500 > > > > > > :a8::e > > > > > > h.root-servers.net.=C2=A0=C2=A0=C2=A0=C2=A0518400=C2=A0=C2=A0=C2= =A0=C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0A=C2=A0=C2=A0=C2=A0=C2=A0198.97. > > > > > > 190. > > > > > > 53 > > > > > > h.root-servers.net.=C2=A0=C2=A0=C2=A0=C2=A0518400=C2=A0=C2=A0=C2= =A0=C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0AAAA=C2=A0=C2=A0=C2=A0=C2=A02001 > > > > > > :500 > > > > > > :1::53 > > > > > > l.root-servers.net.=C2=A0=C2=A0=C2=A0=C2=A0518400=C2=A0=C2=A0=C2= =A0=C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0A=C2=A0=C2=A0=C2=A0=C2=A0199.7.8 > > > > > > 3.42 > > > > > > l.root-servers.net.=C2=A0=C2=A0=C2=A0=C2=A0518400=C2=A0=C2=A0=C2= =A0=C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0AAAA=C2=A0=C2=A0=C2=A0=C2=A02001 > > > > > > :500 > > > > > > :9f::42 > > > > > > i.root-servers.net.=C2=A0=C2=A0=C2=A0=C2=A0518400=C2=A0=C2=A0=C2= =A0=C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0A=C2=A0=C2=A0=C2=A0=C2=A0192.36. > > > > > > 148. > > > > > > 17 > > > > > > i.root-servers.net.=C2=A0=C2=A0=C2=A0=C2=A0518400=C2=A0=C2=A0=C2= =A0=C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0AAAA=C2=A0=C2=A0=C2=A0=C2=A02001 > > > > > > :7fe > > > > > > ::53 > > > > > > a.root-servers.net.=C2=A0=C2=A0=C2=A0=C2=A0518400=C2=A0=C2=A0=C2= =A0=C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0A=C2=A0=C2=A0=C2=A0=C2=A0198.41. > > > > > > 0.4 > > > > > > a.root-servers.net.=C2=A0=C2=A0=C2=A0=C2=A0518400=C2=A0=C2=A0=C2= =A0=C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0AAAA=C2=A0=C2=A0=C2=A0=C2=A02001 > > > > > > :503 > > > > > > :ba3e::2:30 > > > > > > d.root-servers.net.=C2=A0=C2=A0=C2=A0=C2=A0518400=C2=A0=C2=A0=C2= =A0=C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0A=C2=A0=C2=A0=C2=A0=C2=A0199.7.9 > > > > > > 1.13 > > > > > > d.root-servers.net.=C2=A0=C2=A0=C2=A0=C2=A0518400=C2=A0=C2=A0=C2= =A0=C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0AAAA=C2=A0=C2=A0=C2=A0=C2=A02001 > > > > > > :500 > > > > > > :2d::d > > > > > > c.root-servers.net.=C2=A0=C2=A0=C2=A0=C2=A0518400=C2=A0=C2=A0=C2= =A0=C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0A=C2=A0=C2=A0=C2=A0=C2=A0192.33. > > > > > > 4.12 > > > > > > c.root-servers.net.=C2=A0=C2=A0=C2=A0=C2=A0518400=C2=A0=C2=A0=C2= =A0=C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0AAAA=C2=A0=C2=A0=C2=A0=C2=A02001 > > > > > > :500 > > > > > > :2::c > > > > > > b.root-servers.net.=C2=A0=C2=A0=C2=A0=C2=A0518400=C2=A0=C2=A0=C2= =A0=C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0A=C2=A0=C2=A0=C2=A0=C2=A0192.228 > > > > > > .79. > > > > > > 201 > > > > > > b.root-servers.net.=C2=A0=C2=A0=C2=A0=C2=A0518400=C2=A0=C2=A0=C2= =A0=C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0AAAA=C2=A0=C2=A0=C2=A0=C2=A02001 > > > > > > :500 > > > > > > :84::b > > > > > > j.root-servers.net.=C2=A0=C2=A0=C2=A0=C2=A0518400=C2=A0=C2=A0=C2= =A0=C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0A=C2=A0=C2=A0=C2=A0=C2=A0192.58. > > > > > > 128. > > > > > > 30 > > > > > > j.root-servers.net.=C2=A0=C2=A0=C2=A0=C2=A0518400=C2=A0=C2=A0=C2= =A0=C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0AAAA=C2=A0=C2=A0=C2=A0=C2=A02001 > > > > > > :503 > > > > > > :c27::2:30 > > > > > > k.root-servers.net.=C2=A0=C2=A0=C2=A0=C2=A0518400=C2=A0=C2=A0=C2= =A0=C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0A=C2=A0=C2=A0=C2=A0=C2=A0193.0.1 > > > > > > 4.12 > > > > > > 9 > > > > > > k.root-servers.net.=C2=A0=C2=A0=C2=A0=C2=A0518400=C2=A0=C2=A0=C2= =A0=C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0AAAA=C2=A0=C2=A0=C2=A0=C2=A02001 > > > > > > :7fd > > > > > > ::1 > > > > > > g.root-servers.net.=C2=A0=C2=A0=C2=A0=C2=A0518400=C2=A0=C2=A0=C2= =A0=C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0A=C2=A0=C2=A0=C2=A0=C2=A0192.112 > > > > > > .36. > > > > > > 4 > > > > > > g.root-servers.net.=C2=A0=C2=A0=C2=A0=C2=A0518400=C2=A0=C2=A0=C2= =A0=C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0AAAA=C2=A0=C2=A0=C2=A0=C2=A02001 > > > > > > :500 > > > > > > :12::d0d > > > > > > m.root-servers.net.=C2=A0=C2=A0=C2=A0=C2=A0518400=C2=A0=C2=A0=C2= =A0=C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0A=C2=A0=C2=A0=C2=A0=C2=A0202.12. > > > > > > 27.3 > > > > > > 3 > > > > > > m.root-servers.net.=C2=A0=C2=A0=C2=A0=C2=A0518400=C2=A0=C2=A0=C2= =A0=C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0AAAA=C2=A0=C2=A0=C2=A0=C2=A02001 > > > > > > :dc3 > > > > > > ::35 > > > > > > f.root-servers.net.=C2=A0=C2=A0=C2=A0=C2=A0518400=C2=A0=C2=A0=C2= =A0=C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0A=C2=A0=C2=A0=C2=A0=C2=A0192.5.5 > > > > > > .241 > > > > > > f.root-servers.net.=C2=A0=C2=A0=C2=A0=C2=A0518400=C2=A0=C2=A0=C2= =A0=C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0AAAA=C2=A0=C2=A0=C2=A0=C2=A02001 > > > > > > :500 > > > > > > :2f::f > > > > > >=20 > > > > > > ;; Query time: 836 msec > > > > > > ;; SERVER: 198.41.0.4#53(198.41.0.4) > > > > > > ;; WHEN: Mon Mar 06 15:40:58 CST 2017 > > > > > > ;; MSG SIZE=C2=A0=C2=A0rcvd: 1440 > > > > > > # > > > > > >=20 > > > > > > I suspect the ISP mangles DNS requests directed outside their > > > > > > net. > > > > >=20 > > > > > Well, that command shouldn't have worked then. > > > > >=20 > > > > > Could you give me an example for something that you cannot > > > > > resolve? > > > > >=20 > > > > > -Michael > > > > >=20 > > > > > >=20 > > > > > >=20 > > > > > > Thank you, > > > > > > Paul > > > >=20 > > > > Ah, I see... so the problem is that we're not forwarding requests > > > > outside the local domain? Latest testing sequence follows: > > > >=20 > > > > # /etc/init.d/unbound restart > > > > Stopping Unbound DNS > > > > Proxy...=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0[=C2=A0=C2=A0OK=C2=A0=C2=A0] > > > > Starting Unbound DNS > > > > Proxy...=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0[=C2=A0=C2=A0OK=C2=A0=C2=A0] > > > > Ignoring broken upstream name server(s): 74.113.60.185 > > > > 156.154.70.1=C2=A0=C2=A0=C2=A0=C2=A0[ WARN ] > > > > Falling back to recursor > > > > mode=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0[ WARN ] > > > >=20 > > > > # dig @198.41.0.4 +dnssec SOA . > > > >=20 > > > > ; <<>> DiG 9.11.0-P3 <<>> @198.41.0.4 +dnssec SOA . > > > > ; (1 server found) > > > > ;; global options: +cmd > > > > ;; Got answer: > > > > ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 23002 > > > > ;; flags: qr aa rd; QUERY: 1, ANSWER: 2, AUTHORITY: 14, ADDITIONAL: > > > > 27 > > > > ;; WARNING: recursion requested but not available > > > >=20 > > > > ;; OPT PSEUDOSECTION: > > > > ; EDNS: version: 0, flags: do; udp: 1472 > > > > ;; QUESTION SECTION: > > > > ;.=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0SOA > > > >=20 > > > > ;; ANSWER SECTION: > > > > .=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A086400=C2=A0=C2=A0=C2=A0=C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0SOA=C2=A0=C2=A0= =C2=A0=C2=A0a.root-servers.net. > > > > nstld.verisign-grs.com. 2017030601 1800 900 604800 86400 > > > > .=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A086400=C2=A0=C2=A0=C2=A0=C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0RRSIG=C2=A0=C2= =A0=C2=A0=C2=A0SOA 8 0 86400 20170319170000 > > > > 20170306160000 61045 . > > > > X2xWv3z0ZmFxXkF9ybMgxMv6dcZ+SmnG3XHcNtAavuPNPLW3cVBwolDP > > > > lOU5/tfOaKwbu7HENFWysaekMpb6O7ycg+kryuCP7z6Q4WyG0O2160l1 > > > > DDG0UbBW5yidfcghq1r6sdz30RI5cSBGcAOmlktnPkjs9wv9/S/ZPyrC > > > > qMPJR9A60R52NcWEONS3DiyGxR66KA4S4grJnDgcI6pcytJGXm/b5WRO > > > > +v51tnLT0UVbgXvV03Itn/3MR72muzKXWzzj5LFJST5iqWCgAHJryG3T > > > > vNKEYLQ76nwl6B3YVJDjC1InmpIujwXBbxMKpyL1Sh0RLdlHq2TtZS8O qk4V0Q=3D=3D > > > >=20 > > > > ;; AUTHORITY SECTION: > > > > .=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0518400=C2=A0=C2=A0=C2=A0=C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0NS=C2=A0=C2=A0= =C2=A0=C2=A0a.root-servers.net. > > > > .=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0518400=C2=A0=C2=A0=C2=A0=C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0NS=C2=A0=C2=A0= =C2=A0=C2=A0b.root-servers.net. > > > > .=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0518400=C2=A0=C2=A0=C2=A0=C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0NS=C2=A0=C2=A0= =C2=A0=C2=A0c.root-servers.net. > > > > .=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0518400=C2=A0=C2=A0=C2=A0=C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0NS=C2=A0=C2=A0= =C2=A0=C2=A0d.root-servers.net. > > > > .=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0518400=C2=A0=C2=A0=C2=A0=C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0NS=C2=A0=C2=A0= =C2=A0=C2=A0e.root-servers.net. > > > > .=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0518400=C2=A0=C2=A0=C2=A0=C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0NS=C2=A0=C2=A0= =C2=A0=C2=A0f.root-servers.net. > > > > .=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0518400=C2=A0=C2=A0=C2=A0=C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0NS=C2=A0=C2=A0= =C2=A0=C2=A0g.root-servers.net. > > > > .=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0518400=C2=A0=C2=A0=C2=A0=C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0NS=C2=A0=C2=A0= =C2=A0=C2=A0h.root-servers.net. > > > > .=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0518400=C2=A0=C2=A0=C2=A0=C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0NS=C2=A0=C2=A0= =C2=A0=C2=A0i.root-servers.net. > > > > .=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0518400=C2=A0=C2=A0=C2=A0=C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0NS=C2=A0=C2=A0= =C2=A0=C2=A0j.root-servers.net. > > > > .=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0518400=C2=A0=C2=A0=C2=A0=C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0NS=C2=A0=C2=A0= =C2=A0=C2=A0k.root-servers.net. > > > > .=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0518400=C2=A0=C2=A0=C2=A0=C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0NS=C2=A0=C2=A0= =C2=A0=C2=A0l.root-servers.net. > > > > .=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0518400=C2=A0=C2=A0=C2=A0=C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0NS=C2=A0=C2=A0= =C2=A0=C2=A0m.root-servers.net. > > > > .=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0518400=C2=A0=C2=A0=C2=A0=C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0RRSIG=C2=A0=C2= =A0=C2=A0=C2=A0NS 8 0 518400 20170319170000 > > > > 20170306160000 61045 . > > > > iQVPY67dNDj6w14dY1tDFgwRFqhEXVVLmY8q1woIX1eU7t1k/XaPi+tX > > > > 3+PDCFQlrQmWSWUtLPaA6pmrACB6EL2YvWzAiLVyocGCBpUpnbUCNAwm > > > > nD4SvBZb0ET2jWbSiAzo8iy+1+Hr84I8RXtbcrcpF5Y/J5Oataxt5z9o > > > > dHGQSKru0eYEbwfszq0L5L8KECk6skm7iQ0RAIspdTfjDsIwtvoAhEGV > > > > B8qjFQP5Bkcn38b35eWHneCmc3cgG0J+pK/eX/YHpqClcINGh3eavBlC > > > > 1KpUkDDMAwCvo+X/MhDE2Ol/VR00/M/YCzXbEv97IWenM1Xi4ArX9F1C xBc0gA=3D=3D > > > >=20 > > > > ;; ADDITIONAL SECTION: > > > > a.root-servers.net.=C2=A0=C2=A0=C2=A0=C2=A0518400=C2=A0=C2=A0=C2=A0= =C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0A=C2=A0=C2=A0=C2=A0=C2=A0198.41.0.4 > > > > b.root-servers.net.=C2=A0=C2=A0=C2=A0=C2=A0518400=C2=A0=C2=A0=C2=A0= =C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0A=C2=A0=C2=A0=C2=A0=C2=A0192.228.79.201 > > > > c.root-servers.net.=C2=A0=C2=A0=C2=A0=C2=A0518400=C2=A0=C2=A0=C2=A0= =C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0A=C2=A0=C2=A0=C2=A0=C2=A0192.33.4.12 > > > > d.root-servers.net.=C2=A0=C2=A0=C2=A0=C2=A0518400=C2=A0=C2=A0=C2=A0= =C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0A=C2=A0=C2=A0=C2=A0=C2=A0199.7.91.13 > > > > e.root-servers.net.=C2=A0=C2=A0=C2=A0=C2=A0518400=C2=A0=C2=A0=C2=A0= =C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0A=C2=A0=C2=A0=C2=A0=C2=A0192.203.230.10 > > > > f.root-servers.net.=C2=A0=C2=A0=C2=A0=C2=A0518400=C2=A0=C2=A0=C2=A0= =C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0A=C2=A0=C2=A0=C2=A0=C2=A0192.5.5.241 > > > > g.root-servers.net.=C2=A0=C2=A0=C2=A0=C2=A0518400=C2=A0=C2=A0=C2=A0= =C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0A=C2=A0=C2=A0=C2=A0=C2=A0192.112.36.4 > > > > h.root-servers.net.=C2=A0=C2=A0=C2=A0=C2=A0518400=C2=A0=C2=A0=C2=A0= =C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0A=C2=A0=C2=A0=C2=A0=C2=A0198.97.190.53 > > > > i.root-servers.net.=C2=A0=C2=A0=C2=A0=C2=A0518400=C2=A0=C2=A0=C2=A0= =C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0A=C2=A0=C2=A0=C2=A0=C2=A0192.36.148.17 > > > > j.root-servers.net.=C2=A0=C2=A0=C2=A0=C2=A0518400=C2=A0=C2=A0=C2=A0= =C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0A=C2=A0=C2=A0=C2=A0=C2=A0192.58.128.30 > > > > k.root-servers.net.=C2=A0=C2=A0=C2=A0=C2=A0518400=C2=A0=C2=A0=C2=A0= =C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0A=C2=A0=C2=A0=C2=A0=C2=A0193.0.14.129 > > > > l.root-servers.net.=C2=A0=C2=A0=C2=A0=C2=A0518400=C2=A0=C2=A0=C2=A0= =C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0A=C2=A0=C2=A0=C2=A0=C2=A0199.7.83.42 > > > > m.root-servers.net.=C2=A0=C2=A0=C2=A0=C2=A0518400=C2=A0=C2=A0=C2=A0= =C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0A=C2=A0=C2=A0=C2=A0=C2=A0202.12.27.33 > > > > a.root-servers.net.=C2=A0=C2=A0=C2=A0=C2=A0518400=C2=A0=C2=A0=C2=A0= =C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0AAAA=C2=A0=C2=A0=C2=A0=C2=A02001:503:ba3e::2:= 30 > > > > b.root-servers.net.=C2=A0=C2=A0=C2=A0=C2=A0518400=C2=A0=C2=A0=C2=A0= =C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0AAAA=C2=A0=C2=A0=C2=A0=C2=A02001:500:84::b > > > > c.root-servers.net.=C2=A0=C2=A0=C2=A0=C2=A0518400=C2=A0=C2=A0=C2=A0= =C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0AAAA=C2=A0=C2=A0=C2=A0=C2=A02001:500:2::c > > > > d.root-servers.net.=C2=A0=C2=A0=C2=A0=C2=A0518400=C2=A0=C2=A0=C2=A0= =C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0AAAA=C2=A0=C2=A0=C2=A0=C2=A02001:500:2d::d > > > > e.root-servers.net.=C2=A0=C2=A0=C2=A0=C2=A0518400=C2=A0=C2=A0=C2=A0= =C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0AAAA=C2=A0=C2=A0=C2=A0=C2=A02001:500:a8::e > > > > f.root-servers.net.=C2=A0=C2=A0=C2=A0=C2=A0518400=C2=A0=C2=A0=C2=A0= =C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0AAAA=C2=A0=C2=A0=C2=A0=C2=A02001:500:2f::f > > > > g.root-servers.net.=C2=A0=C2=A0=C2=A0=C2=A0518400=C2=A0=C2=A0=C2=A0= =C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0AAAA=C2=A0=C2=A0=C2=A0=C2=A02001:500:12::d0d > > > > h.root-servers.net.=C2=A0=C2=A0=C2=A0=C2=A0518400=C2=A0=C2=A0=C2=A0= =C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0AAAA=C2=A0=C2=A0=C2=A0=C2=A02001:500:1::53 > > > > i.root-servers.net.=C2=A0=C2=A0=C2=A0=C2=A0518400=C2=A0=C2=A0=C2=A0= =C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0AAAA=C2=A0=C2=A0=C2=A0=C2=A02001:7fe::53 > > > > j.root-servers.net.=C2=A0=C2=A0=C2=A0=C2=A0518400=C2=A0=C2=A0=C2=A0= =C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0AAAA=C2=A0=C2=A0=C2=A0=C2=A02001:503:c27::2:30 > > > > k.root-servers.net.=C2=A0=C2=A0=C2=A0=C2=A0518400=C2=A0=C2=A0=C2=A0= =C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0AAAA=C2=A0=C2=A0=C2=A0=C2=A02001:7fd::1 > > > > l.root-servers.net.=C2=A0=C2=A0=C2=A0=C2=A0518400=C2=A0=C2=A0=C2=A0= =C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0AAAA=C2=A0=C2=A0=C2=A0=C2=A02001:500:9f::42 > > > > m.root-servers.net.=C2=A0=C2=A0=C2=A0=C2=A0518400=C2=A0=C2=A0=C2=A0= =C2=A0IN=C2=A0=C2=A0=C2=A0=C2=A0AAAA=C2=A0=C2=A0=C2=A0=C2=A02001:dc3::35 > > > >=20 > > > > ;; Query time: 797 msec > > > > ;; SERVER: 198.41.0.4#53(198.41.0.4) > > > > ;; WHEN: Mon Mar 06 17:03:12 CST 2017 > > > > ;; MSG SIZE=C2=A0=C2=A0rcvd: 1440 > > > >=20 > > > > # host www.google.com > > > > Host www.google.com not found: 2(SERVFAIL) > > > >=20 > > > > # host www.ipfire.org > > > > ;; connection timed out; no servers could be reached > > > >=20 > > > >=20 > > > > # nslookup www.google.com > > > > Server:=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0127.0.0.1 > > > > Address:=C2=A0=C2=A0=C2=A0=C2=A0127.0.0.1#53 > > > >=20 > > > > ** server can't find www.google.com: SERVFAIL > > > >=20 > > > > # nslookup www.ipfire.org 8.8.8.8 > > > > Server:=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A08.8.8.8 > > > > Address:=C2=A0=C2=A0=C2=A0=C2=A08.8.8.8#53 > > > >=20 > > > > Non-authoritative answer: > > > > www.ipfire.org class=3D"Apple-tab-span" style=3D"white- > > > > space:pre">=C2=A0=C2=A0=C2=A0=C2=A0canonical name =3D web01.ipfire.or= g. > > > > Name:=C2=A0=C2=A0=C2=A0=C2=A0web01.ipfire.org > > > > Address: 81.3.27.41 > > > >=20 > > > >=20 > > > > Thanks, > > > > Paul > > > >=20 > > >=20 > >=20 > > Log from unbound (via web interface): > >=20 > > IPFire diagnostics > > Section: unbound > > Date: March 07, 2017 > >=20 > > 09:53:05 unbound: [3485:0]=C2=A0=C2=A0info: validation failure ns02.fedor= aproject.org. > > AAAA IN > > 09:53:05 unbound: [3485:0]=C2=A0=C2=A0info: validation failure ns05.fedor= aproject.org. > > AAAA IN > > 09:53:05 unbound: [3485:0]=C2=A0=C2=A0info: validation failure fedoraproj= ect.org. AAAA > > IN > > 09:52:36 unbound: [3485:1]=C2=A0=C2=A0info: validation failure > > fedoraproject.org.localdomain. AAAA IN > > 09:52:29 unbound: [3485:0]=C2=A0=C2=A0info: failed to prime trust anchor = -- could not > > fetch DNSKEY rrset . DNSKEY IN > > 09:52:19 unbound: [3485:0]=C2=A0=C2=A0info: failed to prime trust anchor = -- could not > > fetch DNSKEY rrset . DNSKEY IN > > 09:51:29 unbound: [3485:0]=C2=A0=C2=A0info: start of service (unbound 1.6= .1). > > 09:51:29 unbound: [3485:0]=C2=A0=C2=A0notice: init module 1: iterator > > 09:51:29 unbound: [3485:0]=C2=A0=C2=A0notice: init module 0: validator > > 09:51:27 unbound: [1406:0]=C2=A0=C2=A0info:=C2=A0=C2=A0=C2=A0=C2=A04.0000= 00=C2=A0=C2=A0=C2=A0=C2=A08.000000 1 > > 09:51:27 unbound: [1406:0]=C2=A0=C2=A0info:=C2=A0=C2=A0=C2=A0=C2=A02.0000= 00=C2=A0=C2=A0=C2=A0=C2=A04.000000 1 > > 09:51:27 unbound: [1406:0]=C2=A0=C2=A0info:=C2=A0=C2=A0=C2=A0=C2=A00.5242= 88=C2=A0=C2=A0=C2=A0=C2=A01.000000 2 > > 09:51:27 unbound: [1406:0]=C2=A0=C2=A0info:=C2=A0=C2=A0=C2=A0=C2=A00.2621= 44=C2=A0=C2=A0=C2=A0=C2=A00.524288 5 > > 09:51:27 unbound: [1406:0]=C2=A0=C2=A0info:=C2=A0=C2=A0=C2=A0=C2=A00.1310= 72=C2=A0=C2=A0=C2=A0=C2=A00.262144 1 > > 09:51:27 unbound: [1406:0]=C2=A0=C2=A0info:=C2=A0=C2=A0=C2=A0=C2=A00.0163= 84=C2=A0=C2=A0=C2=A0=C2=A00.032768 1 > > 09:51:27 unbound: [1406:0]=C2=A0=C2=A0info:=C2=A0=C2=A0=C2=A0=C2=A00.0081= 92=C2=A0=C2=A0=C2=A0=C2=A00.016384 1 > > 09:51:27 unbound: [1406:0]=C2=A0=C2=A0info:=C2=A0=C2=A0=C2=A0=C2=A00.0000= 00=C2=A0=C2=A0=C2=A0=C2=A00.000001 7 > > 09:51:27 unbound: [1406:0]=C2=A0=C2=A0info: lower(secs) upper(secs) recur= sions > > 09:51:27 unbound: [1406:0]=C2=A0=C2=A0info: [25%]=3D6.78571e-07 median[50= %]=3D0.196608 > > [75%]=3D0.484966 > > 09:51:27 unbound: [1406:0]=C2=A0=C2=A0info: histogram of recursion proces= sing times > > 09:51:27 unbound: [1406:0]=C2=A0=C2=A0info: average recursion processing = time 0.581705 > > sec > > 09:51:27 unbound: [1406:0]=C2=A0=C2=A0info: server stats for thread 1: re= questlist max > > 3 avg 0.526316 exceeded 0 jostled 0 > > 09:51:27 unbound: [1406:0]=C2=A0=C2=A0info: server stats for thread 1: 45= queries, 26 > > answers from cache, 19 recursions, 0 prefetch, 0 rejected by ip ratelimit= ing > > 09:51:27 unbound: [1406:0]=C2=A0=C2=A0info:=C2=A0=C2=A0=C2=A032.000000=C2= =A0=C2=A0=C2=A064.000000 6 > > 09:51:27 unbound: [1406:0]=C2=A0=C2=A0info:=C2=A0=C2=A0=C2=A016.000000=C2= =A0=C2=A0=C2=A032.000000 6 > > 09:51:27 unbound: [1406:0]=C2=A0=C2=A0info:=C2=A0=C2=A0=C2=A0=C2=A08.0000= 00=C2=A0=C2=A0=C2=A016.000000 11 > > 09:51:27 unbound: [1406:0]=C2=A0=C2=A0info:=C2=A0=C2=A0=C2=A0=C2=A04.0000= 00=C2=A0=C2=A0=C2=A0=C2=A08.000000 5 > > 09:51:27 unbound: [1406:0]=C2=A0=C2=A0info:=C2=A0=C2=A0=C2=A0=C2=A02.0000= 00=C2=A0=C2=A0=C2=A0=C2=A04.000000 2 > > 09:51:27 unbound: [1406:0]=C2=A0=C2=A0info:=C2=A0=C2=A0=C2=A0=C2=A01.0000= 00=C2=A0=C2=A0=C2=A0=C2=A02.000000 2 > > 09:51:27 unbound: [1406:0]=C2=A0=C2=A0info:=C2=A0=C2=A0=C2=A0=C2=A00.2621= 44=C2=A0=C2=A0=C2=A0=C2=A00.524288 4 > > 09:51:27 unbound: [1406:0]=C2=A0=C2=A0info:=C2=A0=C2=A0=C2=A0=C2=A00.1310= 72=C2=A0=C2=A0=C2=A0=C2=A00.262144 1 > > 09:51:27 unbound: [1406:0]=C2=A0=C2=A0info:=C2=A0=C2=A0=C2=A0=C2=A00.0000= 00=C2=A0=C2=A0=C2=A0=C2=A00.000001 2 > > 09:51:27 unbound: [1406:0]=C2=A0=C2=A0info: lower(secs) upper(secs) recur= sions > > 09:51:27 unbound: [1406:0]=C2=A0=C2=A0info: [25%]=3D2.75 median[50%]=3D10= .5455 [75%]=3D22 > > 09:51:27 unbound: [1406:0]=C2=A0=C2=A0info: histogram of recursion proces= sing times > > 09:51:27 unbound: [1406:0]=C2=A0=C2=A0info: average recursion processing = time > > 15.696339 sec > > 09:51:27 unbound: [1406:0]=C2=A0=C2=A0info: server stats for thread 0: re= questlist max > > 68 avg 23.925 exceeded 0 jostled 0 > > 09:51:27 unbound: [1406:0]=C2=A0=C2=A0info: server stats for thread 0: 67= queries, 28 > > answers from cache, 39 recursions, 1 prefetch, 0 rejected by ip ratelimit= ing > > 09:51:27 unbound: [1406:0]=C2=A0=C2=A0info: service stopped (unbound 1.6.= 1). > > 09:50:18 unbound: [1406:0]=C2=A0=C2=A0info: validation failure b.gtld-ser= vers.net. > > AAAA IN > > 09:50:18 unbound: [1406:0]=C2=A0=C2=A0info: validation failure a.gtld-ser= vers.net. > > AAAA IN > > 09:50:17 unbound: [1406:0]=C2=A0=C2=A0info: validation failure a.root-ser= vers.net. > > AAAA IN > > 09:50:17 unbound: [1406:0]=C2=A0=C2=A0info: validation failure m.root-ser= vers.net. > > AAAA IN > > 09:50:17 unbound: [1406:0]=C2=A0=C2=A0info: validation failure c.root-ser= vers.net. > > AAAA IN > > 09:50:17 unbound: [1406:0]=C2=A0=C2=A0info: validation failure b.root-ser= vers.net. > > AAAA IN > > 09:50:17 unbound: [1406:0]=C2=A0=C2=A0info: validation failure l.root-ser= vers.net. > > AAAA IN > > 09:50:17 unbound: [1406:0]=C2=A0=C2=A0info: validation failure k.root-ser= vers.net. > > AAAA IN > > 09:50:17 unbound: [1406:0]=C2=A0=C2=A0info: validation failure j.root-ser= vers.net. > > AAAA IN > > 09:50:17 unbound: [1406:0]=C2=A0=C2=A0info: validation failure i.root-ser= vers.net. > > AAAA IN > > 09:50:17 unbound: [1406:0]=C2=A0=C2=A0info: validation failure h.root-ser= vers.net. > > AAAA IN > > 09:50:17 unbound: [1406:0]=C2=A0=C2=A0info: validation failure g.root-ser= vers.net. > > AAAA IN > > 09:50:17 unbound: [1406:0]=C2=A0=C2=A0info: validation failure f.root-ser= vers.net. > > AAAA IN > > 09:50:17 unbound: [1406:0]=C2=A0=C2=A0info: validation failure e.root-ser= vers.net. > > AAAA IN > > 09:50:17 unbound: [1406:0]=C2=A0=C2=A0info: validation failure d.root-ser= vers.net. > > AAAA IN > > 09:49:55 unbound: [1406:0]=C2=A0=C2=A0info: validation failure ns02.fedor= aproject.org. > > AAAA IN > > 09:49:55 unbound: [1406:0]=C2=A0=C2=A0info: validation failure ns05.fedor= aproject.org. > > AAAA IN > > 09:49:51 unbound: [1406:0]=C2=A0=C2=A0info: validation failure fedoraproj= ect.org. AAAA > > IN > > 09:49:48 unbound: [1406:0]=C2=A0=C2=A0info: validation failure fireinfo.i= pfire.org. > > AAAA IN > > 09:49:46 unbound: [1406:0]=C2=A0=C2=A0info: validation failure > > ns1.lightningwirelabs.com. AAAA IN > > 09:49:46 unbound: [1406:0]=C2=A0=C2=A0info: validation failure > > ns3.lightningwirelabs.com. AAAA IN > > 09:49:46 unbound: [1406:0]=C2=A0=C2=A0info: validation failure > > ns2.lightningwirelabs.com. AAAA IN > > 09:49:42 unbound: [1406:1]=C2=A0=C2=A0info: validation failure fedoraproj= ect.org. AAAA > > IN > > 09:49:18 unbound: [1406:0]=C2=A0=C2=A0info: validation failure > > fedoraproject.org.localdomain. AAAA IN > > 09:49:18 unbound: [1406:0]=C2=A0=C2=A0info: validation failure > > fireinfo.ipfire.org.localdomain. AAAA IN > > 09:48:21 unbound: [1406:0]=C2=A0=C2=A0info: start of service (unbound 1.6= .1). > > 09:48:21 unbound: [1406:0]=C2=A0=C2=A0notice: init module 1: iterator > > 09:48:21 unbound: [1406:0]=C2=A0=C2=A0notice: init module 0: validator > >=20 > >=20 > > Thank you, > > Paul >=20 > Forgot to cc: the list... > Paul --===============5756738275515749645== Content-Type: application/pgp-signature Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="signature.asc" MIME-Version: 1.0 LS0tLS1CRUdJTiBQR1AgU0lHTkFUVVJFLS0tLS0KVmVyc2lvbjogR251UEcgdjIKCmlRSWNCQUFC Q2dBR0JRSll2L1NTQUFvSkVJQjU4UDl2a0FrSGkvWVFBTEN2bytRd1c4aDNIU1ZiMGhvU1U0T2wK b29ucUhxUkpVZjRhTnJ3Rk05VVBnTkpIem5zQ2ZXVUIrSy9Pd2F4a0lVN0Q3OEtZL3AxRTZRalU2 N2VIQnhuWApqNUU1S0x4SjFoNUdzTWJRMkZuS05xT3ZDVGN4aXlNSXdaSkdXNWpjd2F0NzN4eWJW dVdzRkVIaFRnUVVUaFlvCnc4R0NWSVZLc2x5R0NKUkFFMjNRcnR3QnhTckJIKzhFV0YzWVd3NEtH cldNaGJoWUxvM0p5a2FCZ1hOeThVc0kKampWMkRuamVsVTdvMWM0dnoyL3FadFAxVHUyY3hvQnNB Z3NUbjFrek5nRDVadlkrM0UxMmxBbkVPT3FiMXhWSwpFUXIyVlFFSFV4T05DaVB5enlZWGh0WCtL Q2tTR0JmMm1CaEhxRDhucDllNE5kN0FTNnNNKzl0YkJrNXFSSjNYCkJaZWthK0tIanFLV1VDRi9h ZjhlY1Zkb1dRd1JlWVFZVXBQaEViMlRvUmNncE5qNGsvcmIvRHd2WE9xTUlvdDIKbGxLRlFxUmF5 VTVKUy9iVk4zUkJacVJ0bzNlVTI3VlJiM1c2cFUzbzNpVGxpOE50eFNPMVVTQzErSGc2bmd4cwpX REhzdmtEcEtERndoUDdNMjcybk9SN2JDcll2RFRLM3pWaEJ0ZjNYd0dCZVcvK1krNkRsSE9sMEpI VUNKUjYzCllnTUN2ZnFqWjdONHJIMkEyeWg2Z1E1NThJUWkrckMxTFFwNS9RZjhGSGRuMU9PTklk eWNvUTBGSU9rbVFtOXYKZHlXbUlsWmh5U3F2TmJ4RWhzZVErdHc0ejNvU0NSMkV1TCttTS9ZZ1F1 RHJaRVZpcDRsaWlPYVgzVno3Zk9Vcwp2OSt0bDRlNXZlcEtDcnFGN2J1VQo9MW9EdQotLS0tLUVO RCBQR1AgU0lHTkFUVVJFLS0tLS0K --===============5756738275515749645==--