Maintained by: NLnet Labs

[Unbound-users] SERVFAIL from Unbound whentrying to resolve a hostname

W.C.A. Wijngaards
Thu Dec 18 16:10:31 CET 2008


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

W.C.A. Wijngaards wrote:
> Hi Marc,
> 
> It works for me, all the time.
> 
> $ unbound-host -v www.icscards.nl
> www.icscards.nl has address 164.140.155.125 (insecure)
> www.icscards.nl has no IPv6 address (insecure)
> Host www.icscards.nl not found: 2(SERVFAIL). (insecure)
> 
> The last line is because www.icscards.nl drops MX answers. That does not
> explain what happens to you.
> 
> Can you run your unbound-host with -dddd to get debug info, capture the
> output and send it to me (off-list because it gets big) ?
> 
> It seems you get different packets.
> 

Turns out this is a bug that hits BSD, but not Linux.  Fix is in unbound
svn trunk, with thanks to Marc for comprehensive debug output.

Best regards,
   Wouter
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iEYEARECAAYFAklKZ+cACgkQkDLqNwOhpPiixgCfY6C2Nqg72mLJ8EIn4oHAyCg8
8RMAoKfO7QXBgf5wt6b5FSXBL9VX6j2c
=l+RT
-----END PGP SIGNATURE-----