Forgot to mention, we're running Unbound 1.4.1. my.commbank.com.au is another domain our users are having problems with. Output from unbound-host: === [1262755006] libunbound[16857:0] info: DelegationPoint<my.commbank.com.au.>: 2 names (0 missing), 2 addrs (0 result, 0 avail) [1262755006] libunbound[16857:0] info: bl1ca-pr-cclb01.my.commbank.com.au. * A [1262755006] libunbound[16857:0] info: nw2ca-pr-cclb01.my.commbank.com.au. * A [1262755006] libunbound[16857:0] debug: ip4 140.168.131.10 port 53 (len 16) [1262755006] libunbound[16857:0] debug: ip4 140.168.70.10 port 53 (len 16) [1262755006] libunbound[16857:0] debug: attempt to get extra 3 targets [1262755006] libunbound[16857:0] debug: out of query targets -- returning SERVFAIL [1262755006] libunbound[16857:0] debug: store error response in message cache [1262755006] libunbound[16857:0] debug: return error response SERVFAIL === Output from unbound-control lookup: === # unbound-control lookup my.commbank.com.au The following name servers are used for lookup of my.commbank.com.au. ;rrset 3429 2 0 2 0 my.commbank.com.au. 3429 IN NS nw2ca-pr-cclb01.my.commbank.com.au. my.commbank.com.au. 3429 IN NS bl1ca-pr-cclb01.my.commbank.com.au. ;rrset 2959 1 0 1 0 bl1ca-pr-cclb01.my.commbank.com.au. 2959 IN A 140.168.70.10 ;rrset 2959 1 0 1 0 nw2ca-pr-cclb01.my.commbank.com.au. 2959 IN A 140.168.131.10 Delegation with 2 names, of which 2 can be examined to query further addresses. It provides 2 IP addresses. 140.168.131.10 rtt 52 msec, 0 lost. noEDNS probed. 140.168.70.10 rtt 120000 msec, 7 lost. noEDNS probed. === RTT shows 120,000 msec. Output from dig against 140.168.70.10 showing that this server isn't blocked by them: === # dig any my.commbank.com.au. @140.168.70.10 ;; ANSWER SECTION: my.commbank.com.au. 500 IN SOA BL1CA-PR-CCLB01.my.commbank.com.au. hostmaster.BL1CA-PR-CCLB01.my.commbank.com.au. 123 10800 3600 604800 60 my.commbank.com.au. 500 IN NS BL1CA-PR-CCLB01.my.commbank.com.au. my.commbank.com.au. 500 IN NS NW2CA-PR-CCLB01.my.commbank.com.au. my.commbank.com.au. 20 IN A 140.168.131.20 ;; ADDITIONAL SECTION: BL1CA-PR-CCLB01.my.commbank.com.au. 30 IN A 140.168.70.10 NW2CA-PR-CCLB01.my.commbank.com.au. 30 IN A 140.168.131.10 ;; Query time: 17 msec ;; SERVER: 140.168.70.10#53(140.168.70.10) ;; WHEN: Wed Jan 6 16:22:55 2010 ;; MSG SIZE rcvd: 191 === -- Haw Loeung Systems Administrator TPG Internet http://www.tpg.com.au _______________________________________________________________________ -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 490 bytes Desc: This is a digitally signed message part. URL: <http://unbound.nlnetlabs.nl/pipermail/unbound-users/attachments/20100106/4c2e9959/attachment.pgp>