Maintained by: NLnet Labs

[Unbound-users] bodybuilding.com issues?

W.C.A. Wijngaards
Wed Jan 6 08:40:03 CET 2010


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Haw,

For commbank, I see one thing:
dig @140.168.70.10 my.commbank.com.au. AAAA
gives timeouts, but type A or MX works fine.
This should still work with unbound.

For me unbound-host resolves both names fine, with the svn trunk and
also unbound-1.4.1 versions.  Can you run unbound-host like you did and
send me the full debug output (offlist, gzipped?)

In your debug output it says all targets are bad choices, this is
usually done with servers that are lame.

Same for the other domain, if you could send me a debug log, I could
tell more.  Looks like unbound detected some sort of lame servers.

Best regards,
   Wouter



On 01/06/2010 06:25 AM, Haw Loeung wrote:
> Forgot to mention, we're running Unbound 1.4.1. my.commbank.com.au is
> another domain our users are having problems with.
> 
> 
> Output from unbound-host:
> 
> ===
> [1262755006] libunbound[16857:0] info: DelegationPoint<my.commbank.com.au.>: 2 names 
> (0 missing), 2 addrs (0 result, 0 avail)                                     
> [1262755006] libunbound[16857:0] info:   bl1ca-pr-cclb01.my.commbank.com.au. * A 
> [1262755006] libunbound[16857:0] info:   nw2ca-pr-cclb01.my.commbank.com.au. * A 
> [1262755006] libunbound[16857:0] debug:    ip4 140.168.131.10 port 53 (len 16)   
> [1262755006] libunbound[16857:0] debug:    ip4 140.168.70.10 port 53 (len 16)    
> [1262755006] libunbound[16857:0] debug: attempt to get extra 3 targets           
> [1262755006] libunbound[16857:0] debug: out of query targets -- returning SERVFAIL                                                                                
> [1262755006] libunbound[16857:0] debug: store error response in message cache    
> [1262755006] libunbound[16857:0] debug: return error response SERVFAIL
> ===
> 
> 
> Output from unbound-control lookup:
> 
> ===
> # unbound-control lookup my.commbank.com.au
> The following name servers are used for lookup of my.commbank.com.au.
> ;rrset 3429 2 0 2 0
> my.commbank.com.au.     3429    IN      NS      nw2ca-pr-cclb01.my.commbank.com.au.
> my.commbank.com.au.     3429    IN      NS      bl1ca-pr-cclb01.my.commbank.com.au.
> ;rrset 2959 1 0 1 0
> bl1ca-pr-cclb01.my.commbank.com.au.     2959    IN      A       140.168.70.10
> ;rrset 2959 1 0 1 0
> nw2ca-pr-cclb01.my.commbank.com.au.     2959    IN      A       140.168.131.10
> Delegation with 2 names, of which 2 can be examined to query further addresses.
> It provides 2 IP addresses.
> 140.168.131.10          rtt 52 msec, 0 lost. noEDNS probed.
> 140.168.70.10           rtt 120000 msec, 7 lost. noEDNS probed.
> ===
> 
> RTT shows 120,000 msec.
> 
> 
> 
> Output from dig against 140.168.70.10 showing that this server isn't 
> blocked by them:
> 
> ===
> # dig any my.commbank.com.au. @140.168.70.10
> 
> ;; ANSWER SECTION:
> my.commbank.com.au.     500     IN      SOA     BL1CA-PR-CCLB01.my.commbank.com.au. 
> hostmaster.BL1CA-PR-CCLB01.my.commbank.com.au. 123 10800 3600 604800 60
> my.commbank.com.au.     500     IN      NS      BL1CA-PR-CCLB01.my.commbank.com.au.
> my.commbank.com.au.     500     IN      NS      NW2CA-PR-CCLB01.my.commbank.com.au.
> my.commbank.com.au.     20      IN      A       140.168.131.20
> 
> ;; ADDITIONAL SECTION:
> BL1CA-PR-CCLB01.my.commbank.com.au. 30 IN A     140.168.70.10
> NW2CA-PR-CCLB01.my.commbank.com.au. 30 IN A     140.168.131.10
> 
> ;; Query time: 17 msec
> ;; SERVER: 140.168.70.10#53(140.168.70.10)
> ;; WHEN: Wed Jan  6 16:22:55 2010
> ;; MSG SIZE  rcvd: 191
> ===
> 
> 
> 
> 
> 
> _______________________________________________
> Unbound-users mailing list
> Unbound-users at unbound.net
> http://unbound.nlnetlabs.nl/mailman/listinfo/unbound-users

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAktEPlMACgkQkDLqNwOhpPhJYQCgmxeVBDNJTXlgl/NWEQtVcgkd
OeYAn1ZpPviTm7NpLbT2+Aer7Zdms8GC
=tV8+
-----END PGP SIGNATURE-----