Maintained by: NLnet Labs

[Unbound-users] Parent child disagreement problem

W.C.A. Wijngaards
Wed May 19 15:29:35 CEST 2010


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Dustin, Paul, Mike,

Fixed the safesvc.gov.cn lookups (in svn trunk), but I cannot see what
is going wrong for checksunlimited.com.  Dustin, do you have a tcpdump
or perhaps a high verbosity trace from unbound (or unbound-host) with
the error?

Best regards,
   Wouter

On 05/13/2010 04:37 PM, Dustin Marquess wrote:
> Not sure if it's similar, but the wife was trying to go to one of those
> designer check places that always sends you junk in the mail... in this
> case www.checksunlimited.com <http://www.checksunlimited.com>.
> 
> Lookups always SERVFAIL for the domain checksunlimited.com
> <http://checksunlimited.com>.  Running unbound in debug, it always sets
> the results to THROWAWAY.  I tried to debug it, but it quickly went over
> my head.
> 
> Went back to my old dnscache setup that unbound replaced, and it worked
> fine :(.
> 
> -Dustin
> 
> On Thu, May 13, 2010 at 8:26 AM, Paul Wouters <paul at xelerance.com
> <mailto:paul at xelerance.com>> wrote:
> 
>     On Thu, 13 May 2010, Mike Emigh wrote:
> 
>         We ran across a new problem in what appears to be parent-child
>         disagreement on version 1.4.4.  The resolution appears to work as
>         expected when digging for A records in the domain, but if you first
>         dig for the NS (starting with an empty cache), then subsequent A
>         record lookups fail.
> 
> 
>         If you dig safesvc.gov.cn <http://safesvc.gov.cn> NS, it returns
>         an invalid response:
> 
>         ;; ANSWER SECTION:
>         safesvc.gov.cn <http://safesvc.gov.cn>.         3600    IN    
>          NS      netdns.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAkvz578ACgkQkDLqNwOhpPgunwCgnDT04g9C5FUaee/b+zrZMr+U
+5UAnAuVnkv7p35GPW3RCawKWIe33Qdx
=JzMv
-----END PGP SIGNATURE-----