Maintained by: NLnet Labs

[Unbound-users] queries to root servers not getting answered.

W.C.A. Wijngaards
Fri Aug 17 08:54:03 CEST 2012


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Mariano,

On 08/16/2012 05:27 PM, Mariano Absatz - gmail wrote:
> Hi,
> 
> I just compiled and installed lnsd 1.6.13 and unbound 1.4.18 on a
> debian lenny VM.
> 
> Since I was getting temporary failures, I raised the log verbosity
> to 3 and the log (which I add at the end of the message) seems to
> indicate that queries to the root name server are either not being
> sent or not being answered...
> 
> I kinda manually replicated the behavior of the resolver (using
> dbndns' dnsq command) in the same machine and got instant responses
> in every case (copied below the log).

Did you set +dnssec and +cdflag (options for 'dig') on the queries you
tested yourself?  If not, your test differed from what unbound does.
The answers are bigger with the signatures included.  Maybe you have a
firewall that drops UDP packets bigger than 512 bytes?

> Maybe someone with experience with unbound (and its logging) could
> help me about where to look?
> 
> Any help would be greatly appreciated.

Best regards,
   Wouter

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.18 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
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=BJ/7
-----END PGP SIGNATURE-----