Maintained by: NLnet Labs

unbound returns SERVFAIL although forwarder works just fine

martin f krafft
Tue Dec 29 20:10:13 CET 2015


also sprach Ralph Dolmans via Unbound-users <unbound-users at unbound.net> [2015-12-24 00:33 +1300]:
> Are you sure the tcpdump output corresponds to this part of the log?
> The log indicates that no query is send out because the only suitable
> delegation point (the forwarding server) is marked as unusable, due to
> earlier timeouts. Flushing this entry from the infra cache should make
> it work again (unbound-control flush_infra 192.168.1.1).

Thanks Ralph, this makes a lot more sense now and it's exactly
what's going on: the infrastructure cache causes unbound to skip the
previously unreachable forwarder (this is on a laptop which
sometimes loses signal…), and now I set infra-host-ttl to a low
value and hope to have this fix things.

Take care, and good luck starting into the new year, everyone!

-- 
@martinkrafft | http://madduck.net/ | http://two.sentenc.es/
 
"it isn't pollution that's harming the environment.
 it's the impurities in our air and water that are doing it."
                                                          - dan quayle
 
spamtraps: madduck.bogus at madduck.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: digital_signature_gpg.asc
Type: application/pgp-signature
Size: 1107 bytes
Desc: Digital signature (see http://martin-krafft.net/gpg/sig-policy/999bbcc4/current)
URL: <https://unbound.nlnetlabs.nl/pipermail/unbound-users/attachments/20151230/e581c941/attachment.sig>