Maintained by: NLnet Labs

Unbound 1.5.9

A. Schulze
Wed Jun 15 12:23:02 CEST 2016


A. Schulze via Unbound-users:

> - just upgraded and no visible problems so far

Hello,

there is a change in unbound-1.5.9 which make some IPv6 addresses  
un-resolvable.

$host 2001:a60:f0b4:e503:2cdb:beff:feaa:880b
unbound <= 1.5.8: success
unbound = 1.5.9:  SERVFAIL

One reason may be a missconfiguration found via
http://dnsviz.net/d/4.b.0.f.0.6.a.0.1.0.0.2.ip6.arpa/dnssec/
the non-existence of 0.6.a.0.1.0.0.2.ip6.arpa is prooved by DNSSEC at  
a.0.1.0.0.2.ip6.arpa

OK, I tried to workaround that by adding
   server:
     domain-insecure: "4.b.0.f.0.6.a.0.1.0.0.2.ip6.arpa."
to unbound.conf.

But that does not help. Even it I add "domain-insecure: ip6.arpa" I  
still get SERVFAIL.
Any advise?

Thanks
Andreas