> How do I fix this issue?
You don’t, their DNSSEC is broken: https://dnsviz.net/d/emeraldonion.org/dnssec/ They have to either start signing again or remove DS record from the parent (org). Ondrej -- Ondřej Surý ond...@isc.org > On 8 Feb 2020, at 02:36, Alessandro Vesely <ves...@tana.it> wrote: > > Hi! > > > I find I'm unable to send mail to a domain. I get an NDR saying DNS lookup > failed. Indeed, when I try manually, I get: > > 906-north:src$ dig emeraldonion.org mx > > ; <<>> DiG 9.10.3-P4-Debian <<>> emeraldonion.org mx > ;; global options: +cmd > ;; Got answer: > ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 5098 > ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1 > > ;; OPT PSEUDOSECTION: > ; EDNS: version: 0, flags:; udp: 4096 > ;; QUESTION SECTION: > ;emeraldonion.org. IN MX > > ;; Query time: 289 msec > ;; SERVER: 127.0.0.1#53(127.0.0.1) > ;; WHEN: Sat Feb 08 11:29:41 CET 2020 > ;; MSG SIZE rcvd: 45 > > > SERVFAIL doesn't tell me /which/ server failed. I infer it's my one, because > of the trace below. > > How do I fix this issue? > > TIA > Ale > > 908-north:src$ dig +trace emeraldonion.org mx > > ; <<>> DiG 9.10.3-P4-Debian <<>> +trace emeraldonion.org mx > ;; global options: +cmd > . 493940 IN NS h.root-servers.net. > . 493940 IN NS d.root-servers.net. > . 493940 IN NS c.root-servers.net. > . 493940 IN NS k.root-servers.net. > . 493940 IN NS f.root-servers.net. > . 493940 IN NS l.root-servers.net. > . 493940 IN NS j.root-servers.net. > . 493940 IN NS m.root-servers.net. > . 493940 IN NS g.root-servers.net. > . 493940 IN NS i.root-servers.net. > . 493940 IN NS e.root-servers.net. > . 493940 IN NS a.root-servers.net. > . 493940 IN NS b.root-servers.net. > . 516974 IN RRSIG NS 8 0 518400 20200221050000 > 20200208040000 33853 . > 2aZlI+r3A/LaC2VEM7BSAupOBbXS/fSNZds49PjuhR38CmDEq6WddgXW > XbxGAJaNBBUOXRYB1U093FqP725t29VoFpSuUfmD8YGwzcbu1gtvBbyW > clLu3OK6X2m5V6AWvQuumcDA/qJRdnQ0/8EepqKL8f+vniQLCKxA5kR1 > HkZAG36QBhj0poGet9no8kQkz5/wBkI88fyId6ZasSbSCrX+68QuNcV/ > N0BwQNhuvY0JEMHEJVjDzTkoJghKySTylWE5R7wxc/p5HuBtBy5v+ITF > zGbbC3ZoXlVdRF3//QzW4aqdcCCBG+0yXDlRQ5ZevZfWABLJV8ds5VEG aXCLpg== > ;; Received 1097 bytes from 127.0.0.1#53(127.0.0.1) in 0 ms > > org. 172800 IN NS a0.org.afilias-nst.info. > org. 172800 IN NS a2.org.afilias-nst.info. > org. 172800 IN NS b0.org.afilias-nst.org. > org. 172800 IN NS b2.org.afilias-nst.org. > org. 172800 IN NS c0.org.afilias-nst.info. > org. 172800 IN NS d0.org.afilias-nst.org. > org. 86400 IN DS 9795 7 1 > 364DFAB3DAF254CAB477B5675B10766DDAA24982 > org. 86400 IN DS 9795 7 2 > 3922B31B6F3A4EA92B19EB7B52120F031FD8E05FF0B03BAFCF9F891B FE7FF8E5 > org. 86400 IN RRSIG DS 8 1 86400 20200221050000 > 20200208040000 33853 . > QcNTGf7LnnW7XgHNC4VFs9e2hsMw9ruiWZ2J1Ev2+aCRdyuk0ECpxMPd > 8Gb4MYmAsbljnELkPNSCUdlLv7LeN0+mDoESBe9AKQ++l7DMSZXQ5jJh > 9ThjNs12lxWAFLIcRDFb0HXnwVG5bvYFovrorG01TxGDyrPp56eVd2GT > Udprf8kPkyatYVTvthFZrIU72wClEBjBGirOiiWEkPtzOKYSYv+gXKOn > v4lpxcfbgdGdFZLlrv406FqP/1hsGpY5u2dO0ToAuUZ9hBrmJnAYut17 > YXnplS5yD+ZMmXDaOCn6rmeUPkOXNjV7/Onwlo7dDZhFC6QVqt6HVHXJ 8egMVA== > ;; Received 818 bytes from 192.203.230.10#53(e.root-servers.net) in 1 ms > > emeraldonion.org. 86400 IN NS ns0.1984.is. > emeraldonion.org. 86400 IN NS ns1.1984.is. > emeraldonion.org. 86400 IN NS ns2.1984.is. > emeraldonion.org. 86400 IN NS ns1.1984hosting.com. > emeraldonion.org. 86400 IN NS ns2.1984hosting.com. > emeraldonion.org. 86400 IN DS 58282 8 2 > C853155321349E86D675DBB87E839E689582FC193F447DE120242828 31A92EFE > emeraldonion.org. 86400 IN RRSIG DS 7 2 86400 20200222152504 > 20200201142504 63887 org. > HuTit6Jz4FEFoTRpRiWpUFN87YYeLqa5P/rnVnFmC7cm563fklPammF/ > uUUYzAK4JhekTZmrSGG0P3SGrk85nS8A0tcngc8qGdfnmYaE6YRfT7E7 > GsugewjF17oQ+9BwyeeoCorNqXNnBBw6gSSzyywkumTAAAjLCLfyeiLj olE= > ;; Received 368 bytes from 199.249.120.1#53(b2.org.afilias-nst.org) in 16 ms > > emeraldonion.org. 900 IN MX 10 > emeraldonion-org.mail.protection.outlook.com. > emeraldonion.org. 86400 IN NS ns1.1984.is. > emeraldonion.org. 86400 IN NS ns1.1984hosting.com. > emeraldonion.org. 86400 IN NS ns2.1984hosting.com. > emeraldonion.org. 86400 IN NS ns0.1984.is. > emeraldonion.org. 86400 IN NS ns2.1984.is. > ;; Received 604 bytes from 45.32.180.186#53(ns2.1984.is) in 19 ms > > > -- > > > > > > > > > > > > > > > > > > > _______________________________________________ > Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe > from this list > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users _______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
