I think the reason for the REFUSED is pretty obvious % dig +norec google._domainkey.socialinnovation.ca @173.245.59.231 txt
; <<>> DiG 9.21.0-dev <<>> +norec google._domainkey.socialinnovation.ca @173.245.59.231 txt ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: REFUSED, id: 10815 ;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 512 ; EDE: 20 (Not Authoritative) ;; QUESTION SECTION: ;google._domainkey.socialinnovation.ca. IN TXT ;; Query time: 14 msec ;; SERVER: 173.245.59.231#53(173.245.59.231) (UDP) ;; WHEN: Fri Sep 20 09:03:48 AEST 2024 ;; MSG SIZE rcvd: 72 % Now you just need to work out why you where asking 173.245.59.231 rather than the actual nameservers for socialinnovation.ca. socialinnovation.ca. 86400 IN NS dns.rebel.ca. socialinnovation.ca. 86400 IN NS dns2.rebel.ca. dns2.rebel.ca. 86400 IN A 52.10.144.165 dns.rebel.ca. 86400 IN A 52.3.166.104 > On 20 Sep 2024, at 08:48, J Doe <gene...@nativemethods.com> wrote: > > Hi list, > > I have BIND 9.18.29 validating recursive resolver running on OpenBSD > 7.5. This resolver performs resolution for a mail server. > > Sometimes in my logs I will see the following: > > 17-Sep-2024 16:21:41.562 lame-servers: info: REFUSED unexpected > RCODE resolving 'google._domainkey.socialinnovation.ca/TXT/IN': > 173.245.59.231#53 > > ... but if I manually resolve the address with: dig against the resolver > on the command line of the mail server, no errors are recorded. > > I'd like to determine why sometimes I receive this error. I currently > have logging for this category of errors set to: severity info. Should > I increase this or are there other ways to determine why resolution is > sometimes REFUSED ? > > Thanks, > > - J > -- > Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from > this list > > ISC funds the development of this software with paid support subscriptions. > Contact us at https://www.isc.org/contact/ for more information. > > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
