Package: unbound Version: 1.7.1-1 Severity: normal Dear Maintainer,
I found problem on unbound 1.7.1-1 when resolving several akamai CDN hosts. For example, 1.7.1-1 fails to resolve storeedgefd.dsx.mp.microsoft.com with following log (verbosity=3). ---------------------------------------------------------------------------- Jun 5 14:08:57 sugi-desk unbound: [20171:0] info: resolving storeedgefd.dsx.mp.microsoft.com. A IN Jun 5 14:08:57 sugi-desk unbound: [20171:0] debug: request has exceeded the maximum number of query restarts with 9 Jun 5 14:08:57 sugi-desk unbound: [20171:0] debug: return error response SERVFAIL ---------------------------------------------------------------------------- Client gets no answers from server. ---------------------------------------------------------------------------- sugi@sugi-desk:~/u% dig a storeedgefd.dsx.mp.microsoft.com. @127.0.0.1 ; <<>> DiG 9.11.3-1-Debian <<>> a storeedgefd.dsx.mp.microsoft.com. @127.0.0.1 ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 12561 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ;; QUESTION SECTION: ;storeedgefd.dsx.mp.microsoft.com. IN A ;; Query time: 1645 msec ;; SERVER: 127.0.0.1#53(127.0.0.1) ;; WHEN: Tue Jun 05 14:04:16 JST 2018 ;; MSG SIZE rcvd: 61 ---------------------------------------------------------------------------- However, 1.6.0-3+deb9u1 works properly. ---------------------------------------------------------------------------- sugi@sugi-desk:~/u% sudo apt install -q unbound=1.6.0-3+deb9u1 Reading package lists... Building dependency tree... Reading state information... The following packages will be DOWNGRADED: unbound 0 upgraded, 0 newly installed, 1 downgraded, 0 to remove and 426 not upgraded. Need to get 621 kB of archives. After this operation, 1,711 kB disk space will be freed. Do you want to continue? [Y/n] Get:1 http://debian-mirror.sakura.ne.jp/debian stretch/main amd64 unbound amd64 1.6.0-3+deb9u1 [621 kB] Fetched 621 kB in 2s (358 kB/s) dpkg: warning: downgrading unbound from 1.7.1-1 to 1.6.0-3+deb9u1 (Reading database ... 641967 files and directories currently installed.) Preparing to unpack .../unbound_1.6.0-3+deb9u1_amd64.deb ... Unpacking unbound (1.6.0-3+deb9u1) over (1.7.1-1) ... Processing triggers for systemd (238-4) ... Setting up unbound (1.6.0-3+deb9u1) ... Installing new version of config file /etc/apparmor.d/usr.sbin.unbound ... Processing triggers for man-db (2.8.3-2) ... sugi@sugi-desk:~/u% dig a storeedgefd.dsx.mp.microsoft.com. @127.0.0.1 ; <<>> DiG 9.11.3-1-Debian <<>> a storeedgefd.dsx.mp.microsoft.com. @127.0.0.1 ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 13944 ;; flags: qr rd ra; QUERY: 1, ANSWER: 5, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ;; QUESTION SECTION: ;storeedgefd.dsx.mp.microsoft.com. IN A ;; ANSWER SECTION: storeedgefd.dsx.mp.microsoft.com. 3598 IN CNAME storeedgefd.dsx.mp.microsoft.com.akadns.net. storeedgefd.dsx.mp.microsoft.com.akadns.net. 1799 IN CNAME storeedgefd.dsx.mp.microsoft.com.edgekey.net. storeedgefd.dsx.mp.microsoft.com.edgekey.net. 21599 IN CNAME storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net. storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net. 3600 IN CNAME e1898.dspg.akamaiedge.net. e1898.dspg.akamaiedge.net. 20 IN A 23.211.12.114 ;; Query time: 1896 msec ;; SERVER: 127.0.0.1#53(127.0.0.1) ;; WHEN: Tue Jun 05 14:14:41 JST 2018 ;; MSG SIZE rcvd: 296 ---------------------------------------------------------------------------- Thanks, -- System Information: Debian Release: buster/sid APT prefers testing APT policy: (500, 'testing'), (500, 'stable') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 4.16.0-1-amd64 (SMP w/4 CPU cores) Locale: LANG=en_US.utf-8, LC_CTYPE=ja_JP.utf-8 (charmap=UTF-8), LANGUAGE=en_US.utf-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages unbound depends on: ii adduser 3.117 ii dns-root-data 2018013001 ii libc6 2.27-3 ii libevent-2.1-6 2.1.8-stable-4 ii libfstrm0 0.3.0-1+b1 ii libprotobuf-c1 1.2.1-2 ii libpython3.6 3.6.5-9 ii libssl1.1 1.1.0h-4 ii libsystemd0 238-4 ii lsb-base 9.20170808 ii openssl 1.1.0h-4 ii unbound-anchor 1.7.1-1 unbound recommends no packages. Versions of packages unbound suggests: ii apparmor 2.12-4 -- no debconf information
