Hi, On 8/14/18 11:44 AM, haries fajar nugroho wrote: > I've got some weird result when query some domains, for > example coachingindonesia.com . I got > servfail but if i query without www appended, i can get the result.
The servers for this domain are utterly broken, sending REFUSED for valid queries: http://dnsviz.net/d/www.coachingindonesia.com/dnssec/ This is the reason why we are throttling it for a while, because we don't want to waste our time sending queries to broken servers. > Below is what i got from my pdns recursor (4.1.3) on Ubuntu 17.10 that > installed with apt-get. > > www.coachingindonesia.com > --------------------------------- > ; <<>> DiG 9.8.1-P1 <<>> www.coachingindonesia.com @192.168.77.215 > ;; global options: +cmd > ;; Got answer: > ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 1660 > ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0 > > ;; QUESTION SECTION: > ;www.coachingindonesia.com. IN > A > > ;; ANSWER SECTION: > www.coachingindonesia.com. 6021 IN > CNAME coachingindonesia.com. > > coachingindonesia.com > ------------------------------- > ;; Query time: 3 msec > ;; SERVER: 192.168.77.215#53(192.168.77.215) > ;; WHEN: Tue Aug 14 14:23:44 2018 > ;; MSG SIZE rcvd: 57 > > ; <<>> DiG 9.8.1-P1 <<>> coachingindonesia.com @192.168.77.215 > ;; global options: +cmd > ;; Got answer: > ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 60544 > ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0 > > ;; QUESTION SECTION: > ;coachingindonesia.com. IN A > > ;; ANSWER SECTION: > coachingindonesia.com. 5979 IN > A 107.180.76.89 > > ;; Query time: 212 msec > ;; SERVER: 192.168.77.215#53(192.168.77.215) > ;; WHEN: Tue Aug 14 14:24:26 2018 > ;; MSG SIZE rcvd: 55 > > I found that domains that failed to resolved had "query throttled" > message, like : [2] coachingindonesia.com: query throttled > 216.69.185.1, coachingindonesia.com; A. > I don't know what i have to do, because i can query that domain if i use > another dns recursor software in the same machine and IP > > I also attached the trace log query for that domain. Best regards, -- Remi Gacogne PowerDNS.COM BV - https://www.powerdns.com/
signature.asc
Description: OpenPGP digital signature
_______________________________________________ Pdns-users mailing list [email protected] https://mailman.powerdns.com/mailman/listinfo/pdns-users
