Hi,
I noticed tonight that resolving for 'efax.com' is failing and my resolvers (pdns_recursor) are returning 'servfail' while google dns is returing the data. The specfic error I notice seems to be: Removing record 'inbound.efax.com|A|204.11.168.109' in the answer section without the AA bit set received from efax.com I am attaching a regex trace for 'efax' so you can see what I see. I guess my question here is this an efax.com problem or something I should try to work around with settings at my resolver? Thank you. Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: 2 [3546701/3] question for 'inbound.efax.com|MX' from w.x.y.z:58108 Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] inbound.efax.com: Wants DNSSEC processing, auth data in query for MX Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] inbound.efax.com: Looking for CNAME cache hit of 'inbound.efax.com|CNAME' Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] inbound.efax.com: Looking for DNAME cache hit of 'com|DNAME' Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] inbound.efax.com: Looking for DNAME cache hit of 'efax.com|DNAME' Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] inbound.efax.com: No CNAME or DNAME cache hit of 'inbound.efax.com' found Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] inbound.efax.com: No cache hit for 'inbound.efax.com|MX', trying to find an appropriate NS record Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] : got TA for '.' Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] : setting cut state for . to Secure Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] : - Looking for a cut at com Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] : no TA found for 'com' among 1 Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] com: Wants DNSSEC processing, auth data in query for DS Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] com: Found cache hit for DS: 30909 8 2 e2d3c916f6deeac73294e8268fb5885044a833fc5459588f4a9184cfc41a5766[ttl=60704] Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] com: updating validation state with cache content for com to Secure Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] : - Found cut at com Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] : New state for com is Secure Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] : - Looking for a cut at efax.com Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] : no TA found for 'efax.com' among 1 Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] efax.com: Wants DNSSEC processing, auth data in query for DS Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] efax.com: No cache hit for 'efax.com|DS', trying to find an appropriate NS record Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] com: Checking if we have NS in cache for 'com' Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] com: NS (with ip, or non-glue) in cache for 'com' -> 'a.gtld-servers.net' Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] com: within bailiwick: 0, not in cache / did not look at cache Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] com: NS (with ip, or non-glue) in cache for 'com' -> 'g.gtld-servers.net' Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] com: within bailiwick: 0, not in cache / did not look at cache Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] com: NS (with ip, or non-glue) in cache for 'com' -> 'm.gtld-servers.net' Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] com: within bailiwick: 0, not in cache / did not look at cache Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] com: NS (with ip, or non-glue) in cache for 'com' -> 'h.gtld-servers.net' Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] com: within bailiwick: 0, not in cache / did not look at cache Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] com: NS (with ip, or non-glue) in cache for 'com' -> 'b.gtld-servers.net' Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] com: within bailiwick: 0, not in cache / did not look at cache Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] com: NS (with ip, or non-glue) in cache for 'com' -> 'c.gtld-servers.net' Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] com: within bailiwick: 0, not in cache / did not look at cache Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] com: NS (with ip, or non-glue) in cache for 'com' -> 'd.gtld-servers.net' Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] com: within bailiwick: 0, not in cache / did not look at cache Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] com: NS (with ip, or non-glue) in cache for 'com' -> 'f.gtld-servers.net' Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] com: within bailiwick: 0, not in cache / did not look at cache Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] com: NS (with ip, or non-glue) in cache for 'com' -> 'l.gtld-servers.net' Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] com: within bailiwick: 0, not in cache / did not look at cache Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] com: NS (with ip, or non-glue) in cache for 'com' -> 'k.gtld-servers.net' Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] com: within bailiwick: 0, not in cache / did not look at cache Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] com: NS (with ip, or non-glue) in cache for 'com' -> 'e.gtld-servers.net' Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] com: within bailiwick: 0, not in cache / did not look at cache Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] com: NS (with ip, or non-glue) in cache for 'com' -> 'i.gtld-servers.net' Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] com: within bailiwick: 0, not in cache / did not look at cache Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] com: NS (with ip, or non-glue) in cache for 'com' -> 'j.gtld-servers.net' Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] com: within bailiwick: 0, not in cache / did not look at cache Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] com: We have NS in cache for 'com' (flawedNSSet=0) Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] : got status Secure for name efax.com (from com) Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] efax.com: initial validation status for efax.com is Secure Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] efax.com: Cache consultations done, have 13 NS to contact Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] efax.com.: Nameservers: d.gtld-servers.net(2.89ms), m.gtld-servers.net(2.92ms), l.gtld-servers.net(2.95ms), Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] efax.com.: k.gtld-servers.net(3.01ms), b.gtld-servers.net(3.89ms), h.gtld-servers.net(4.09ms), Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] efax.com.: j.gtld-servers.net(5.01ms), i.gtld-servers.net(5.88ms), g.gtld-servers.net(7.57ms), Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] efax.com.: f.gtld-servers.net(7.68ms), c.gtld-servers.net(7.94ms), e.gtld-servers.net(9.86ms), Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] efax.com.: a.gtld-servers.net(11.15ms) Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] efax.com: Trying to resolve NS 'd.gtld-servers.net' (1/13) Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] d.gtld-servers.net: Wants DNSSEC processing, NO auth data in query for A Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] d.gtld-servers.net: Found cache hit for A: 192.31.80.30[ttl=34195] Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] d.gtld-servers.net: updating validation state with cache content for d.gtld-servers.net to Insecure Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Nameserver d.gtld-servers.net IPs: 2001:500:856e::30(2.89ms), 192.31.80.30(12.81ms) Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] efax.com: Resolved 'com' NS d.gtld-servers.net to: 2001:500:856e::30, 192.31.80.30 Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] efax.com: Trying IP [2001:500:856e::30]:53, asking 'efax.com|DS' Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] efax.com: Got 7 answers from d.gtld-servers.net (2001:500:856e::30), rcode=0 (No Error), aa=1, in 60ms Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] efax.com: accept answer 'CK0POJMG874LJREF7EFN8430QVIT8BSM.com|NSEC3|1 1 0 - CK0Q1GIN43N1ARRC9OSM6QPQR81H5M9A NS SOA RRSIG DNSKEY NSEC3PARAM' from 'com' nameservers? ttl=86400, place=2 YES! Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] efax.com: accept answer 'CK0POJMG874LJREF7EFN8430QVIT8BSM.com|RRSIG|NSEC3 8 2 86400 20190624044534 20190617033534 3800 com. CXkmAw0Yj+e3boQ92LrOOdoyYyXpX3KIWBytEn0RQtae+a5yww4+SnUimpdagv57ZOUS5TLNl1Bgr5Z9s1vKEZhipRWe1qERl8HiNjL8uwkcNqFfEs3pkOxuwZJJEwTuG5clELIs83v+6najjEIJw56q/eu4VT/vw21pEk9mtYI=' from 'com' nameservers? ttl=86400, place=2 RRSIG - separate Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] efax.com: accept answer 'com|SOA|a.gtld-servers.net. nstld.verisign-grs.com. 1561007656 1800 900 604800 86400' from 'com' nameservers? ttl=900, place=2 YES! Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] efax.com: accept answer 'com|RRSIG|SOA 8 1 900 20190627051416 20190620040416 3800 com. Fqugfk6Qm+m2fZymHEuSbWkwwYh+bpq8B2BRpXwO28mvlPsYhB0rMtuyS1eyhbHB51CcQQEjFk+Vesr6YcUqag3lu06T+Lc0zJXM+fmM6jXe4dAC3N7+Xg2mhpv87FdNuNeyjxVh2BzXBXC3cCR273VaYHkDLDjbiQft9AsF45U=' from 'com' nameservers? ttl=900, place=2 RRSIG - separate Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] efax.com: accept answer 'UE91PO6QM9K9CRKPCPBU5GE4S5QNJS4C.com|NSEC3|1 1 0 - UE93IVHH5QPHRO2CKETFIHCN58H1576G NS DS RRSIG' from 'com' nameservers? ttl=86400, place=2 YES! Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] efax.com: accept answer 'UE91PO6QM9K9CRKPCPBU5GE4S5QNJS4C.com|RRSIG|NSEC3 8 2 86400 20190626042101 20190619031101 3800 com. N96N6Qy5K0E+O0MXCPaFAwJGTLRayYXI70TUb2cCsDKs7aYl/SrT5pKoutY3fUG2Fk13JYdqzZ46UjEN1BGE5ttF40m+L7W0wNQbUIr0xhF4AaXveFc2bR6jQZbry9AiZlBbewbdw5vOU7lAyXP/lPsC9rZFNui8froFwnxkMP4=' from 'com' nameservers? ttl=86400, place=2 RRSIG - separate Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] efax.com: OPT answer '.' from 'com' nameservers Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] : got status Secure for name com (from com) Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] : got initial zone status Secure for record com|SOA Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Validating non-additional record for com Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Retrieving DNSKeys for com Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] com: Wants DNSSEC processing, auth data in query for DNSKEY Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] com: Found cache hit for DNSKEY: 256 3 8 AQOcWJruwENIaapq3h3lKJlflLx6rWJz2aKRBV6CBJRTxZu4ge2iDX164dQ7Hpc9b8C9z2gqWyx1XyjvbQisgSid24voeUHQgD0weedVDQjD6B9By7zMI6Yz+cM/w6H8zB8ZRn6qZuWZAxFOjKvzoz+3vf32tyZE7QmLFnXDgQpFxw==[ttl=55271] 257 3 8 AQPDzldNmMvZFX4NcNJ0uEnKDg7tmv/F3MyQR0lpBmVcNcsIszxNFxsBfKNW9JYCYqpik8366LE7VbIcNRzfp2h9OO8HRl+H+E08zauK8k7evWEmu/6od+2boggPoiEfGNyvNPaSI7FOIroDsnw/taggzHRX1Z7SOiOiPWPNIwSUyWOZ79VmcQ1GLkC6NlYvG3HwYmynQv6oFwGv/KELSw7ZSdrbTQ0HXvZbqMUI7BaMskmvgm1G7oKZ1YiF7O9ioVNc0+7ASbqmZN7Z98EGU/Qh2K/BgUe8Hs0XVcdPKrtyYnoQHd2ynKPcMMlTEih2/2HDHjRPJ2aywIpKNnv4oPo/[ttl=55271] Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] com: updating validation state with cache content for com to Secure Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Retrieved 2 DNSKeys for com, state is Secure Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Going to validate 1 record contents with 1 sigs and 2 keys for com Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Secure! Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] : got status Secure for name UE91PO6QM9K9CRKPCPBU5GE4S5QNJS4C.com (from com) Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] : got initial zone status Secure for record UE91PO6QM9K9CRKPCPBU5GE4S5QNJS4C.com|NSEC3 Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Validating non-additional record for UE91PO6QM9K9CRKPCPBU5GE4S5QNJS4C.com Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Retrieving DNSKeys for com Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] com: Wants DNSSEC processing, auth data in query for DNSKEY Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] com: Found cache hit for DNSKEY: 256 3 8 AQOcWJruwENIaapq3h3lKJlflLx6rWJz2aKRBV6CBJRTxZu4ge2iDX164dQ7Hpc9b8C9z2gqWyx1XyjvbQisgSid24voeUHQgD0weedVDQjD6B9By7zMI6Yz+cM/w6H8zB8ZRn6qZuWZAxFOjKvzoz+3vf32tyZE7QmLFnXDgQpFxw==[ttl=55271] 257 3 8 AQPDzldNmMvZFX4NcNJ0uEnKDg7tmv/F3MyQR0lpBmVcNcsIszxNFxsBfKNW9JYCYqpik8366LE7VbIcNRzfp2h9OO8HRl+H+E08zauK8k7evWEmu/6od+2boggPoiEfGNyvNPaSI7FOIroDsnw/taggzHRX1Z7SOiOiPWPNIwSUyWOZ79VmcQ1GLkC6NlYvG3HwYmynQv6oFwGv/KELSw7ZSdrbTQ0HXvZbqMUI7BaMskmvgm1G7oKZ1YiF7O9ioVNc0+7ASbqmZN7Z98EGU/Qh2K/BgUe8Hs0XVcdPKrtyYnoQHd2ynKPcMMlTEih2/2HDHjRPJ2aywIpKNnv4oPo/[ttl=55271] Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] com: updating validation state with cache content for com to Secure Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Retrieved 2 DNSKeys for com, state is Secure Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Going to validate 1 record contents with 1 sigs and 2 keys for UE91PO6QM9K9CRKPCPBU5GE4S5QNJS4C.com Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Secure! Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] : got status Secure for name CK0POJMG874LJREF7EFN8430QVIT8BSM.com (from com) Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] : got initial zone status Secure for record CK0POJMG874LJREF7EFN8430QVIT8BSM.com|NSEC3 Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Validating non-additional record for CK0POJMG874LJREF7EFN8430QVIT8BSM.com Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Retrieving DNSKeys for com Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] com: Wants DNSSEC processing, auth data in query for DNSKEY Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] com: Found cache hit for DNSKEY: 256 3 8 AQOcWJruwENIaapq3h3lKJlflLx6rWJz2aKRBV6CBJRTxZu4ge2iDX164dQ7Hpc9b8C9z2gqWyx1XyjvbQisgSid24voeUHQgD0weedVDQjD6B9By7zMI6Yz+cM/w6H8zB8ZRn6qZuWZAxFOjKvzoz+3vf32tyZE7QmLFnXDgQpFxw==[ttl=55271] 257 3 8 AQPDzldNmMvZFX4NcNJ0uEnKDg7tmv/F3MyQR0lpBmVcNcsIszxNFxsBfKNW9JYCYqpik8366LE7VbIcNRzfp2h9OO8HRl+H+E08zauK8k7evWEmu/6od+2boggPoiEfGNyvNPaSI7FOIroDsnw/taggzHRX1Z7SOiOiPWPNIwSUyWOZ79VmcQ1GLkC6NlYvG3HwYmynQv6oFwGv/KELSw7ZSdrbTQ0HXvZbqMUI7BaMskmvgm1G7oKZ1YiF7O9ioVNc0+7ASbqmZN7Z98EGU/Qh2K/BgUe8Hs0XVcdPKrtyYnoQHd2ynKPcMMlTEih2/2HDHjRPJ2aywIpKNnv4oPo/[ttl=55271] Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] com: updating validation state with cache content for com to Secure Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Retrieved 2 DNSKeys for com, state is Secure Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Going to validate 1 record contents with 1 sigs and 2 keys for CK0POJMG874LJREF7EFN8430QVIT8BSM.com Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Secure! Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] efax.com: determining status after receiving this packet Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] efax.com: got negative caching indication for 'efax.com|DS' Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] OPT-out denial found for efax.com Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] efax.com: status=noerror, other types may exist, but we are done (have negative SOA) (have aa bit) Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] : - Found cut at efax.com Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] : New state for efax.com is Insecure Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] : - Looking for a cut at inbound.efax.com Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] : no TA found for 'inbound.efax.com' among 1 Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] : list of cuts from inbound.efax.com to . Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: - .: Secure Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: - com: Secure Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: - efax.com: Insecure Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] inbound.efax.com: Checking if we have NS in cache for 'inbound.efax.com' Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] inbound.efax.com: no valid/useful NS in cache for 'inbound.efax.com' Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] inbound.efax.com: Checking if we have NS in cache for 'efax.com' Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] inbound.efax.com: NS (with ip, or non-glue) in cache for 'efax.com' -> 'ns1.j2global.com' Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] inbound.efax.com: within bailiwick: 0, not in cache / did not look at cache Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] inbound.efax.com: NS (with ip, or non-glue) in cache for 'efax.com' -> 'ns2.j2global.com' Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] inbound.efax.com: within bailiwick: 0, not in cache / did not look at cache Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] inbound.efax.com: NS (with ip, or non-glue) in cache for 'efax.com' -> 'ns5.j2global.com' Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] inbound.efax.com: within bailiwick: 0, not in cache / did not look at cache Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] inbound.efax.com: We have NS in cache for 'efax.com' (flawedNSSet=0) Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] : got status Insecure for name inbound.efax.com (from efax.com) Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] inbound.efax.com: initial validation status for inbound.efax.com is Insecure Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] inbound.efax.com: Cache consultations done, have 3 NS to contact Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] inbound.efax.com.: Nameservers: ns1.j2global.com(0.45ms), ns5.j2global.com(1.39ms), ns2.j2global.com(2.30ms) Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] inbound.efax.com: Trying to resolve NS 'ns1.j2global.com' (1/3) Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] ns1.j2global.com: Wants DNSSEC processing, NO auth data in query for A Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] ns1.j2global.com: Looking for CNAME cache hit of 'ns1.j2global.com|CNAME' Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] ns1.j2global.com: Looking for DNAME cache hit of 'com|DNAME' Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] ns1.j2global.com: Looking for DNAME cache hit of 'j2global.com|DNAME' Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] ns1.j2global.com: No CNAME or DNAME cache hit of 'ns1.j2global.com' found Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] ns1.j2global.com: Found cache hit for A: 204.11.168.64[ttl=74204] Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] ns1.j2global.com: updating validation state with cache content for ns1.j2global.com to Indeterminate Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] inbound.efax.com: Resolved 'efax.com' NS ns1.j2global.com to: 204.11.168.64 Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] inbound.efax.com: Trying IP 204.11.168.64:53, asking 'inbound.efax.com|MX' Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] inbound.efax.com: Got 3 answers from ns1.j2global.com (204.11.168.64), rcode=0 (No Error), aa=0, in 12ms Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Removing record 'inbound.efax.com|MX|5 bounced.efax.com.' in the answer section without the AA bit set received from efax.com Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Removing record 'inbound.efax.com|MX|10 bounced2.efax.com.' in the answer section without the AA bit set received from efax.com Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] inbound.efax.com: OPT answer '.' from 'efax.com' nameservers Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] inbound.efax.com: determining status after receiving this packet Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] inbound.efax.com: Trying to resolve NS 'ns5.j2global.com' (2/3) Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] ns5.j2global.com: Wants DNSSEC processing, NO auth data in query for A Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] ns5.j2global.com: Looking for CNAME cache hit of 'ns5.j2global.com|CNAME' Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] ns5.j2global.com: Looking for DNAME cache hit of 'com|DNAME' Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] ns5.j2global.com: Looking for DNAME cache hit of 'j2global.com|DNAME' Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] ns5.j2global.com: No CNAME or DNAME cache hit of 'ns5.j2global.com' found Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] ns5.j2global.com: Found cache hit for A: 204.11.169.11[ttl=74204] Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] ns5.j2global.com: updating validation state with cache content for ns5.j2global.com to Indeterminate Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] inbound.efax.com: Resolved 'efax.com' NS ns5.j2global.com to: 204.11.169.11 Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] inbound.efax.com: Trying IP 204.11.169.11:53, asking 'inbound.efax.com|MX' Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] inbound.efax.com: Got 3 answers from ns5.j2global.com (204.11.169.11), rcode=0 (No Error), aa=0, in 38ms Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Removing record 'inbound.efax.com|MX|10 bounced2.efax.com.' in the answer section without the AA bit set received from efax.com Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Removing record 'inbound.efax.com|MX|5 bounced.efax.com.' in the answer section without the AA bit set received from efax.com Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] inbound.efax.com: OPT answer '.' from 'efax.com' nameservers Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] inbound.efax.com: determining status after receiving this packet Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] inbound.efax.com: Trying to resolve NS 'ns2.j2global.com' (3/3) Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] ns2.j2global.com: Wants DNSSEC processing, NO auth data in query for A Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] ns2.j2global.com: Looking for CNAME cache hit of 'ns2.j2global.com|CNAME' Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] ns2.j2global.com: Looking for DNAME cache hit of 'com|DNAME' Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] ns2.j2global.com: Looking for DNAME cache hit of 'j2global.com|DNAME' Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] ns2.j2global.com: No CNAME or DNAME cache hit of 'ns2.j2global.com' found Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] ns2.j2global.com: Found cache hit for A: 52.21.247.224[ttl=74204] Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] ns2.j2global.com: updating validation state with cache content for ns2.j2global.com to Indeterminate Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] inbound.efax.com: Resolved 'efax.com' NS ns2.j2global.com to: 52.21.247.224 Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] inbound.efax.com: Trying IP 52.21.247.224:53, asking 'inbound.efax.com|MX' Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] inbound.efax.com: Got 3 answers from ns2.j2global.com (52.21.247.224), rcode=0 (No Error), aa=0, in 63ms Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Removing record 'inbound.efax.com|MX|5 bounced.efax.com.' in the answer section without the AA bit set received from efax.com Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Removing record 'inbound.efax.com|MX|10 bounced2.efax.com.' in the answer section without the AA bit set received from efax.com Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] inbound.efax.com: OPT answer '.' from 'efax.com' nameservers Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] inbound.efax.com: determining status after receiving this packet Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] inbound.efax.com: Failed to resolve via any of the 3 offered NS at level 'efax.com' Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] inbound.efax.com: failed (res=-1) Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: Starting validation of answer to inbound.efax.com|MX for w.x.y.z:58108 Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: Answer to inbound.efax.com|MX for w.x.y.z:58108 validates as Insecure Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: 2 [3546702/3] question for 'inbound.efax.com|A' from w.x.y.z:56469 Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] inbound.efax.com: Wants DNSSEC processing, auth data in query for A Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] inbound.efax.com: Looking for CNAME cache hit of 'inbound.efax.com|CNAME' Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] inbound.efax.com: Looking for DNAME cache hit of 'com|DNAME' Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] inbound.efax.com: Looking for DNAME cache hit of 'efax.com|DNAME' Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] inbound.efax.com: No CNAME or DNAME cache hit of 'inbound.efax.com' found Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] inbound.efax.com: No cache hit for 'inbound.efax.com|A', trying to find an appropriate NS record Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] : got TA for '.' Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] : setting cut state for . to Secure Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] : - Looking for a cut at com Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] : no TA found for 'com' among 1 Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] com: Wants DNSSEC processing, auth data in query for DS Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] com: Found cache hit for DS: 30909 8 2 e2d3c916f6deeac73294e8268fb5885044a833fc5459588f4a9184cfc41a5766[ttl=60704] Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] com: updating validation state with cache content for com to Secure Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] : - Found cut at com Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] : New state for com is Secure Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] : - Looking for a cut at efax.com Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] : no TA found for 'efax.com' among 1 Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] efax.com: Wants DNSSEC processing, auth data in query for DS Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] efax.com: DS is negatively cached via 'com' for another 300 seconds Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] efax.com: updating validation state with negative cache content for efax.com to Secure Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] : - Found cut at efax.com Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] : New state for efax.com is Insecure Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] : - Looking for a cut at inbound.efax.com Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] : no TA found for 'inbound.efax.com' among 1 Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] : list of cuts from inbound.efax.com to . Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: - .: Secure Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: - com: Secure Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: - efax.com: Insecure Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] inbound.efax.com: Checking if we have NS in cache for 'inbound.efax.com' Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] inbound.efax.com: no valid/useful NS in cache for 'inbound.efax.com' Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] inbound.efax.com: Checking if we have NS in cache for 'efax.com' Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] inbound.efax.com: NS (with ip, or non-glue) in cache for 'efax.com' -> 'ns1.j2global.com' Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] inbound.efax.com: within bailiwick: 0, not in cache / did not look at cache Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] inbound.efax.com: NS (with ip, or non-glue) in cache for 'efax.com' -> 'ns2.j2global.com' Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] inbound.efax.com: within bailiwick: 0, not in cache / did not look at cache Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] inbound.efax.com: NS (with ip, or non-glue) in cache for 'efax.com' -> 'ns5.j2global.com' Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] inbound.efax.com: within bailiwick: 0, not in cache / did not look at cache Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] inbound.efax.com: We have NS in cache for 'efax.com' (flawedNSSet=0) Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] : got status Insecure for name inbound.efax.com (from efax.com) Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] inbound.efax.com: initial validation status for inbound.efax.com is Insecure Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] inbound.efax.com: Cache consultations done, have 3 NS to contact Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] inbound.efax.com.: Nameservers: ns1.j2global.com(12.67ms), ns5.j2global.com(38.17ms), ns2.j2global.com(63.91ms) Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] inbound.efax.com: Trying to resolve NS 'ns1.j2global.com' (1/3) Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] ns1.j2global.com: Wants DNSSEC processing, NO auth data in query for A Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] ns1.j2global.com: Looking for CNAME cache hit of 'ns1.j2global.com|CNAME' Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] ns1.j2global.com: Looking for DNAME cache hit of 'com|DNAME' Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] ns1.j2global.com: Looking for DNAME cache hit of 'j2global.com|DNAME' Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] ns1.j2global.com: No CNAME or DNAME cache hit of 'ns1.j2global.com' found Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] ns1.j2global.com: Found cache hit for A: 204.11.168.64[ttl=74204] Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] ns1.j2global.com: updating validation state with cache content for ns1.j2global.com to Indeterminate Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] inbound.efax.com: Resolved 'efax.com' NS ns1.j2global.com to: 204.11.168.64 Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] inbound.efax.com: Trying IP 204.11.168.64:53, asking 'inbound.efax.com|A' Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] inbound.efax.com: Got 2 answers from ns1.j2global.com (204.11.168.64), rcode=0 (No Error), aa=0, in 12ms Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] Removing record 'inbound.efax.com|A|204.11.168.109' in the answer section without the AA bit set received from efax.com Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] inbound.efax.com: OPT answer '.' from 'efax.com' nameservers Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] inbound.efax.com: determining status after receiving this packet Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] inbound.efax.com: Trying to resolve NS 'ns5.j2global.com' (2/3) Jun 19 22:1Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: 2 [3546701/3] question for 'inbound.efax.com|MX' from w.x.y.z:58108 Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] inbound.efax.com: Wants DNSSEC processing, auth data in query for MX Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] inbound.efax.com: Looking for CNAME cache hit of 'inbound.efax.com|CNAME' Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] inbound.efax.com: Looking for DNAME cache hit of 'com|DNAME' Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] inbound.efax.com: Looking for DNAME cache hit of 'efax.com|DNAME' Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] inbound.efax.com: No CNAME or DNAME cache hit of 'inbound.efax.com' found Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] inbound.efax.com: No cache hit for 'inbound.efax.com|MX', trying to find an appropriate NS record Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] : got TA for '.' Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] : setting cut state for . to Secure Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] : - Looking for a cut at com Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] : no TA found for 'com' among 1 Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] com: Wants DNSSEC processing, auth data in query for DS Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] com: Found cache hit for DS: 30909 8 2 e2d3c916f6deeac73294e8268fb5885044a833fc5459588f4a9184cfc41a5766[ttl=60704] Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] com: updating validation state with cache content for com to Secure Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] : - Found cut at com Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] : New state for com is Secure Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] : - Looking for a cut at efax.com Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] : no TA found for 'efax.com' among 1 Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] efax.com: Wants DNSSEC processing, auth data in query for DS Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] efax.com: No cache hit for 'efax.com|DS', trying to find an appropriate NS record Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] com: Checking if we have NS in cache for 'com' Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] com: NS (with ip, or non-glue) in cache for 'com' -> 'a.gtld-servers.net' Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] com: within bailiwick: 0, not in cache / did not look at cache Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] com: NS (with ip, or non-glue) in cache for 'com' -> 'g.gtld-servers.net' Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] com: within bailiwick: 0, not in cache / did not look at cache Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] com: NS (with ip, or non-glue) in cache for 'com' -> 'm.gtld-servers.net' Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] com: within bailiwick: 0, not in cache / did not look at cache Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] com: NS (with ip, or non-glue) in cache for 'com' -> 'h.gtld-servers.net' Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] com: within bailiwick: 0, not in cache / did not look at cache Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] com: NS (with ip, or non-glue) in cache for 'com' -> 'b.gtld-servers.net' Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] com: within bailiwick: 0, not in cache / did not look at cache Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] com: NS (with ip, or non-glue) in cache for 'com' -> 'c.gtld-servers.net' Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] com: within bailiwick: 0, not in cache / did not look at cache Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] com: NS (with ip, or non-glue) in cache for 'com' -> 'd.gtld-servers.net' Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] com: within bailiwick: 0, not in cache / did not look at cache Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] com: NS (with ip, or non-glue) in cache for 'com' -> 'f.gtld-servers.net' Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] com: within bailiwick: 0, not in cache / did not look at cache Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] com: NS (with ip, or non-glue) in cache for 'com' -> 'l.gtld-servers.net' Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] com: within bailiwick: 0, not in cache / did not look at cache Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] com: NS (with ip, or non-glue) in cache for 'com' -> 'k.gtld-servers.net' Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] com: within bailiwick: 0, not in cache / did not look at cache Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] com: NS (with ip, or non-glue) in cache for 'com' -> 'e.gtld-servers.net' Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] com: within bailiwick: 0, not in cache / did not look at cache Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] com: NS (with ip, or non-glue) in cache for 'com' -> 'i.gtld-servers.net' Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] com: within bailiwick: 0, not in cache / did not look at cache Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] com: NS (with ip, or non-glue) in cache for 'com' -> 'j.gtld-servers.net' Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] com: within bailiwick: 0, not in cache / did not look at cache Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] com: We have NS in cache for 'com' (flawedNSSet=0) Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] : got status Secure for name efax.com (from com) Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] efax.com: initial validation status for efax.com is Secure Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] efax.com: Cache consultations done, have 13 NS to contact Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] efax.com.: Nameservers: d.gtld-servers.net(2.89ms), m.gtld-servers.net(2.92ms), l.gtld-servers.net(2.95ms), Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] efax.com.: k.gtld-servers.net(3.01ms), b.gtld-servers.net(3.89ms), h.gtld-servers.net(4.09ms), Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] efax.com.: j.gtld-servers.net(5.01ms), i.gtld-servers.net(5.88ms), g.gtld-servers.net(7.57ms), Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] efax.com.: f.gtld-servers.net(7.68ms), c.gtld-servers.net(7.94ms), e.gtld-servers.net(9.86ms), Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] efax.com.: a.gtld-servers.net(11.15ms) Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] efax.com: Trying to resolve NS 'd.gtld-servers.net' (1/13) Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] d.gtld-servers.net: Wants DNSSEC processing, NO auth data in query for A Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] d.gtld-servers.net: Found cache hit for A: 192.31.80.30[ttl=34195] Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] d.gtld-servers.net: updating validation state with cache content for d.gtld-servers.net to Insecure Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Nameserver d.gtld-servers.net IPs: 2001:500:856e::30(2.89ms), 192.31.80.30(12.81ms) Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] efax.com: Resolved 'com' NS d.gtld-servers.net to: 2001:500:856e::30, 192.31.80.30 Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] efax.com: Trying IP [2001:500:856e::30]:53, asking 'efax.com|DS' Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] efax.com: Got 7 answers from d.gtld-servers.net (2001:500:856e::30), rcode=0 (No Error), aa=1, in 60ms Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] efax.com: accept answer 'CK0POJMG874LJREF7EFN8430QVIT8BSM.com|NSEC3|1 1 0 - CK0Q1GIN43N1ARRC9OSM6QPQR81H5M9A NS SOA RRSIG DNSKEY NSEC3PARAM' from 'com' nameservers? ttl=86400, place=2 YES! Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] efax.com: accept answer 'CK0POJMG874LJREF7EFN8430QVIT8BSM.com|RRSIG|NSEC3 8 2 86400 20190624044534 20190617033534 3800 com. CXkmAw0Yj+e3boQ92LrOOdoyYyXpX3KIWBytEn0RQtae+a5yww4+SnUimpdagv57ZOUS5TLNl1Bgr5Z9s1vKEZhipRWe1qERl8HiNjL8uwkcNqFfEs3pkOxuwZJJEwTuG5clELIs83v+6najjEIJw56q/eu4VT/vw21pEk9mtYI=' from 'com' nameservers? ttl=86400, place=2 RRSIG - separate Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] efax.com: accept answer 'com|SOA|a.gtld-servers.net. nstld.verisign-grs.com. 1561007656 1800 900 604800 86400' from 'com' nameservers? ttl=900, place=2 YES! Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] efax.com: accept answer 'com|RRSIG|SOA 8 1 900 20190627051416 20190620040416 3800 com. Fqugfk6Qm+m2fZymHEuSbWkwwYh+bpq8B2BRpXwO28mvlPsYhB0rMtuyS1eyhbHB51CcQQEjFk+Vesr6YcUqag3lu06T+Lc0zJXM+fmM6jXe4dAC3N7+Xg2mhpv87FdNuNeyjxVh2BzXBXC3cCR273VaYHkDLDjbiQft9AsF45U=' from 'com' nameservers? ttl=900, place=2 RRSIG - separate Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] efax.com: accept answer 'UE91PO6QM9K9CRKPCPBU5GE4S5QNJS4C.com|NSEC3|1 1 0 - UE93IVHH5QPHRO2CKETFIHCN58H1576G NS DS RRSIG' from 'com' nameservers? ttl=86400, place=2 YES! Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] efax.com: accept answer 'UE91PO6QM9K9CRKPCPBU5GE4S5QNJS4C.com|RRSIG|NSEC3 8 2 86400 20190626042101 20190619031101 3800 com. N96N6Qy5K0E+O0MXCPaFAwJGTLRayYXI70TUb2cCsDKs7aYl/SrT5pKoutY3fUG2Fk13JYdqzZ46UjEN1BGE5ttF40m+L7W0wNQbUIr0xhF4AaXveFc2bR6jQZbry9AiZlBbewbdw5vOU7lAyXP/lPsC9rZFNui8froFwnxkMP4=' from 'com' nameservers? ttl=86400, place=2 RRSIG - separate Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] efax.com: OPT answer '.' from 'com' nameservers Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] : got status Secure for name com (from com) Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] : got initial zone status Secure for record com|SOA Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Validating non-additional record for com Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Retrieving DNSKeys for com Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] com: Wants DNSSEC processing, auth data in query for DNSKEY Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] com: Found cache hit for DNSKEY: 256 3 8 AQOcWJruwENIaapq3h3lKJlflLx6rWJz2aKRBV6CBJRTxZu4ge2iDX164dQ7Hpc9b8C9z2gqWyx1XyjvbQisgSid24voeUHQgD0weedVDQjD6B9By7zMI6Yz+cM/w6H8zB8ZRn6qZuWZAxFOjKvzoz+3vf32tyZE7QmLFnXDgQpFxw==[ttl=55271] 257 3 8 AQPDzldNmMvZFX4NcNJ0uEnKDg7tmv/F3MyQR0lpBmVcNcsIszxNFxsBfKNW9JYCYqpik8366LE7VbIcNRzfp2h9OO8HRl+H+E08zauK8k7evWEmu/6od+2boggPoiEfGNyvNPaSI7FOIroDsnw/taggzHRX1Z7SOiOiPWPNIwSUyWOZ79VmcQ1GLkC6NlYvG3HwYmynQv6oFwGv/KELSw7ZSdrbTQ0HXvZbqMUI7BaMskmvgm1G7oKZ1YiF7O9ioVNc0+7ASbqmZN7Z98EGU/Qh2K/BgUe8Hs0XVcdPKrtyYnoQHd2ynKPcMMlTEih2/2HDHjRPJ2aywIpKNnv4oPo/[ttl=55271] Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] com: updating validation state with cache content for com to Secure Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Retrieved 2 DNSKeys for com, state is Secure Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Going to validate 1 record contents with 1 sigs and 2 keys for com Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Secure! Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] : got status Secure for name UE91PO6QM9K9CRKPCPBU5GE4S5QNJS4C.com (from com) Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] : got initial zone status Secure for record UE91PO6QM9K9CRKPCPBU5GE4S5QNJS4C.com|NSEC3 Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Validating non-additional record for UE91PO6QM9K9CRKPCPBU5GE4S5QNJS4C.com Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Retrieving DNSKeys for com Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] com: Wants DNSSEC processing, auth data in query for DNSKEY Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] com: Found cache hit for DNSKEY: 256 3 8 AQOcWJruwENIaapq3h3lKJlflLx6rWJz2aKRBV6CBJRTxZu4ge2iDX164dQ7Hpc9b8C9z2gqWyx1XyjvbQisgSid24voeUHQgD0weedVDQjD6B9By7zMI6Yz+cM/w6H8zB8ZRn6qZuWZAxFOjKvzoz+3vf32tyZE7QmLFnXDgQpFxw==[ttl=55271] 257 3 8 AQPDzldNmMvZFX4NcNJ0uEnKDg7tmv/F3MyQR0lpBmVcNcsIszxNFxsBfKNW9JYCYqpik8366LE7VbIcNRzfp2h9OO8HRl+H+E08zauK8k7evWEmu/6od+2boggPoiEfGNyvNPaSI7FOIroDsnw/taggzHRX1Z7SOiOiPWPNIwSUyWOZ79VmcQ1GLkC6NlYvG3HwYmynQv6oFwGv/KELSw7ZSdrbTQ0HXvZbqMUI7BaMskmvgm1G7oKZ1YiF7O9ioVNc0+7ASbqmZN7Z98EGU/Qh2K/BgUe8Hs0XVcdPKrtyYnoQHd2ynKPcMMlTEih2/2HDHjRPJ2aywIpKNnv4oPo/[ttl=55271] Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] com: updating validation state with cache content for com to Secure Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Retrieved 2 DNSKeys for com, state is Secure Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Going to validate 1 record contents with 1 sigs and 2 keys for UE91PO6QM9K9CRKPCPBU5GE4S5QNJS4C.com Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Secure! Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] : got status Secure for name CK0POJMG874LJREF7EFN8430QVIT8BSM.com (from com) Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] : got initial zone status Secure for record CK0POJMG874LJREF7EFN8430QVIT8BSM.com|NSEC3 Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Validating non-additional record for CK0POJMG874LJREF7EFN8430QVIT8BSM.com Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Retrieving DNSKeys for com Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] com: Wants DNSSEC processing, auth data in query for DNSKEY Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] com: Found cache hit for DNSKEY: 256 3 8 AQOcWJruwENIaapq3h3lKJlflLx6rWJz2aKRBV6CBJRTxZu4ge2iDX164dQ7Hpc9b8C9z2gqWyx1XyjvbQisgSid24voeUHQgD0weedVDQjD6B9By7zMI6Yz+cM/w6H8zB8ZRn6qZuWZAxFOjKvzoz+3vf32tyZE7QmLFnXDgQpFxw==[ttl=55271] 257 3 8 AQPDzldNmMvZFX4NcNJ0uEnKDg7tmv/F3MyQR0lpBmVcNcsIszxNFxsBfKNW9JYCYqpik8366LE7VbIcNRzfp2h9OO8HRl+H+E08zauK8k7evWEmu/6od+2boggPoiEfGNyvNPaSI7FOIroDsnw/taggzHRX1Z7SOiOiPWPNIwSUyWOZ79VmcQ1GLkC6NlYvG3HwYmynQv6oFwGv/KELSw7ZSdrbTQ0HXvZbqMUI7BaMskmvgm1G7oKZ1YiF7O9ioVNc0+7ASbqmZN7Z98EGU/Qh2K/BgUe8Hs0XVcdPKrtyYnoQHd2ynKPcMMlTEih2/2HDHjRPJ2aywIpKNnv4oPo/[ttl=55271] Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] com: updating validation state with cache content for com to Secure Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Retrieved 2 DNSKeys for com, state is Secure Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Going to validate 1 record contents with 1 sigs and 2 keys for CK0POJMG874LJREF7EFN8430QVIT8BSM.com Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Secure! Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] efax.com: determining status after receiving this packet Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] efax.com: got negative caching indication for 'efax.com|DS' Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] OPT-out denial found for efax.com Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] efax.com: status=noerror, other types may exist, but we are done (have negative SOA) (have aa bit) Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] : - Found cut at efax.com Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] : New state for efax.com is Insecure Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] : - Looking for a cut at inbound.efax.com Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] : no TA found for 'inbound.efax.com' among 1 Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] : list of cuts from inbound.efax.com to . Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: - .: Secure Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: - com: Secure Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: - efax.com: Insecure Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] inbound.efax.com: Checking if we have NS in cache for 'inbound.efax.com' Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] inbound.efax.com: no valid/useful NS in cache for 'inbound.efax.com' Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] inbound.efax.com: Checking if we have NS in cache for 'efax.com' Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] inbound.efax.com: NS (with ip, or non-glue) in cache for 'efax.com' -> 'ns1.j2global.com' Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] inbound.efax.com: within bailiwick: 0, not in cache / did not look at cache Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] inbound.efax.com: NS (with ip, or non-glue) in cache for 'efax.com' -> 'ns2.j2global.com' Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] inbound.efax.com: within bailiwick: 0, not in cache / did not look at cache Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] inbound.efax.com: NS (with ip, or non-glue) in cache for 'efax.com' -> 'ns5.j2global.com' Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] inbound.efax.com: within bailiwick: 0, not in cache / did not look at cache Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] inbound.efax.com: We have NS in cache for 'efax.com' (flawedNSSet=0) Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] : got status Insecure for name inbound.efax.com (from efax.com) Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] inbound.efax.com: initial validation status for inbound.efax.com is Insecure Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] inbound.efax.com: Cache consultations done, have 3 NS to contact Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] inbound.efax.com.: Nameservers: ns1.j2global.com(0.45ms), ns5.j2global.com(1.39ms), ns2.j2global.com(2.30ms) Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] inbound.efax.com: Trying to resolve NS 'ns1.j2global.com' (1/3) Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] ns1.j2global.com: Wants DNSSEC processing, NO auth data in query for A Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] ns1.j2global.com: Looking for CNAME cache hit of 'ns1.j2global.com|CNAME' Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] ns1.j2global.com: Looking for DNAME cache hit of 'com|DNAME' Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] ns1.j2global.com: Looking for DNAME cache hit of 'j2global.com|DNAME' Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] ns1.j2global.com: No CNAME or DNAME cache hit of 'ns1.j2global.com' found Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] ns1.j2global.com: Found cache hit for A: 204.11.168.64[ttl=74204] Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] ns1.j2global.com: updating validation state with cache content for ns1.j2global.com to Indeterminate Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] inbound.efax.com: Resolved 'efax.com' NS ns1.j2global.com to: 204.11.168.64 Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] inbound.efax.com: Trying IP 204.11.168.64:53, asking 'inbound.efax.com|MX' Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] inbound.efax.com: Got 3 answers from ns1.j2global.com (204.11.168.64), rcode=0 (No Error), aa=0, in 12ms Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Removing record 'inbound.efax.com|MX|5 bounced.efax.com.' in the answer section without the AA bit set received from efax.com Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Removing record 'inbound.efax.com|MX|10 bounced2.efax.com.' in the answer section without the AA bit set received from efax.com Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] inbound.efax.com: OPT answer '.' from 'efax.com' nameservers Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] inbound.efax.com: determining status after receiving this packet Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] inbound.efax.com: Trying to resolve NS 'ns5.j2global.com' (2/3) Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] ns5.j2global.com: Wants DNSSEC processing, NO auth data in query for A Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] ns5.j2global.com: Looking for CNAME cache hit of 'ns5.j2global.com|CNAME' Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] ns5.j2global.com: Looking for DNAME cache hit of 'com|DNAME' Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] ns5.j2global.com: Looking for DNAME cache hit of 'j2global.com|DNAME' Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] ns5.j2global.com: No CNAME or DNAME cache hit of 'ns5.j2global.com' found Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] ns5.j2global.com: Found cache hit for A: 204.11.169.11[ttl=74204] Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] ns5.j2global.com: updating validation state with cache content for ns5.j2global.com to Indeterminate Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] inbound.efax.com: Resolved 'efax.com' NS ns5.j2global.com to: 204.11.169.11 Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] inbound.efax.com: Trying IP 204.11.169.11:53, asking 'inbound.efax.com|MX' Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] inbound.efax.com: Got 3 answers from ns5.j2global.com (204.11.169.11), rcode=0 (No Error), aa=0, in 38ms Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Removing record 'inbound.efax.com|MX|10 bounced2.efax.com.' in the answer section without the AA bit set received from efax.com Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Removing record 'inbound.efax.com|MX|5 bounced.efax.com.' in the answer section without the AA bit set received from efax.com Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] inbound.efax.com: OPT answer '.' from 'efax.com' nameservers Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] inbound.efax.com: determining status after receiving this packet Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] inbound.efax.com: Trying to resolve NS 'ns2.j2global.com' (3/3) Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] ns2.j2global.com: Wants DNSSEC processing, NO auth data in query for A Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] ns2.j2global.com: Looking for CNAME cache hit of 'ns2.j2global.com|CNAME' Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] ns2.j2global.com: Looking for DNAME cache hit of 'com|DNAME' Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] ns2.j2global.com: Looking for DNAME cache hit of 'j2global.com|DNAME' Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] ns2.j2global.com: No CNAME or DNAME cache hit of 'ns2.j2global.com' found Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] ns2.j2global.com: Found cache hit for A: 52.21.247.224[ttl=74204] Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] ns2.j2global.com: updating validation state with cache content for ns2.j2global.com to Indeterminate Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] inbound.efax.com: Resolved 'efax.com' NS ns2.j2global.com to: 52.21.247.224 Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] inbound.efax.com: Trying IP 52.21.247.224:53, asking 'inbound.efax.com|MX' Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] inbound.efax.com: Got 3 answers from ns2.j2global.com (52.21.247.224), rcode=0 (No Error), aa=0, in 63ms Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Removing record 'inbound.efax.com|MX|5 bounced.efax.com.' in the answer section without the AA bit set received from efax.com Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Removing record 'inbound.efax.com|MX|10 bounced2.efax.com.' in the answer section without the AA bit set received from efax.com Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] inbound.efax.com: OPT answer '.' from 'efax.com' nameservers Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] inbound.efax.com: determining status after receiving this packet Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] inbound.efax.com: Failed to resolve via any of the 3 offered NS at level 'efax.com' Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] inbound.efax.com: failed (res=-1) Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: Starting validation of answer to inbound.efax.com|MX for w.x.y.z:58108 Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: Answer to inbound.efax.com|MX for w.x.y.z:58108 validates as Insecure Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: 2 [3546702/3] question for 'inbound.efax.com|A' from w.x.y.z:56469 Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] inbound.efax.com: Wants DNSSEC processing, auth data in query for A Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] inbound.efax.com: Looking for CNAME cache hit of 'inbound.efax.com|CNAME' Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] inbound.efax.com: Looking for DNAME cache hit of 'com|DNAME' Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] inbound.efax.com: Looking for DNAME cache hit of 'efax.com|DNAME' Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] inbound.efax.com: No CNAME or DNAME cache hit of 'inbound.efax.com' found Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] inbound.efax.com: No cache hit for 'inbound.efax.com|A', trying to find an appropriate NS record Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] : got TA for '.' Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] : setting cut state for . to Secure Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] : - Looking for a cut at com Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] : no TA found for 'com' among 1 Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] com: Wants DNSSEC processing, auth data in query for DS Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] com: Found cache hit for DS: 30909 8 2 e2d3c916f6deeac73294e8268fb5885044a833fc5459588f4a9184cfc41a5766[ttl=60704] Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] com: updating validation state with cache content for com to Secure Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] : - Found cut at com Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] : New state for com is Secure Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] : - Looking for a cut at efax.com Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] : no TA found for 'efax.com' among 1 Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] efax.com: Wants DNSSEC processing, auth data in query for DS Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] efax.com: DS is negatively cached via 'com' for another 300 seconds Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] efax.com: updating validation state with negative cache content for efax.com to Secure Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] : - Found cut at efax.com Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] : New state for efax.com is Insecure Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] : - Looking for a cut at inbound.efax.com Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] : no TA found for 'inbound.efax.com' among 1 Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] : list of cuts from inbound.efax.com to . Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: - .: Secure Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: - com: Secure Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: - efax.com: Insecure Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] inbound.efax.com: Checking if we have NS in cache for 'inbound.efax.com' Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] inbound.efax.com: no valid/useful NS in cache for 'inbound.efax.com' Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] inbound.efax.com: Checking if we have NS in cache for 'efax.com' Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] inbound.efax.com: NS (with ip, or non-glue) in cache for 'efax.com' -> 'ns1.j2global.com' Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] inbound.efax.com: within bailiwick: 0, not in cache / did not look at cache Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] inbound.efax.com: NS (with ip, or non-glue) in cache for 'efax.com' -> 'ns2.j2global.com' Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] inbound.efax.com: within bailiwick: 0, not in cache / did not look at cache Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] inbound.efax.com: NS (with ip, or non-glue) in cache for 'efax.com' -> 'ns5.j2global.com' Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] inbound.efax.com: within bailiwick: 0, not in cache / did not look at cache Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] inbound.efax.com: We have NS in cache for 'efax.com' (flawedNSSet=0) Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] : got status Insecure for name inbound.efax.com (from efax.com) Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] inbound.efax.com: initial validation status for inbound.efax.com is Insecure Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] inbound.efax.com: Cache consultations done, have 3 NS to contact Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] inbound.efax.com.: Nameservers: ns1.j2global.com(12.67ms), ns5.j2global.com(38.17ms), ns2.j2global.com(63.91ms) Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] inbound.efax.com: Trying to resolve NS 'ns1.j2global.com' (1/3) Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] ns1.j2global.com: Wants DNSSEC processing, NO auth data in query for A Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] ns1.j2global.com: Looking for CNAME cache hit of 'ns1.j2global.com|CNAME' Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] ns1.j2global.com: Looking for DNAME cache hit of 'com|DNAME' Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] ns1.j2global.com: Looking for DNAME cache hit of 'j2global.com|DNAME' Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] ns1.j2global.com: No CNAME or DNAME cache hit of 'ns1.j2global.com' found Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] ns1.j2global.com: Found cache hit for A: 204.11.168.64[ttl=74204] Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] ns1.j2global.com: updating validation state with cache content for ns1.j2global.com to Indeterminate Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] inbound.efax.com: Resolved 'efax.com' NS ns1.j2global.com to: 204.11.168.64 Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] inbound.efax.com: Trying IP 204.11.168.64:53, asking 'inbound.efax.com|A' Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] inbound.efax.com: Got 2 answers from ns1.j2global.com (204.11.168.64), rcode=0 (No Error), aa=0, in 12ms Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] Removing record 'inbound.efax.com|A|204.11.168.109' in the answer section without the AA bit set received from efax.com Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] inbound.efax.com: OPT answer '.' from 'efax.com' nameservers Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] inbound.efax.com: determining status after receiving this packet Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] inbound.efax.com: Trying to resolve NS 'ns5.j2global.com' (2/3) Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] ns5.j2global.com: Wants DNSSEC processing, NO auth data in query for A Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] ns5.j2global.com: Looking for CNAME cache hit of 'ns5.j2global.com|CNAME' Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] ns5.j2global.com: Looking for DNAME cache hit of 'com|DNAME' Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] ns5.j2global.com: Looking for DNAME cache hit of 'j2global.com|DNAME' Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] ns5.j2global.com: No CNAME or DNAME cache hit of 'ns5.j2global.com' found Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] ns5.j2global.com: Found cache hit for A: 204.11.169.11[ttl=74204] Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] ns5.j2global.com: updating validation state with cache content for ns5.j2global.com to Indeterminate Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] inbound.efax.com: Resolved 'efax.com' NS ns5.j2global.com to: 204.11.169.11 Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] inbound.efax.com: Trying IP 204.11.169.11:53, asking 'inbound.efax.com|A' Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] inbound.efax.com: Got 2 answers from ns5.j2global.com (204.11.169.11), rcode=0 (No Error), aa=0, in 38ms Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] Removing record 'inbound.efax.com|A|204.11.168.109' in the answer section without the AA bit set received from efax.com Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] inbound.efax.com: OPT answer '.' from 'efax.com' nameservers Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] inbound.efax.com: determining status after receiving this packet Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] inbound.efax.com: Trying to resolve NS 'ns2.j2global.com' (3/3) Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] ns2.j2global.com: Wants DNSSEC processing, NO auth data in query for A Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] ns2.j2global.com: Looking for CNAME cache hit of 'ns2.j2global.com|CNAME' Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] ns2.j2global.com: Looking for DNAME cache hit of 'com|DNAME' Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] ns2.j2global.com: Looking for DNAME cache hit of 'j2global.com|DNAME' Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] ns2.j2global.com: No CNAME or DNAME cache hit of 'ns2.j2global.com' found Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] ns2.j2global.com: Found cache hit for A: 52.21.247.224[ttl=74204] Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] ns2.j2global.com: updating validation state with cache content for ns2.j2global.com to Indeterminate Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] inbound.efax.com: Resolved 'efax.com' NS ns2.j2global.com to: 52.21.247.224 Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] inbound.efax.com: Trying IP 52.21.247.224:53, asking 'inbound.efax.com|A' Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] inbound.efax.com: Got 2 answers from ns2.j2global.com (52.21.247.224), rcode=0 (No Error), aa=0, in 63ms Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] Removing record 'inbound.efax.com|A|204.11.168.109' in the answer section without the AA bit set received from efax.com Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] inbound.efax.com: OPT answer '.' from 'efax.com' nameservers Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] inbound.efax.com: determining status after receiving this packet Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] inbound.efax.com: Failed to resolve via any of the 3 offered NS at level 'efax.com' Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] inbound.efax.com: failed (res=-1) Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: Starting validation of answer to inbound.efax.com|A for w.x.y.z:56469 Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: Answer to inbound.efax.com|A for w.x.y.z:56469 validates as Insecure 4:40 rslvall-sub-a pdns_recursor[23530]: [3546702] ns5.j2global.com: Wants DNSSEC processing, NO auth data in query for A Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] ns5.j2global.com: Looking for CNAME cache hit of 'ns5.j2global.com|CNAME' Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] ns5.j2global.com: Looking for DNAME cache hit of 'com|DNAME' Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] ns5.j2global.com: Looking for DNAME cache hit of 'j2global.com|DNAME' Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] ns5.j2global.com: No CNAME or DNAME cache hit of 'ns5.j2global.com' found Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] ns5.j2global.com: Found cache hit for A: 204.11.169.11[ttl=74204] Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] ns5.j2global.com: updating validation state with cache content for ns5.j2global.com to Indeterminate Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] inbound.efax.com: Resolved 'efax.com' NS ns5.j2global.com to: 204.11.169.11 Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] inbound.efax.com: Trying IP 204.11.169.11:53, asking 'inbound.efax.com|A' Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] inbound.efax.com: Got 2 answers from ns5.j2global.com (204.11.169.11), rcode=0 (No Error), aa=0, in 38ms Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] Removing record 'inbound.efax.com|A|204.11.168.109' in the answer section without the AA bit set received from efax.com Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] inbound.efax.com: OPT answer '.' from 'efax.com' nameservers Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] inbound.efax.com: determining status after receiving this packet Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] inbound.efax.com: Trying to resolve NS 'ns2.j2global.com' (3/3) Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] ns2.j2global.com: Wants DNSSEC processing, NO auth data in query for A Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] ns2.j2global.com: Looking for CNAME cache hit of 'ns2.j2global.com|CNAME' Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] ns2.j2global.com: Looking for DNAME cache hit of 'com|DNAME' Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] ns2.j2global.com: Looking for DNAME cache hit of 'j2global.com|DNAME' Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] ns2.j2global.com: No CNAME or DNAME cache hit of 'ns2.j2global.com' found Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] ns2.j2global.com: Found cache hit for A: 52.21.247.224[ttl=74204] Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] ns2.j2global.com: updating validation state with cache content for ns2.j2global.com to Indeterminate Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] inbound.efax.com: Resolved 'efax.com' NS ns2.j2global.com to: 52.21.247.224 Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] inbound.efax.com: Trying IP 52.21.247.224:53, asking 'inbound.efax.com|A' Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] inbound.efax.com: Got 2 answers from ns2.j2global.com (52.21.247.224), rcode=0 (No Error), aa=0, in 63ms Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] Removing record 'inbound.efax.com|A|204.11.168.109' in the answer section without the AA bit set received from efax.com Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] inbound.efax.com: OPT answer '.' from 'efax.com' nameservers Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] inbound.efax.com: determining status after receiving this packet Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] inbound.efax.com: Failed to resolve via any of the 3 offered NS at level 'efax.com' Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] inbound.efax.com: failed (res=-1) Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: Starting validation of answer to inbound.efax.com|A for w.x.y.z:56469 Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: Answer to inbound.efax.com|A for w.x.y.z:56469 validates as Insecure _______________________________________________ Pdns-users mailing list Pdns-users@mailman.powerdns.com https://mailman.powerdns.com/mailman/listinfo/pdns-users