Re: stop on unrecognized qresult in rpz_rewrite()

2018-11-16 Thread Lee
w, and I assumed > it was the same thing when you asked about it. > > Since synth-from-dnssec doesn't exist in 9.11, there must be another cause > in your case. Very sorry for misleading you. How often are you seeing this? $ grep "stop on unrecognized qresult in rpz_rewrite" errors.log |

Re: stop on unrecognized qresult in rpz_rewrite()

2018-11-16 Thread Evan Hunt
On Fri, Nov 16, 2018 at 11:44:11AM -0500, Lee wrote: > > It's an interaction between RPZ and aggressive negative caching (i.e. > > "synth-from-dnssec"). It's fixed in the upcoming release. > > I should have asked which upcoming release? It's still happening in 9.11.5: I'm sorry, I should have

Re: stop on unrecognized qresult in rpz_rewrite()

2018-11-16 Thread Lee
On 9/29/18, Evan Hunt wrote: > On Sat, Sep 29, 2018 at 05:48:55PM -0400, Lee wrote: >> Can someone tell me what can cause >> stop on unrecognized qresult in rpz_rewrite()failed: >> or how to fix whatever it was? > > It's an interaction between RPZ and aggressive nega

Re: stop on unrecognized qresult in rpz_rewrite()

2018-09-29 Thread Evan Hunt
On Sat, Sep 29, 2018 at 05:48:55PM -0400, Lee wrote: > Can someone tell me what can cause > stop on unrecognized qresult in rpz_rewrite()failed: > or how to fix whatever it was? It's an interaction between RPZ and aggressive negative caching (i.e. "synth-from-dnssec

stop on unrecognized qresult in rpz_rewrite()

2018-09-29 Thread Lee
gement.gov IN A + (127.0.0.1) 29-Sep-2018 15:56:21.708 query-errors: debug 1: client @01F0C8672910 127.0.0.1#58997 (fpki.idmanagement.gov): rpz QNAME rewrite dfew6wnpm1gb5.cloudfront.net via dfew6wnpm1gb5.cloudfront.net stop on unrecognized qresult in rpz_rewrite()failed: : SERVFAIL 29-Sep-2018 15