** Description changed:

  Ubuntu 22.04.2 amd64
  systemd: 249.11-0ubuntu3.9
  
  when I ask for non-existing domain, systemd-resolved replies with
  SERVFAIL. I believe that correct answer should be NXDOMAIN.
  
  DEMO, I use `khost` utility from package `knot-host`:
  
  CloudFlare DNS, reference, I believe this is expected answer:
  
  $ khost oops. 1.1.1.1
  Host oops. type A error: NXDOMAIN
  Host oops. type AAAA error: NXDOMAIN
  Host oops. type MX error: NXDOMAIN
  
  systemd-resolved, the bug (and the reply is not consistent, MX record
  has different error):
  
  $ khost oops.
  Host oops. type A error: SERVFAIL
  Host oops. type AAAA error: SERVFAIL
  Host oops. type MX error: NXDOMAIN
  
  $ khost -v oops.
  ;; ->>HEADER<<- opcode: QUERY; status: SERVFAIL; id: 15468
  ;; Flags: qr aa rd ra; QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 0
  ;;oops.                         IN      A
  
  ;; Received 22 B
  ;; Time 2023-06-18 18:27:02 UTC
  ;; From 127.0.0.53@53(UDP) in 0.0 ms
  
  ;; ->>HEADER<<- opcode: QUERY; status: SERVFAIL; id: 55107
  ;; Flags: qr aa rd ra; QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 0
  ;;oops.                         IN      AAAA
  
  ;; Received 22 B
  ;; Time 2023-06-18 18:27:02 UTC
  ;; From 127.0.0.53@53(UDP) in 0.0 ms
  
  ;; ->>HEADER<<- opcode: QUERY; status: NXDOMAIN; id: 46585
  ;; Flags: qr rd ra; QUERY: 1; ANSWER: 0; AUTHORITY: 1; ADDITIONAL: 0
  ;;oops.                         IN      MX
  .                       1390    IN      SOA     a.root-servers.net. 
nstld.verisign-grs.com. 2023061800 1800 900 604800 86400
  
  ;; Received 97 B
  ;; Time 2023-06-18 18:27:02 UTC
  ;; From 127.0.0.53@53(UDP) in 3.4 ms
+ 
+ Check that DNS is served by systemd-resolved:
+ 
+ $ sudo ss -nlp | grep ":53 "
+ udp   UNCONN 0      0                                   127.0.0.53%lo:53      
         0.0.0.0:*    users:(("systemd-resolve",pid=586,fd=13))                 
      
+ tcp   LISTEN 0      4096                                127.0.0.53%lo:53      
         0.0.0.0:*    users:(("systemd-resolve",pid=586,fd=14))

** Description changed:

  Ubuntu 22.04.2 amd64
  systemd: 249.11-0ubuntu3.9
  
  when I ask for non-existing domain, systemd-resolved replies with
- SERVFAIL. I believe that correct answer should be NXDOMAIN.
+ SERVFAIL. I believe that correct answer should be NXDOMAIN (this is
+ reply from public DNS servers, like 1.1.1.1, 8.8.8.8, 9.9.9.9 and
+ others).
  
  DEMO, I use `khost` utility from package `knot-host`:
  
  CloudFlare DNS, reference, I believe this is expected answer:
  
  $ khost oops. 1.1.1.1
  Host oops. type A error: NXDOMAIN
  Host oops. type AAAA error: NXDOMAIN
  Host oops. type MX error: NXDOMAIN
  
  systemd-resolved, the bug (and the reply is not consistent, MX record
  has different error):
  
  $ khost oops.
  Host oops. type A error: SERVFAIL
  Host oops. type AAAA error: SERVFAIL
  Host oops. type MX error: NXDOMAIN
  
  $ khost -v oops.
  ;; ->>HEADER<<- opcode: QUERY; status: SERVFAIL; id: 15468
  ;; Flags: qr aa rd ra; QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 0
  ;;oops.                         IN      A
  
  ;; Received 22 B
  ;; Time 2023-06-18 18:27:02 UTC
  ;; From 127.0.0.53@53(UDP) in 0.0 ms
  
  ;; ->>HEADER<<- opcode: QUERY; status: SERVFAIL; id: 55107
  ;; Flags: qr aa rd ra; QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 0
  ;;oops.                         IN      AAAA
  
  ;; Received 22 B
  ;; Time 2023-06-18 18:27:02 UTC
  ;; From 127.0.0.53@53(UDP) in 0.0 ms
  
  ;; ->>HEADER<<- opcode: QUERY; status: NXDOMAIN; id: 46585
  ;; Flags: qr rd ra; QUERY: 1; ANSWER: 0; AUTHORITY: 1; ADDITIONAL: 0
  ;;oops.                         IN      MX
  .                       1390    IN      SOA     a.root-servers.net. 
nstld.verisign-grs.com. 2023061800 1800 900 604800 86400
  
  ;; Received 97 B
  ;; Time 2023-06-18 18:27:02 UTC
  ;; From 127.0.0.53@53(UDP) in 3.4 ms
  
  Check that DNS is served by systemd-resolved:
  
  $ sudo ss -nlp | grep ":53 "
- udp   UNCONN 0      0                                   127.0.0.53%lo:53      
         0.0.0.0:*    users:(("systemd-resolve",pid=586,fd=13))                 
      
+ udp   UNCONN 0      0                                   127.0.0.53%lo:53      
         0.0.0.0:*    users:(("systemd-resolve",pid=586,fd=13))
  tcp   LISTEN 0      4096                                127.0.0.53%lo:53      
         0.0.0.0:*    users:(("systemd-resolve",pid=586,fd=14))

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to systemd in Ubuntu.
https://bugs.launchpad.net/bugs/2024320

Title:
  systemd-resolved: returns SERVFAIL for uknown domain

Status in systemd package in Ubuntu:
  New

Bug description:
  Ubuntu 22.04.2 amd64
  systemd: 249.11-0ubuntu3.9

  when I ask for non-existing domain, systemd-resolved replies with
  SERVFAIL. I believe that correct answer should be NXDOMAIN (this is
  reply from public DNS servers, like 1.1.1.1, 8.8.8.8, 9.9.9.9 and
  others).

  DEMO, I use `khost` utility from package `knot-host`:

  CloudFlare DNS, reference, I believe this is expected answer:

  $ khost oops. 1.1.1.1
  Host oops. type A error: NXDOMAIN
  Host oops. type AAAA error: NXDOMAIN
  Host oops. type MX error: NXDOMAIN

  systemd-resolved, the bug (and the reply is not consistent, MX record
  has different error):

  $ khost oops.
  Host oops. type A error: SERVFAIL
  Host oops. type AAAA error: SERVFAIL
  Host oops. type MX error: NXDOMAIN

  $ khost -v oops.
  ;; ->>HEADER<<- opcode: QUERY; status: SERVFAIL; id: 15468
  ;; Flags: qr aa rd ra; QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 0
  ;;oops.                         IN      A

  ;; Received 22 B
  ;; Time 2023-06-18 18:27:02 UTC
  ;; From 127.0.0.53@53(UDP) in 0.0 ms

  ;; ->>HEADER<<- opcode: QUERY; status: SERVFAIL; id: 55107
  ;; Flags: qr aa rd ra; QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 0
  ;;oops.                         IN      AAAA

  ;; Received 22 B
  ;; Time 2023-06-18 18:27:02 UTC
  ;; From 127.0.0.53@53(UDP) in 0.0 ms

  ;; ->>HEADER<<- opcode: QUERY; status: NXDOMAIN; id: 46585
  ;; Flags: qr rd ra; QUERY: 1; ANSWER: 0; AUTHORITY: 1; ADDITIONAL: 0
  ;;oops.                         IN      MX
  .                       1390    IN      SOA     a.root-servers.net. 
nstld.verisign-grs.com. 2023061800 1800 900 604800 86400

  ;; Received 97 B
  ;; Time 2023-06-18 18:27:02 UTC
  ;; From 127.0.0.53@53(UDP) in 3.4 ms

  Check that DNS is served by systemd-resolved:

  $ sudo ss -nlp | grep ":53 "
  udp   UNCONN 0      0                                   127.0.0.53%lo:53      
         0.0.0.0:*    users:(("systemd-resolve",pid=586,fd=13))
  tcp   LISTEN 0      4096                                127.0.0.53%lo:53      
         0.0.0.0:*    users:(("systemd-resolve",pid=586,fd=14))

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/2024320/+subscriptions


-- 
Mailing list: https://launchpad.net/~touch-packages
Post to     : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to