-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi Haw,
For commbank, I see one thing: dig @140.168.70.10 my.commbank.com.au. AAAA gives timeouts, but type A or MX works fine. This should still work with unbound. For me unbound-host resolves both names fine, with the svn trunk and also unbound-1.4.1 versions. Can you run unbound-host like you did and send me the full debug output (offlist, gzipped?) In your debug output it says all targets are bad choices, this is usually done with servers that are lame. Same for the other domain, if you could send me a debug log, I could tell more. Looks like unbound detected some sort of lame servers. Best regards, Wouter On 01/06/2010 06:25 AM, Haw Loeung wrote: > Forgot to mention, we're running Unbound 1.4.1. my.commbank.com.au is > another domain our users are having problems with. > > > Output from unbound-host: > > === > [1262755006] libunbound[16857:0] info: DelegationPoint<my.commbank.com.au.>: > 2 names > (0 missing), 2 addrs (0 result, 0 avail) > [1262755006] libunbound[16857:0] info: bl1ca-pr-cclb01.my.commbank.com.au. > * A > [1262755006] libunbound[16857:0] info: nw2ca-pr-cclb01.my.commbank.com.au. > * A > [1262755006] libunbound[16857:0] debug: ip4 140.168.131.10 port 53 (len > 16) > [1262755006] libunbound[16857:0] debug: ip4 140.168.70.10 port 53 (len 16) > > [1262755006] libunbound[16857:0] debug: attempt to get extra 3 targets > > [1262755006] libunbound[16857:0] debug: out of query targets -- returning > SERVFAIL > > [1262755006] libunbound[16857:0] debug: store error response in message cache > > [1262755006] libunbound[16857:0] debug: return error response SERVFAIL > === > > > Output from unbound-control lookup: > > === > # unbound-control lookup my.commbank.com.au > The following name servers are used for lookup of my.commbank.com.au. > ;rrset 3429 2 0 2 0 > my.commbank.com.au. 3429 IN NS > nw2ca-pr-cclb01.my.commbank.com.au. > my.commbank.com.au. 3429 IN NS > bl1ca-pr-cclb01.my.commbank.com.au. > ;rrset 2959 1 0 1 0 > bl1ca-pr-cclb01.my.commbank.com.au. 2959 IN A 140.168.70.10 > ;rrset 2959 1 0 1 0 > nw2ca-pr-cclb01.my.commbank.com.au. 2959 IN A 140.168.131.10 > Delegation with 2 names, of which 2 can be examined to query further > addresses. > It provides 2 IP addresses. > 140.168.131.10 rtt 52 msec, 0 lost. noEDNS probed. > 140.168.70.10 rtt 120000 msec, 7 lost. noEDNS probed. > === > > RTT shows 120,000 msec. > > > > Output from dig against 140.168.70.10 showing that this server isn't > blocked by them: > > === > # dig any my.commbank.com.au. @140.168.70.10 > > ;; ANSWER SECTION: > my.commbank.com.au. 500 IN SOA > BL1CA-PR-CCLB01.my.commbank.com.au. > hostmaster.BL1CA-PR-CCLB01.my.commbank.com.au. 123 10800 3600 604800 60 > my.commbank.com.au. 500 IN NS > BL1CA-PR-CCLB01.my.commbank.com.au. > my.commbank.com.au. 500 IN NS > NW2CA-PR-CCLB01.my.commbank.com.au. > my.commbank.com.au. 20 IN A 140.168.131.20 > > ;; ADDITIONAL SECTION: > BL1CA-PR-CCLB01.my.commbank.com.au. 30 IN A 140.168.70.10 > NW2CA-PR-CCLB01.my.commbank.com.au. 30 IN A 140.168.131.10 > > ;; Query time: 17 msec > ;; SERVER: 140.168.70.10#53(140.168.70.10) > ;; WHEN: Wed Jan 6 16:22:55 2010 > ;; MSG SIZE rcvd: 191 > === > > > > > > _______________________________________________ > Unbound-users mailing list > [email protected] > http://unbound.nlnetlabs.nl/mailman/listinfo/unbound-users -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/ iEYEARECAAYFAktEPlMACgkQkDLqNwOhpPhJYQCgmxeVBDNJTXlgl/NWEQtVcgkd OeYAn1ZpPviTm7NpLbT2+Aer7Zdms8GC =tV8+ -----END PGP SIGNATURE----- _______________________________________________ Unbound-users mailing list [email protected] http://unbound.nlnetlabs.nl/mailman/listinfo/unbound-users
