I have been having trouble resolving "www.balfour.com" It appears that ns1.worldnic.com and ns2.worldnic.com (the NS for www.balfour.com") is returning a CNAME response (pointing off to an amazon'd name) with the SERVFAIL bit set in the header. It also (according to dig) sometimes spits back a truncated response requiring a TCP retry.
This combination of things makes unbound a bit upset. I've seen discussions of this here: http://mailman.powerdns.com/pipermail/pdns-dev/2010-October/000886.html (My guess is that worldnic.com is running PowerDNS) In practice, sometimes unbound returns the A record, sometimes not! It appears other recursive servers are much more permissive here. --- Is there a way to make Unbound "happier" about this name and semi-broken setup? -Rob _______________________________________________ Unbound-users mailing list [email protected] http://unbound.nlnetlabs.nl/mailman/listinfo/unbound-users
