op 21-10-13 08:02, Andreas Schulze schreef:
Hello,
The domain "casalvecchi.com.ar" is broken.
Hi Andreas, it certainly is broken!
On the delegation point there are referrals to ns.abr.com.ar and
ns1.abr.com.ar.
Only ns1.abr.com.ar. answers.
ns.abr.com.ar seems to give SERVFAIL for any query it should answer.
ns1.abr.com.ar returns one more name server when asked for its NS
records: ns0.abr.com.ar
And when querying ns0.abr.com.ar about casalvecchi.com.ar, things get
even more crazy! One more name server is returned:
paimun.abrnetwork.com.ar. which seems in sync with ns0.abr.com.ar (have
same SOA)
Now which name servers to believe?
ns.abr.com.ar. returns SERVFAIL always
ns1.abr.com.ar. SOA serial 2013100801 and has A record 200.58.120.123
(also for www.casalvecchi.com.ar)
ns0.abr.com.ar. and paimun.abrnetwork.com.ar. SOA serial 1216035805 has
no A record, except for www.casalvecchi.com.ar: 190.190.191.20
unbound-1.4.20 fail to resolve A+MX but 8.8.8.8 does it better.
I planned to add local-zone/local-data "voodoo" to my unbound.conf but
as I not really understand
the problem I fail to setup a workaround.
If you wish to mimic google behaviour, you could tell unbound to use
ns1.abr.com.ar.
local-zone: casalvecchi.com.ar. typetransparent
local-data: "casalvecchi.com.ar. 3600 IN NS ns1.abr.com.ar."
If you trust the other name servers more, define those in local-data.
But, maybe best would be to ask casalvecchi.com.ar to fix their name
server setup!
Cheers,
-- Willem
_______________________________________________
Unbound-users mailing list
[email protected]
http://unbound.nlnetlabs.nl/mailman/listinfo/unbound-users
