unbound is having issues with a particular domain and powerdns_recursor and bind both work fine.

Trying to lookup "bluebirdrvpark.ca".

The authoritative hosts are "ns1.editnew.net" and "ns2.editnew.net".

Unbound does not seem to like the answers it is getting from either of these name servers.
I'm not in control or contact with them.

I've tried unbound 1.4.21 on CentOS 6.5 and
unbound 1.4.22 on Ubuntu 14.04

dig @127.0.0.1 ns2.editnew.net

Jun 10 08:44:41 media2 unbound: [9321:0] info: start of service (unbound 1.4.22).
Jun 10 08:44:41 media2 unbound: [9321:1] info: 127.0.0.1 local. SOA IN
Jun 10 08:44:41 media2 unbound: [9321:1] info: resolving local. SOA IN
Jun 10 08:44:41 media2 unbound: [9321:1] info: priming . IN NS
Jun 10 08:44:42 media2 unbound: [9321:1] info: response for . NS IN
Jun 10 08:44:42 media2 unbound: [9321:1] info: reply from <.> 192.5.5.241#53
Jun 10 08:44:42 media2 unbound: [9321:1] info: query response was ANSWER
Jun 10 08:44:42 media2 unbound: [9321:1] info: priming successful for . NS IN
Jun 10 08:44:42 media2 unbound: [9321:1] info: response for local. SOA IN
Jun 10 08:44:42 media2 unbound: [9321:1] info: reply from <.> 193.0.14.129#53 Jun 10 08:44:42 media2 unbound: [9321:1] info: query response was NXDOMAIN ANSWER

Jun 10 08:44:52 media2 unbound: [9321:0] info: 127.0.0.1 ns2.editnew.net. A IN Jun 10 08:44:52 media2 unbound: [9321:0] info: resolving ns2.editnew.net. A IN Jun 10 08:44:52 media2 unbound: [9321:0] info: response for ns2.editnew.net. A IN Jun 10 08:44:52 media2 unbound: [9321:0] info: reply from <.> 192.5.5.241#53
Jun 10 08:44:52 media2 unbound: [9321:0] info: query response was REFERRAL
Jun 10 08:44:52 media2 unbound: [9321:0] info: resolving net. DNSKEY IN
Jun 10 08:44:52 media2 unbound: [9321:0] info: response for net. DNSKEY IN
Jun 10 08:44:52 media2 unbound: [9321:0] info: reply from <net.> 192.35.51.30#53
Jun 10 08:44:52 media2 unbound: [9321:0] info: query response was ANSWER
Jun 10 08:44:52 media2 unbound: [9321:0] info: response for ns2.editnew.net. A IN Jun 10 08:44:52 media2 unbound: [9321:0] info: reply from <net.> 192.54.112.30#53
Jun 10 08:44:52 media2 unbound: [9321:0] info: query response was REFERRAL
Jun 10 08:44:52 media2 unbound: [9321:0] info: resolving ns2.editnew.net. A IN Jun 10 08:44:52 media2 unbound: [9321:0] info: resolving ns1.editnew.net. A IN Jun 10 08:44:52 media2 unbound: [9321:0] info: response for ns2.editnew.net. A IN Jun 10 08:44:52 media2 unbound: [9321:0] info: reply from <net.> 192.43.172.30#53
Jun 10 08:44:52 media2 unbound: [9321:0] info: query response was REFERRAL
Jun 10 08:44:52 media2 unbound: [9321:0] info: response for ns1.editnew.net. A IN Jun 10 08:44:52 media2 unbound: [9321:0] info: reply from <net.> 192.42.93.30#53
Jun 10 08:44:52 media2 unbound: [9321:0] info: query response was REFERRAL
Jun 10 08:44:52 media2 unbound: [9321:0] info: resolving ns1.editnew.net. A IN Jun 10 08:44:53 media2 unbound: [9321:0] info: response for ns1.editnew.net. A IN Jun 10 08:44:53 media2 unbound: [9321:0] info: reply from <net.> 192.31.80.30#53
Jun 10 08:44:53 media2 unbound: [9321:0] info: query response was REFERRAL
Jun 10 08:44:53 media2 unbound: [9321:0] info: resolving ns2.editnew.net. A IN Jun 10 08:44:53 media2 unbound: [9321:0] info: response for ns2.editnew.net. A IN Jun 10 08:44:53 media2 unbound: [9321:0] info: reply from <net.> 192.33.14.30#53
Jun 10 08:44:53 media2 unbound: [9321:0] info: query response was REFERRAL

cat /etc/unbound/unbound.conf

server:
    verbosity: 2
    statistics-interval: 86400
    statistics-cumulative: yes
    extended-statistics: yes
    num-threads: 2
    interface: 0.0.0.0
    interface: ::0
    interface-automatic: yes
    port: 53
    outgoing-range: 4096
    outgoing-port-permit: 32768-65535
    outgoing-port-avoid: 0-32767
    outgoing-num-tcp: 10
    incoming-num-tcp: 10
    so-rcvbuf: 8m
    max-udp-size: 3072
    msg-cache-size: 64m
    msg-cache-slabs: 4
    rrset-cache-size: 128m
    rrset-cache-slabs: 4
    infra-cache-slabs: 4
    do-ip4: yes
    do-ip6: no
    do-udp: yes
    do-tcp: yes
    do-daemonize: yes
    access-control: 0.0.0.0/0 deny
    access-control:    127.0.0.0/8 allow
    access-control: 10.0.0.0/8 allow
    access-control: 192.168.0.0/16 allow
    access-control:    172.16.0.0/12 allow
    chroot: ""
    username: "unbound"
    directory: "/etc/unbound"
    use-syslog: yes
    log-time-ascii: yes
    log-queries: yes
    pidfile: "/var/run/unbound.pid"
    root-hints: "root.hints"
    hide-identity: yes
    hide-version: yes
    harden-glue: no
    harden-dnssec-stripped: no
    harden-below-nxdomain: no
    harden-referral-path: no
    use-caps-for-id: no
    private-address: 10.0.0.0/8
    private-address: 172.16.0.0/12
    private-address: 192.168.0.0/16
    private-address: fd00::/8
    private-address: fe80::/10
    unwanted-reply-threshold: 10000000
    do-not-query-address: 127.0.0.1/8
    do-not-query-address: ::1
    do-not-query-localhost: yes
    prefetch: yes
    prefetch-key: yes
    rrset-roundrobin: yes
    minimal-responses: yes
    # dlv-anchor-file: "/etc/unbound/dlv.isc.org.key"
    # trusted-keys-file: /etc/unbound/keys.d/*.key
    # auto-trust-anchor-file: "/var/lib/unbound/root.anchor"
    val-clean-additional: yes
    val-permissive-mode: yes
    val-log-level: 2
    key-cache-slabs: 4

remote-control:
    control-enable: yes
    control-interface: 127.0.0.1
    control-port: 953
    server-key-file: "/etc/unbound/unbound_server.key"
    server-cert-file: "/etc/unbound/unbound_server.pem"
    control-key-file: "/etc/unbound/unbound_control.key"
    control-cert-file: "/etc/unbound/unbound_control.pem"

_______________________________________________
Unbound-users mailing list
[email protected]
http://unbound.nlnetlabs.nl/mailman/listinfo/unbound-users

Reply via email to