A. Schulze via Unbound-users:

- just upgraded and no visible problems so far

Hello,

there is a change in unbound-1.5.9 which make some IPv6 addresses un-resolvable.

$host 2001:a60:f0b4:e503:2cdb:beff:feaa:880b
unbound <= 1.5.8: success
unbound = 1.5.9:  SERVFAIL

One reason may be a missconfiguration found via
http://dnsviz.net/d/4.b.0.f.0.6.a.0.1.0.0.2.ip6.arpa/dnssec/
the non-existence of 0.6.a.0.1.0.0.2.ip6.arpa is prooved by DNSSEC at a.0.1.0.0.2.ip6.arpa

OK, I tried to workaround that by adding
  server:
    domain-insecure: "4.b.0.f.0.6.a.0.1.0.0.2.ip6.arpa."
to unbound.conf.

But that does not help. Even it I add "domain-insecure: ip6.arpa" I still get SERVFAIL.
Any advise?

Thanks
Andreas

Reply via email to