-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Hello,
I have a weird issue. I have at least one domain that bind9 can't resolved (phdcomics.com, so a very important one ^^), with status SERVFAIL. Bind server IP is 192.168.1.8, client is 192.168.1.7 Example #1 *client* % dig phdcomics.com ; <<>> DiG 9.10.3-P4-Ubuntu <<>> phdcomics.com ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 25805 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ;; QUESTION SECTION: ;phdcomics.com. IN A ;; Query time: 1 msec ;; SERVER: 192.168.1.8#53(192.168.1.8) ;; WHEN: Fri Jan 13 09:47:25 CET 2017 ;; MSG SIZE rcvd: 42 *server* # tail -f query.log | grep 192.168.1.7# client 192.168.1.7#49507 (phdcomics.com): query: phdcomics.com IN A +E (192.168.1.8) client 192.168.1.7#49507 (phdcomics.com): query: phdcomics.com IN A +E (192.168.1.8) client 192.168.1.7#49507 (phdcomics.com): query: phdcomics.com IN A +E (192.168.1.8) Example #2 *client* % host phdcomics.com ;; connection timed out; no servers could be reached *server* # tail -f query.log | grep 192.168.1.7# client 192.168.1.7#60279 (phdcomics.com): query: phdcomics.com IN A + (192.168.1.8) client 192.168.1.7#60279 (phdcomics.com): query: phdcomics.com IN A + (192.168.1.8) Other domains are working : % dig google.fr ; <<>> DiG 9.10.3-P4-Ubuntu <<>> google.fr ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 45620 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 5 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ;; QUESTION SECTION: ;google.fr. IN A ;; ANSWER SECTION: google.fr. 300 IN A 216.58.205.131 ;; AUTHORITY SECTION: google.fr. 170942 IN NS ns1.google.com. google.fr. 170942 IN NS ns3.google.com. google.fr. 170942 IN NS ns4.google.com. google.fr. 170942 IN NS ns2.google.com. ;; ADDITIONAL SECTION: ns1.google.com. 344963 IN A 216.239.32.10 ns2.google.com. 344963 IN A 216.239.34.10 ns3.google.com. 344963 IN A 216.239.36.10 ns4.google.com. 344963 IN A 216.239.38.10 ;; Query time: 30 msec ;; SERVER: 192.168.1.8#53(192.168.1.8) ;; WHEN: Fri Jan 13 09:52:42 CET 2017 ;; MSG SIZE rcvd: 200 And I can resolve this domain using another DNS % dig phdcomics.com @8.8.8.8 ; <<>> DiG 9.10.3-P4-Ubuntu <<>> phdcomics.com @8.8.8.8 ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 61926 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 512 ;; QUESTION SECTION: ;phdcomics.com. IN A ;; ANSWER SECTION: phdcomics.com. 50 IN A 64.29.145.9 ;; Query time: 41 msec ;; SERVER: 8.8.8.8#53(8.8.8.8) ;; WHEN: Fri Jan 13 09:53:49 CET 2017 ;; MSG SIZE rcvd: 58 Regards, Clément -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBCAAGBQJYeJZuAAoJEIACgnANMTD1pGsP/iM+ixlWeISaytIqBYZgfJHE der2vS+X9m/pL2vP2qvMGIdu2Q+npWMYFZ1SL78AHLHkklxOUXRjQTlg1dorahH1 g8guzsnec9tOk4ShF0sNz9RvHT/m8Mhdnoq5FlAriKKAHeLB2bsGDaLXn+bDsVCF 2xHjoAxkTvI9j2pg/GnccMYuJZhrZTjd36n3ygs4nyvqk2MDwA3Lpf2mjtYK1mG7 lf9rnIwYe4mEdmYoG8luI393ieaUU85zAmb34pJ/8JcsK6er6ceYVkC1m8DLHD3d OVm+SvMhKfmYmHmQ78r867by71RWyPHu7MraBTsXQFjjGJZTFycP11vVQ8aIyXgn CIERWz8/7Rf91/LwxpvWPXmSsSEuhXI4DTJ0o7lF0YLawzJPQR9e9Y+fl7KfWy9p 6tuxc/pIwin1+DBTj4Y1mg9GIc9n+oHdhu8ZcopxVn/JDNNS3YUpKvhUJcaPpvzv hVURHP7r1t7hymW+Nu707ahdSwAObzW2v0r8avWLHumhHm44Gegw6o1dVNtM2uK/ 275dKlSyGyK3m0BwNyALwAsbemkjtDITda4zwT82pw5ioQ06rqGLCmKligc1VUup 98yAh5rgZ0ylWuwIIdqGC1Pfs0inSsk7PJIY9OIqRf81yJmgWIwTyTDsVn39VCT1 jJukyL69WaOLNBUNdtJq =n0/P -----END PGP SIGNATURE----- _______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
