On Mon, 2021-03-08 at 10:34 -0500, Steve Litt wrote:
> Hi all,
> 
> When I added four opennic root servers to my unbound's root.hints, I
> couldn't resolve grep.geek on my unbound server at 192.168.0.102,
> even
> though I could resolve it from the opennic root servers.
> 
> Then I commented out all the icann root servers, restarted, and now I
> can resolve grep.geek as well as a bunch of .com and .org domains.
> 
> I'd really like to have both icann and opennic root servers in my
> root.hints. Does anybody know a way to do that without the opennic
> root
> servers being sabotaged?


Is Unbound set to round-robin through your listed root servers? I
wouldn't think it would query more than one of your root servers for
one request. Maybe when you didn't get .geek that was because it hit a
non-opennic server that time.

Gabe

_______________________________________________
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Reply via email to