Re: occasional SERVFAIL error
This is usually a symptom of child NS being broken. It works with empty cache because of the NS records in parent work, but then child NS take over and boom! -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 29. 2. 2024, at 15:20, Ludovit Koren wrote: > > I can get rid of it only after issuing: > > rndc flush -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: occasional SERVFAIL error
On 29.02.24 15:20, Ludovit Koren wrote: occasionally I get the following SERVFAIL error: dig www.jiscd.sk ; <<>> DiG 9.18.24 <<>> www.jiscd.sk ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 12207 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ; COOKIE: 35fe56eb9b5f3f22010065df34b4c313eedf839eac9d (good) ;; QUESTION SECTION: ;www.jiscd.sk. IN A ;; Query time: 17 msec ;; SERVER: 127.0.0.1#53(127.0.0.1) (UDP) ;; WHEN: Wed Feb 28 14:27:16 CET 2024 ;; MSG SIZE rcvd: 69 I can get rid of it only after issuing: rndc flush Afterwards it works for uncertain time. Could it be I have a configuration problem of my server (I have prefetch 0 set in options section of my server)? Is it a problem of the authorized domain server? I have looked onto it manually, so far found nothing. rndc dumpdb could generate named output where you should be able to find out the culprit. the difference between current version of zone between ns1.gov.sk and ns2.gov.sk could affectg this problem. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. 2B|!2B, that's a question! -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: occasional SERVFAIL error
> Peter Davies writes: > Hi Ludovit, > It looks like you have two version of the jiscd.sk zone. > host -C jiscd.sk > Nameserver 2001:67c:1bd4:8080::20: > jiscd.sk has SOA record ns1.gov.sk. gov.sk. 2024022501 7200 3600 > 604800 86400 > Nameserver 195.49.191.160: > jiscd.sk has SOA record ns1.gov.sk. gov.sk. 2024022501 7200 3600 > 604800 86400 > Nameserver 2001:67c:1bd4:8080::10: > jiscd.sk has SOA record ns1.gov.sk. gov.sk. 2024022800 7200 3600 > 604800 86400 > Nameserver 195.49.191.162: > jiscd.sk has SOA record ns1.gov.sk. gov.sk. 2024022800 7200 3600 > 604800 86400 Hello Peter, I just reported one domain. Here is the listing of all 3 I am aware of: [root@graham /usr/home/koren]# host -C jiscd.sk Nameserver 195.49.191.162: jiscd.sk has SOA record ns1.gov.sk. gov.sk. 2024030100 7200 3600 604800 86400 Nameserver 195.49.191.160: jiscd.sk has SOA record ns1.gov.sk. gov.sk. 2024022501 7200 3600 604800 86400 [root@graham /usr/home/koren]# host -C jishmsr.sk Nameserver 195.49.191.162: jishmsr.sk has SOA record ns1.gov.sk. gov.sk. 2024022800 7200 3600 604800 86400 Nameserver 195.49.191.160: jishmsr.sk has SOA record ns1.gov.sk. gov.sk. 2024022600 7200 3600 604800 86400 [root@graham /usr/home/koren]# host -C isepvo.sk Nameserver 195.49.191.160: isepvo.sk has SOA record ns1.gov.sk. gov.sk. 2024022600 7200 3600 604800 86400 Nameserver 195.49.191.162: isepvo.sk has SOA record ns1.gov.sk. gov.sk. 2024022600 7200 3600 604800 86400 [root@graham /usr/home/koren]# The other 2 seem to have the same version and it still happens to them. Yes, it is on the same 2 authoritative NS. Regards, lk -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: occasional SERVFAIL error
Hi Ludovit, It looks like you have two version of the jiscd.sk zone. host -C jiscd.sk Nameserver 2001:67c:1bd4:8080::20: jiscd.sk has SOA record ns1.gov.sk. gov.sk. 2024022501 7200 3600 604800 86400 Nameserver 195.49.191.160: jiscd.sk has SOA record ns1.gov.sk. gov.sk. 2024022501 7200 3600 604800 86400 Nameserver 2001:67c:1bd4:8080::10: jiscd.sk has SOA record ns1.gov.sk. gov.sk. 2024022800 7200 3600 604800 86400 Nameserver 195.49.191.162: jiscd.sk has SOA record ns1.gov.sk. gov.sk. 2024022800 7200 3600 604800 86400 Kind Regards Peter On 29/02/2024 15.20, Ludovit Koren wrote: Hi, occasionally I get the following SERVFAIL error: dig www.jiscd.sk ; <<>> DiG 9.18.24 <<>> www.jiscd.sk ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 12207 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ; COOKIE: 35fe56eb9b5f3f22010065df34b4c313eedf839eac9d (good) ;; QUESTION SECTION: ;www.jiscd.sk. IN A ;; Query time: 17 msec ;; SERVER: 127.0.0.1#53(127.0.0.1) (UDP) ;; WHEN: Wed Feb 28 14:27:16 CET 2024 ;; MSG SIZE rcvd: 69 I can get rid of it only after issuing: rndc flush Afterwards it works for uncertain time. Could it be I have a configuration problem of my server (I have prefetch 0 set in options section of my server)? Is it a problem of the authorized domain server? Thank you very much. Regards, lk -- Peter Davies -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
occasional SERVFAIL error
Hi, occasionally I get the following SERVFAIL error: dig www.jiscd.sk ; <<>> DiG 9.18.24 <<>> www.jiscd.sk ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 12207 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ; COOKIE: 35fe56eb9b5f3f22010065df34b4c313eedf839eac9d (good) ;; QUESTION SECTION: ;www.jiscd.sk. IN A ;; Query time: 17 msec ;; SERVER: 127.0.0.1#53(127.0.0.1) (UDP) ;; WHEN: Wed Feb 28 14:27:16 CET 2024 ;; MSG SIZE rcvd: 69 I can get rid of it only after issuing: rndc flush Afterwards it works for uncertain time. Could it be I have a configuration problem of my server (I have prefetch 0 set in options section of my server)? Is it a problem of the authorized domain server? Thank you very much. Regards, lk -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
