Public bug reported:
Hi,
On a client server, I can't get a response from a name server in ipv6+udp. On
the same server, it works fine in tcp.
If I log on my name server, I can get a response from himself but, as a client,
it can't get a response from another name server.
here are the steps to reproduce :
- Create a new server using Ubuntu server 16.04. Set it to use ipv4 and use
your preferred name server. Select absolutely nothing as functionality.
- check some nslookup and apt-get stuff to verify network is OK
- add ipv6 to the interface and refer to an IPV6 nameserver. I have 3 and thats
why I noticed the problem >> All 3 ipv6 nameservers are filling the 3 places in
resolv.conf.
- if you don't have 3 ipv6 nameservers, just add one and comment the line with
the ipv4 name server.
- verify your resolv.conf. Should only content ipv6 reference.
- Now, you can't nslookup anymore...
- add some tests : "dig @ipv4server google.com" works but "dig @ipv6server
google.com" don't
Here a more tests :
Nameserver1 : Nameserver1.MyDomain : XXX.YYY.ZZZ.250 / xxxx:yyyy:zzzz::250
Client StandAloneServer.MyDomain : XXX.YYY.ZZZ.209 /
xxxx:yyyy:zzzz::209
With IPV4
# dig @XXX.YYY.ZZZ.226 www.google.fr
/var/log/named/queries.log on Nameserver1:
20-May-2016 12:25:02.834 queries: info: client XXX.YYY.ZZZ.209#35116
(www.google.fr): query: www.google.fr IN A +E (XXX.YYY.ZZZ.226)
Tcp Dump on Nameserver1:
12:25:02.834092 IP StandAloneServer.MyDomain.35116 >
Nameserver1.MyDomain.domain: 62949+ [1au] A? www.google.fr. (42)
12:25:02.834395 IP Nameserver1.MyDomain.domain >
StandAloneServer.MyDomain.35116: 62949 1/4/5 A 216.58.210.195 (204)
Tcp Dump on Client
12:25:02.668200 IP StandAloneServer.MyDomain.35116 >
Nameserver1.MyDomain.domain: 62949+ [1au] A? www.google.fr. (42)
12:25:02.669573 IP Nameserver1.MyDomain.domain >
StandAloneServer.MyDomain.35116: 62949 1/4/5 A 216.58.210.195 (204)
RESULT:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> @XXX.YYY.ZZZ.226 www.google.fr
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 49591
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 5
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;www.google.fr. IN A
;; ANSWER SECTION:
www.google.fr. 300 IN A 216.58.210.195
;; AUTHORITY SECTION:
google.fr. 171625 IN NS ns1.google.com.
[TRUNCATED]
WITH IPV6
# dig @xxxx:yyyy:zzzz::226 www.google.fr
NOTE : I only asked once, it created 3 queries with 5 secs d’intervalle
environ
/var/log/named/queries.log on Nameserver1:
20-May-2016 12:32:34.902 queries: info: client xxxx:yyyy:zzzz::209#35362
(www.google.fr): query: www.google.fr IN A +E (xxxx:yyyy:zzzz::226)
20-May-2016 12:32:39.902 queries: info: client xxxx:yyyy:zzzz::209#35362
(www.google.fr): query: www.google.fr IN A +E (xxxx:yyyy:zzzz::226)
20-May-2016 12:32:44.902 queries: info: client xxxx:yyyy:zzzz::209#35362
(www.google.fr): query: www.google.fr IN A +E (xxxx:yyyy:zzzz::226)
Tcp Dump on Nameserver1:
12:32:34.902598 IP6 StandAloneServer.MyDomain.35362 >
Nameserver1.MyDomain.domain: 23393+ [1au] A? www.google.fr. (42)
12:32:34.902994 IP6 Nameserver1.MyDomain.domain >
StandAloneServer.MyDomain.35362: 23393 1/4/5 A 216.58.210.195 (204)
…
12:32:39.902644 IP6 StandAloneServer.MyDomain.35362 >
Nameserver1.MyDomain.domain: 23393+ [1au] A? www.google.fr. (42)
12:32:39.902975 IP6 Nameserver1.MyDomain.domain >
StandAloneServer.MyDomain.35362: 23393 1/4/5 A 216.58.210.195 (204)
…
12:32:39.902644 IP6 StandAloneServer.MyDomain.35362 >
Nameserver1.MyDomain.domain: 23393+ [1au] A? www.google.fr. (42)
12:32:39.902975 IP6 Nameserver1.MyDomain.domain >
StandAloneServer.MyDomain.35362: 23393 1/4/5 A 216.58.210.195 (204)
Tcp Dump on Client12:32:34.725312 IP6 StandAloneServer.MyDomain.35362 >
Nameserver1.MyDomain.domain: 23393+ [1au] A? www.google.fr. (42)
12:32:34.726036 IP6 Nameserver1.MyDomain.domain >
StandAloneServer.MyDomain.35362: 23393 1/4/5 A 216.58.210.195 (204)
…
12:32:39.725199 IP6 StandAloneServer.MyDomain.35362 >
Nameserver1.MyDomain.domain: 23393+ [1au] A? www.google.fr. (42)
12:32:39.726045 IP6 Nameserver1.MyDomain.domain >
StandAloneServer.MyDomain.35362: 23393 1/4/5 A 216.58.210.195 (204)
…
12:32:44.725288 IP6 StandAloneServer.MyDomain.35362 >
Nameserver1.MyDomain.domain: 23393+ [1au] A? www.google.fr. (42)
12:32:44.725944 IP6 Nameserver1.MyDomain.domain >
StandAloneServer.MyDomain.35362: 23393 1/4/5 A 216.58.210.195 (204)
RESULT
; <<>> DiG 9.10.3-P4-Ubuntu <<>> @xxxx:yyyy:zzzz::226 www.google.fr
; (1 server found)
;; global options: +cmd
;; connection timed out; no servers could be reached
but, if I do the same query with the tcp flag, all is OK :
# dig +tcp @xxxx:yyyy:zzzz::226 www.google.fr
; <<>> DiG 9.10.3-P4-Ubuntu <<>> +tcp xxxx:yyyy:zzzz::226 www.google.fr
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 41105
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 5
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;www.google.fr. IN A
;; ANSWER SECTION:
www.google.fr. 300 IN A 216.58.210.195
** Affects: bind9 (Ubuntu)
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1584042
Title:
IPV6 resolving fails via udp (not tcp) from other server
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/bind9/+bug/1584042/+subscriptions
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
