A couple of regression problems between 9.11.7 and 9.14.2
Daniel Stirnimann
daniel.stirnimann at switch.ch
Wed Jun 5 12:55:13 UTC 2019
On 05.06.19 14:35, Borja Marcos wrote:> Problem 1:
> I had a problem resolving the rigol.com domain. Looking at packet
> captures and comparing I saw that the authoritative servers for
> rigol.com were ignoring packets with a cookie option.
>
> On 9.14 the operation got stuck when sending a query to
> 140.205.81.61, 140.205.81.62, 140.205.228.61 and 140.205.228.62.
I can resolve the domain name with 9.14.2. None of these IP addresses
seems to be authoritative. Not sure where your server learned them from.
> Problem 2:
>
> I also noticed that 9.14.2 is not resolving login.repsol.com A
> (returning SERVFAIL) while 9.11.7 does.
>
> Seems to be a misconfiguration problem in some of the authoritative
> servers, yet 9.11 works and 9.14 SERVFAILs.
login.repsol.com -> cwebarr.repsol.energy -> cwebarr.gtm.repsol.energy.
cwebarr.gtm.repsol.energy. breaks on DNS query minimization which is
enabled by default in 9.14. e.g.
dig @212.170.244.228 gtm.repsol.energy NS
this hits a lame delegation and bind stops.
Daniel
More information about the bind-users
mailing list