Reasons of SERVFAIL

[Ondřej Surý]

> How do I fix this issue?


You don’t, their DNSSEC is broken:

https://dnsviz.net/d/emeraldonion.org/dnssec/

They have to either start signing again or remove DS record from the parent (org).

Ondrej
--
Ondřej Surý
ondrej at isc.org

> On 8 Feb 2020, at 02:36, Alessandro Vesely <vesely at tana.it> wrote:
> 
> Hi!
> 
> 
> I find I'm unable to send mail to a domain.  I get an NDR saying DNS lookup failed.  Indeed, when I try manually, I get:
> 
> 906-north:src$ dig emeraldonion.org mx
> 
> ; <<>> DiG 9.10.3-P4-Debian <<>> emeraldonion.org mx
> ;; global options: +cmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 5098
> ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
> 
> ;; OPT PSEUDOSECTION:
> ; EDNS: version: 0, flags:; udp: 4096
> ;; QUESTION SECTION:
> ;emeraldonion.org.		IN	MX
> 
> ;; Query time: 289 msec
> ;; SERVER: 127.0.0.1#53(127.0.0.1)
> ;; WHEN: Sat Feb 08 11:29:41 CET 2020
> ;; MSG SIZE  rcvd: 45
> 
> 
> SERVFAIL doesn't tell me /which/ server failed.  I infer it's my one, because of the trace below.
> 
> How do I fix this issue?
> 
> TIA
> Ale
> 
> 908-north:src$ dig +trace emeraldonion.org mx
> 
> ; <<>> DiG 9.10.3-P4-Debian <<>> +trace emeraldonion.org mx
> ;; global options: +cmd
> .			493940	IN	NS	h.root-servers.net.
> .			493940	IN	NS	d.root-servers.net.
> .			493940	IN	NS	c.root-servers.net.
> .			493940	IN	NS	k.root-servers.net.
> .			493940	IN	NS	f.root-servers.net.
> .			493940	IN	NS	l.root-servers.net.
> .			493940	IN	NS	j.root-servers.net.
> .			493940	IN	NS	m.root-servers.net.
> .			493940	IN	NS	g.root-servers.net.
> .			493940	IN	NS	i.root-servers.net.
> .			493940	IN	NS	e.root-servers.net.
> .			493940	IN	NS	a.root-servers.net.
> .			493940	IN	NS	b.root-servers.net.
> .			516974	IN	RRSIG	NS 8 0 518400 20200221050000 20200208040000 33853 . 2aZlI+r3A/LaC2VEM7BSAupOBbXS/fSNZds49PjuhR38CmDEq6WddgXW XbxGAJaNBBUOXRYB1U093FqP725t29VoFpSuUfmD8YGwzcbu1gtvBbyW clLu3OK6X2m5V6AWvQuumcDA/qJRdnQ0/8EepqKL8f+vniQLCKxA5kR1 HkZAG36QBhj0poGet9no8kQkz5/wBkI88fyId6ZasSbSCrX+68QuNcV/ N0BwQNhuvY0JEMHEJVjDzTkoJghKySTylWE5R7wxc/p5HuBtBy5v+ITF zGbbC3ZoXlVdRF3//QzW4aqdcCCBG+0yXDlRQ5ZevZfWABLJV8ds5VEG aXCLpg==
> ;; Received 1097 bytes from 127.0.0.1#53(127.0.0.1) in 0 ms
> 
> org.			172800	IN	NS	a0.org.afilias-nst.info.
> org.			172800	IN	NS	a2.org.afilias-nst.info.
> org.			172800	IN	NS	b0.org.afilias-nst.org.
> org.			172800	IN	NS	b2.org.afilias-nst.org.
> org.			172800	IN	NS	c0.org.afilias-nst.info.
> org.			172800	IN	NS	d0.org.afilias-nst.org.
> org.			86400	IN	DS	9795 7 1 364DFAB3DAF254CAB477B5675B10766DDAA24982
> org.			86400	IN	DS	9795 7 2 3922B31B6F3A4EA92B19EB7B52120F031FD8E05FF0B03BAFCF9F891B FE7FF8E5
> org.			86400	IN	RRSIG	DS 8 1 86400 20200221050000 20200208040000 33853 . QcNTGf7LnnW7XgHNC4VFs9e2hsMw9ruiWZ2J1Ev2+aCRdyuk0ECpxMPd 8Gb4MYmAsbljnELkPNSCUdlLv7LeN0+mDoESBe9AKQ++l7DMSZXQ5jJh 9ThjNs12lxWAFLIcRDFb0HXnwVG5bvYFovrorG01TxGDyrPp56eVd2GT Udprf8kPkyatYVTvthFZrIU72wClEBjBGirOiiWEkPtzOKYSYv+gXKOn v4lpxcfbgdGdFZLlrv406FqP/1hsGpY5u2dO0ToAuUZ9hBrmJnAYut17 YXnplS5yD+ZMmXDaOCn6rmeUPkOXNjV7/Onwlo7dDZhFC6QVqt6HVHXJ 8egMVA==
> ;; Received 818 bytes from 192.203.230.10#53(e.root-servers.net) in 1 ms
> 
> emeraldonion.org.	86400	IN	NS	ns0.1984.is.
> emeraldonion.org.	86400	IN	NS	ns1.1984.is.
> emeraldonion.org.	86400	IN	NS	ns2.1984.is.
> emeraldonion.org.	86400	IN	NS	ns1.1984hosting.com.
> emeraldonion.org.	86400	IN	NS	ns2.1984hosting.com.
> emeraldonion.org.	86400	IN	DS	58282 8 2 C853155321349E86D675DBB87E839E689582FC193F447DE120242828 31A92EFE
> emeraldonion.org.	86400	IN	RRSIG	DS 7 2 86400 20200222152504 20200201142504 63887 org. HuTit6Jz4FEFoTRpRiWpUFN87YYeLqa5P/rnVnFmC7cm563fklPammF/ uUUYzAK4JhekTZmrSGG0P3SGrk85nS8A0tcngc8qGdfnmYaE6YRfT7E7 GsugewjF17oQ+9BwyeeoCorNqXNnBBw6gSSzyywkumTAAAjLCLfyeiLj olE=
> ;; Received 368 bytes from 199.249.120.1#53(b2.org.afilias-nst.org) in 16 ms
> 
> emeraldonion.org.	900	IN	MX	10 emeraldonion-org.mail.protection.outlook.com.
> emeraldonion.org.	86400	IN	NS	ns1.1984.is.
> emeraldonion.org.	86400	IN	NS	ns1.1984hosting.com.
> emeraldonion.org.	86400	IN	NS	ns2.1984hosting.com.
> emeraldonion.org.	86400	IN	NS	ns0.1984.is.
> emeraldonion.org.	86400	IN	NS	ns2.1984.is.
> ;; Received 604 bytes from 45.32.180.186#53(ns2.1984.is) in 19 ms
> 
> 
> -- 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> _______________________________________________
> Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list
> 
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users