logging query errors and timeouts

[Alex]

Hi,
I have a bind-9.18.8 server on fedora36 and seeing quite a few timeouts to
many of the same domains. I'm working with one of the domain owners to
identify potential issues with their nameservers, but would also like some
guidance as to whether what I'm seeing is normal. Here are a few examples.

25-Nov-2022 09:04:14.172 query-errors: client @0x7fd199883968
127.0.0.1#46712 (41.218.85.209.b.barracudacentral.org): query failed (timed
out) for 41.218.85.209.b.barracudacentral.org/IN/A at
../../../lib/ns/query.c:7729
25-Nov-2022 08:37:29.989 query-errors: client @0x7fd19d37fd68
127.0.0.1#32704 (9.215.72.149.truncate.gbudb.net): query failed (timed out)
for 9.215.72.149.truncate.gbudb.net/IN/A at ../../../lib/ns/query.c:7729
24-Nov-2022 16:12:37.151 query-errors: client @0x7fd19f7a4f68
127.0.0.1#47466 (17.31.10.37.cidr.bl.mcafee.com): query failed (timed out)
for 17.31.10.37.cidr.bl.mcafee.com/IN/A at ../../../lib/ns/query.c:7729
25-Nov-2022 09:04:13.789 query-errors: client @0x7fd19d3f6f68
127.0.0.1#32704 (o1678999x112.outbound-mail.sendgrid.net.sa.fmb.la): query
failed (timed out) for
o1678999x112.outbound-mail.sendgrid.net.sa.fmb.la/IN/A at
../../../lib/ns/query.c:7729

This is a mail server and the above queries are likely related to RBLs of
some kind. Specifically, the fmb.la and barracuda entries are part of an
RBL I'm using in postfix. The vast majority of queries on this server are
successful. These are just an occasional few that timeout, but it's
concerning enough that I'd like to determine the cause.

Is it possible to log the name server that was used when the timeout
occurred, that the domain owner could then use to correlate these entries
with a specific nameserver for their domain?

Thanks,
Alex
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20221125/6859f8f3/attachment.htm>