A couple of regression problems between 9.11.7 and 9.14.2

[Daniel Stirnimann]

On 05.06.19 14:35, Borja Marcos wrote:> Problem 1:
> I had a problem resolving the rigol.com domain. Looking at packet 
> captures and comparing I saw that the authoritative servers for 
> rigol.com were ignoring packets with a cookie option.
> 
> On 9.14 the operation got stuck when sending a query to 
> 140.205.81.61, 140.205.81.62, 140.205.228.61 and 140.205.228.62.
I can resolve the domain name with 9.14.2. None of these IP addresses
seems to be authoritative. Not sure where your server learned them from.


> Problem 2:
>
> I also noticed that 9.14.2 is not resolving login.repsol.com A
> (returning SERVFAIL) while 9.11.7 does.
>
> Seems to be a misconfiguration problem in some of the authoritative
> servers, yet 9.11 works and 9.14 SERVFAILs.

login.repsol.com -> cwebarr.repsol.energy -> cwebarr.gtm.repsol.energy.

cwebarr.gtm.repsol.energy. breaks on DNS query minimization which is
enabled by default in 9.14. e.g.

dig @212.170.244.228 gtm.repsol.energy NS

this hits a lame delegation and bind stops.


Daniel