On 30.04.21 17:50, Sainik Biswas via bind-users wrote:
I need some help setting up a recursive nameserver for my internal network using BIND 9. The recursive name server is not resolving any domains.
Error Log [resolver.log] 2021-04-30T11:58:17.784Z notice: DNS format error from 198.41.0.4#53 resolving ./NS for <unknown>: non-improving referral 2021-04-30T11:58:17.788Z notice: DNS format error from 193.0.14.129#53 resolving ./NS for <unknown>: non-improving referral 2021-04-30T11:58:17.792Z notice: DNS format error from 192.36.148.17#53 resolving ./NS for <unknown>: non-improving referral 2021-04-30T11:58:17.796Z notice: DNS format error from 192.33.4.12#53 resolving ./NS for <unknown>: non-improving referral 2021-04-30T11:58:17.800Z notice: DNS format error from 192.58.128.30#53 resolving ./NS for <unknown>: non-improving referral 2021-04-30T11:58:17.804Z notice: DNS format error from 202.12.27.33#53 resolving ./NS for <unknown>: non-improving referral 2021-04-30T11:58:17.808Z notice: DNS format error from 198.97.190.53#53 resolving ./NS for <unknown>: non-improving referral 2021-04-30T11:58:17.808Z notice: DNS format error from 199.7.91.13#53 resolving ./NS for <unknown>: non-improving referral 2021-04-30T11:58:17.816Z notice: DNS format error from 199.9.14.201#53 resolving ./NS for <unknown>: non-improving referral 2021-04-30T11:58:17.816Z info: resolver priming query complete My ISP most probably uses some kind of transparent DNS proxy. I have come to that conclusion based on running the test at dnsleaktest.com. It does not matter which DNS I set in my laptop or desktop, the DNS IP always shows up as the ISP's DNS [203.171.240.10, 203.171.240.11]. The only way I could bypass this was by using DNSCrypt Proxy. Is it possible that my ISP is preventing the root nameservers from resolving correctly which is preventing my caching nameserver from working correctly?
It's most probably the reason. Ask your ISP.
Or maybe I have incorrectly configured something? Can anyone help me figure out what exactly is the problem?
your ISP probably -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. M$ Win's are shit, do not use it ! _______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
