Hi Brian. We're going to need some details please, like for starters: - What's the domain being queried? - A network diagram showing where your BIND server is and what it's forwarding to. - IP addresses of everything. - A packet capture (binary pcap format, not a snippet or a screenshot) from your BIND server showing both client->server and server->forwarder DNS traffic, crucially capturing the moment this issue occurs. - dig results from your making test queries.
It may sound like a lot of detail, but the devil... as they say. Cheers, Greg On Wed, 29 May 2024 at 21:48, Cuttler, Brian R (HEALTH) via bind-users < bind-users@lists.isc.org> wrote: > My bad - I'd mailed this mistakenly to an individual and not the list. > > --- > > I am currently running BIND 9.18.18-0ubuntu0.22.04.2-Ubuntu. > > I am sometimes seeing that I don't have resolution for some FQDN in > forwarder zones. > > Usually it works, sometimes I don't get resolution. Interesting I failed > resolution for an FQDN yesterday and while relieved to see that I failed to > get resolution on the authoritative server I later was able to resolve on > the authoritative server but still failed on the local forwarding server. > > Wondering what is going on there. > > Conjecture - caching the failed response for some period of time? > If so, disable caching for the problematic forwarder zone? > > Some other issue? If so what might it be, how can I test for it and how do > I resolve/work-around it? > > Thanks in advance, > Brian > > > Brian R Cuttler > System and Network Administrator > Wadsworth Center, New York State Department of Health > Empire State Plaza > Corning Tower, Sublevel D-280, Albany NY 12237 > 518 486-1697 (O) > 518 redacted (C) > brian.cutt...@health.ny.gov > https://www.wadsworth.org > > > -- > Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe > from this list > > ISC funds the development of this software with paid support > subscriptions. Contact us at https://www.isc.org/contact/ for more > information. > > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users >
-- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
