The original zone has NS records in two domains: t-ipnet.de. 82632 IN NS dns20.dns.t-ipnet.de. t-ipnet.de. 82632 IN NS dns02.dns.t-ipnet.de. t-ipnet.de. 82632 IN NS dns00.dns.t-ipnet.de. t-ipnet.de. 82632 IN NS pns.dtag.de. t-ipnet.de. 82632 IN NS dns50.dns.t-ipnet.de.
And dtag.de has: dtag.de. 61568 IN NS pns.dtag.de. dtag.de. 61568 IN NS ns1.telekom.net. And telekom.net. has: telekom.net. 3600 IN NS dns2.telekom.de. telekom.net. 3600 IN NS pns.dtag.de. telekom.net. 3600 IN NS dns1.telekom.de. telekom.net. 3600 IN NS ns1.telekom.net. And telekom.de. has: telekom.de. 3600 IN NS ns1.telekom.net. telekom.de. 3600 IN NS dns1.telekom.de. telekom.de. 3600 IN NS dns2.telekom.de. telekom.de. 3600 IN NS pns.dtag.de. This is the type of NS record 'tree' that I also had, that caused me problems. -- Bob Harold On Fri, Sep 6, 2024 at 3:27 PM Ondřej Surý <ond...@isc.org> wrote: > Ok, so according to zonemaster: > https://zonemaster.net/en/result/7fc39ff8fc1766ac all the nameservers are > in the same zone. I am guessing that any intermittent failure can cause a > lot of outgoing queries. > > Anyway - since you are hitting the 32 limit, perhaps bumping the limit to > 100 (the value before) would help in your case? I am guessing the resolver > is being used for a limited set of clients and the chance of this specific > abuse is quite low. > > https://bind9.readthedocs.io/en/v9.18.29/notes.html#notes-for-bind-9-18-29 > > Ondrej > -- > Ondřej Surý — ISC (He/Him) > > My working hours and your working hours may be different. Please do not > feel obligated to reply outside your normal working hours. > > On 6. 9. 2024, at 21:13, Ondřej Surý <ond...@isc.org> wrote: > > Now the question remains - why? I don’t really see a reason for this > behavior from where I tested it, so what is the traffic between your > recursor and the Internet during the time this happens? > > Ondřej > -- > Ondřej Surý — ISC (He/Him) > > My working hours and your working hours may be different. Please do not > feel obligated to reply outside your normal working hours. > > On 6. 9. 2024, at 20:54, Peter <p...@citylink.dinoex.sub.org> wrote: > > > Sep 6 20:31:59 <local1.debug> pole named[71152]: resolver: debug 3: > exceeded max queries resolving 'ns1.edns.t-ipnet.de/AAAA' (querycount=33, > maxqueries=32) > > > -- > Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe > from this list > > ISC funds the development of this software with paid support > subscriptions. Contact us at https://www.isc.org/contact/ for more > information. > > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users > > -- > Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe > from this list > > ISC funds the development of this software with paid support > subscriptions. Contact us at https://www.isc.org/contact/ for more > information. > > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users >
-- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
