Hello everyone, I'm experiencing a problem with my BIND 9 server (version 9.20.3-1+ubuntu22.04.1+deb.sury.org+1-Ubuntu) when trying to resolve certain domains. Below I share the details of an example of a failed query for the domain gevir.cundinamarca.gov.co: portalpagos.claro.com.co:
; <<>> DiG 9.20.3-1+ubuntu22.04.1+deb.sury.org+1-Ubuntu <<>> @localhost gevir.cundinamarca.gov.co ; (2 servers found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 46766 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ; COOKIE: ff14106bb51bb95f0100000067254618aa625f395bf24155 (good) ;; QUESTION SECTION: ;gevir.cundinamarca.gov.co. IN A ;; Query time: 4996 msec ;; SERVER: ::1#53(localhost) (UDP) ;; WHEN: Fri Nov 01 16:20:24 -05 2024 ;; MSG SIZE rcvd: 82 ; <<>> DiG 9.20.3-1+ubuntu22.04.1+deb.sury.org+1-Ubuntu <<>> @localhost portalpagos.claro.com.co ; (2 servers found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 2390 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ; COOKIE: 32bd9c3edc63219e01000000672547d17fd6ab69abe31887 (good) ;; QUESTION SECTION: ;portalpagos.claro.com.co. IN A ;; Query time: 5000 msec ;; SERVER: ::1#53(localhost) (UDP) ;; WHEN: Fri Nov 01 16:27:45 -05 2024 ;; MSG SIZE rcvd: 81 BIND Settings: I have disabled dnssec-validation to avoid DNSSEC related issues. Using Root Hints and Forwarders: I've tested with Google root servers and forwarders (8.8.8.8), and only the forwarders seem to resolve the domain correctly. Could this issue be related to some additional configuration in BIND or is it possible that it is a bug in the cundinamarca.gov.co delegation chain? I appreciate any guidance or suggestions for additional testing. -- *CESAR AUGUSTO CAMACHO SIERRA* CEO y Gerente General IPcom Sistemas S.A.S - ASN271927 proveedor de redes y/o Servicios de Telecomunicaciones. ( I.S.P) Colombia Registro TIC 96003355 de Fecha 22 de Septiembre de 2016 del Ministerio de Tecnologías de la Información y las Comunicaciones Contratación Santander, Colombia Carrera 2 No 6-34 www.ipcomsistemas.co 312 428 1640 - 018000196067
-- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
