Doing battle with the exact same problem – from an over-the-weekend F5 upgrade.
So funny this is coming up now. We’re not considering a code upgrade yet, but users are complaining about the Real ISC-BIND servers returning SERVFAIL for AAAA queries (not subzone, yada yada) against F5 delegated servers. J From: bind-users <bind-users-boun...@lists.isc.org> on behalf of Ondřej Surý <ond...@isc.org> Date: Saturday, July 5, 2025 at 12:03 AM To: Florian Piekert <flo...@floppy.org> Cc: bind-users@lists.isc.org <bind-users@lists.isc.org> Subject: Re: question about resolving of AAAA amazoses.com Specifically in this case the incorrect chain starts here: > $ dig IN AAAA feedback-smtp.us-east-1.amazonses.com @ns-265.awsdns-33.com. > > ; <<>> DiG 9.21.8-1+0~20250521.138+debian12~1.gbpefbbeb-Debian <<>> IN AAAA > feedback-smtp.us-east-1.amazonses.com @ns-265.awsdns-33.com. > ;; global options: +cmd > ;; Got answer: > ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 11817 > ;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 4, ADDITIONAL: 1 > ;; WARNING: recursion requested but not available > > ;; OPT PSEUDOSECTION: > ; EDNS: version: 0, flags:; udp: 4096 > ;; QUESTION SECTION: > ;feedback-smtp.us-east-1.amazonses.com. IN AAAA > > ;; AUTHORITY SECTION: > feedback-smtp.us-east-1.amazonses.com. 60 IN NS ns-1244.awsdns-27.org. > feedback-smtp.us-east-1.amazonses.com. 60 IN NS ns-1739.awsdns-25.co.uk. > feedback-smtp.us-east-1.amazonses.com. 60 IN NS ns-82.awsdns-10.com. > feedback-smtp.us-east-1.amazonses.com. 60 IN NS ns-968.awsdns-57.net. > > ;; Query time: 28 msec > ;; SERVER: 2600:9000:5301:900::1#53(ns-265.awsdns-33.com.) (UDP) > ;; WHEN: Sat Jul 05 05:59:17 CEST 2025 > ;; MSG SIZE rcvd: 202
-- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users