Re: SERVFAIL error during the evening

2024-06-26 Thread Michael Batchelder
> I have configured qname to disabled for now. Once the issue is resolved, > I will set it to relaxed. I have provided a download link for the log > files and a dig +trace test for more details on this issue, which I do > not think is related to BIND or its configuration. Sami, Discussions of non

Re: SERVFAIL error during the evening

2024-06-24 Thread Michael Batchelder
>> Hello Michael >> Thank you for your response. Here is a pcap file and some logs. > > Hello Sami, > > Your pcap shows your resolver making thousands of queries that get > no responses (or at least the pcap does not contain them). There's > not much I can say, beyond that this does not appear to

Re: SERVFAIL error during the evening

2024-06-24 Thread Michael Batchelder
> Hello Michael > Thank you for your response. Here is a pcap file and some logs. Hello Sami, Your pcap shows your resolver making thousands of queries that get no responses (or at least the pcap does not contain them). There's not much I can say, beyond that this does not appear to be a proble

Re: qname minimization: me too :(

2024-06-21 Thread Michael Batchelder
> Yes, sure. I grabbed three typical cases to analyze further, and > currently trying to understand the proceedings - unsuccessfully, up > to now. :( > > Case 1: > --- > Jun 19 17:42:12 conr named[24481]: lame-servers: >info: success resolving '26.191.165.185.in-addr.arpa/PTR' >

SERVFAIL error during the evening

2024-06-13 Thread Michael Batchelder
along with the BIND log segment which contains the failed queries. Michael Batchelder ISC Support -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.

Problem with a certain domain

2024-06-04 Thread Michael Batchelder
Thomas, I just incorrectly wrote: > So at minimum add "icmp and arp" to your filter expression. I did not mean to use the logical "and". Your minimum filter should be something like: "src port 53 or icmp or arp" Sorry for the confusion, Michael

Problem with a certain domain

2024-06-04 Thread Michael Batchelder
limit the amount of information you provide to those who are trying to help you or make them infer information. It's fine to mention only certain packets in an email, but put the full packet capture on a public resource somewhere accessible. Michael Batchelder ISC Support -- Visit https:

Problem with a certain domain

2024-05-31 Thread Michael Batchelder
(or some level of failure in between all queries and the ones for that one domain)? And at that time, can you successfully query from the same system using a public resolver (e.g. "dig @9.9.9.9 s1._domainkey.mg-esp-prod-eu-eu.mallorcazeitung.es TXT")? And do you have BIND's