Oliver, Thanks for the additional details.
Based on this I think it is clear that this is not a bug in puppet. Your Windows servers should not be responding SERVFAIL to AAAA queries. They should be responding with NOERROR and no answers. I think that bind is probably doing the right thing according to the specification here, although I'm not completely sure. It seems to me that the behaviour that you're seeing is an unfortunate consequence of your Windows DNS servers not supporting IPv6 properly, by failing when they are queried for IPv6 addresses. Perhaps there is an option somewhere to turn it on, or an option in bind to work around broken upstream DNS servers? Since my conclusion is that this is not a bug (neither in puppet nor bind) in Ubuntu, I'm marking this bug as invalid. However, I may be wrong. If you can point to an authoritative source that states that bind is supposed to respond differently when getting a SERVFAIL upstream, then please point to that and change the bug status back to New, and we'll retarget the bug at bind. ** Changed in: puppet (Ubuntu) Status: New => Invalid ** Summary changed: - Ubuntu 12.04 resolving hangs when querying AAAA records against BIND (Ubuntu 10.04) DNS servers + BIND (Ubuntu 10.04) DNS servers do not respond when forwarding for upstreams which return SERVFAIL -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1020067 Title: BIND (Ubuntu 10.04) DNS servers do not respond when forwarding for upstreams which return SERVFAIL To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/puppet/+bug/1020067/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs