Getting "too many timeouts resolving"

[Kevin Darcy]

Steve Koon wrote:
> I am getting these errors because I have resolve turn on in both my
> secondaries? 
I think you mean "recursion" rather than "resolve".
> I was not getting this until I did this and need this for
> some testing over the next three days so that some testing can be done
> with our dev and outsourced test team. Is there a way to block these
> request that are no coming from either an ip address or subnet?
>
>   
Well, frostfellow.info doesn't exist, according to the .info 
nameservers. "too many timeouts ... disabling EDNS" _usually_ means that 
you have a firewall or some other middlebox that is ignorant of EDNS0, 
but it can also be indicative that DNS is completely *blocked* between 
your address range(s) and one or more relevant ranges of the Internet 
address space. One important detail you neglected to mention is whether 
frostfellow.info actually resolves from ns2.escapia.com. The "disabling 
EDNS" messages may be just the tip of the iceberg here.

FWIW, all of the .info TLD Servers appear to understand EDNS0, so that's 
not the problem.

As for "unexpected rcode (SERVFAIL)", that's pretty much par for the 
course. SERVFAIL is kind of a "catch-all" error code, and there's plenty 
of misconfigured/broken nameservers and/or delegations out there on the 
wild, wild Internet.

                                                                         
                              - Kevin

>  
>
> ==== ns2.escapia.com log ========
>
> dumpstats complete
>
> too many timeouts resolving 'FROSTELLOW.INFO/A' (in 'FROSTELLOW.info'?):
> disabling EDNS
>
> too many timeouts resolving 'FROSTELLOW.INFO/A' (in 'FROSTELLOW.info'?):
> disabling EDNS
>
> too many timeouts resolving 'FROSTELLOW.INFO/A' (in 'FROSTELLOW.info'?):
> disabling EDNS
>
> too many timeouts resolving 'FROSTELLOW.INFO/A' (in 'FROSTELLOW.info'?):
> disabling EDNS
>
> too many timeouts resolving 'FROSTELLOW.INFO/A' (in 'FROSTELLOW.info'?):
> disabling EDNS
>
> too many timeouts resolving 'FROSTELLOW.INFO/A' (in 'FROSTELLOW.info'?):
> disabling EDNS
>
> too many timeouts resolving 'FROSTELLOW.INFO/A' (in 'FROSTELLOW.info'?):
> disabling EDNS
>
> too many timeouts resolving 'FROSTELLOW.INFO/A' (in 'FROSTELLOW.info'?):
> disabling EDNS
>
> too many timeouts resolving 'FROSTELLOW.INFO/A' (in 'FROSTELLOW.info'?):
> disabling EDNS
>
> received control channel command 'stats'
>
> dumpstats complete
>
> too many timeouts resolving 'FROSTELLOW.INFO/A' (in 'FROSTELLOW.info'?):
> disabling EDNS
>
> too many timeouts resolving 'FROSTELLOW.INFO/A' (in 'FROSTELLOW.info'?):
> disabling EDNS
>
> too many timeouts resolving 'FROSTELLOW.INFO/A' (in 'FROSTELLOW.info'?):
> disabling EDNS
>
> too many timeouts resolving 'FROSTELLOW.INFO/A' (in 'FROSTELLOW.info'?):
> disabling EDNS
>
> too many timeouts resolving 'FROSTELLOW.INFO/A' (in 'FROSTELLOW.info'?):
> disabling EDNS
>
> unexpected RCODE (SERVFAIL) resolving 'VAFLLAM.COM/MX/IN':
> 63.251.161.33#53
>
> unexpected RCODE (SERVFAIL) resolving 'UYUUI.COM/CNAME/IN':
> 63.251.161.33#53
>
> unexpected RCODE (SERVFAIL) resolving 'DOCTORSINCOMPLIANCE.BIZ/AAAA/IN':
> 63.251.161.33#53
>
> unexpected RCODE (SERVFAIL) resolving 'TCWWEIGHTLOSS.NET/MX/IN':
> 63.251.161.33#53
>
> unexpected RCODE (SERVFAIL) resolving 'RICKTIETZ.COM/AAAA/IN':
> 63.251.161.33#53
>
> unexpected RCODE (SERVFAIL) resolving 'SEVENLAKESWEST.COM/AAAA/IN':
> 63.251.161.33#53
>
> unexpected RCODE (SERVFAIL) resolving 'SEVENLAKESWEST.COM/AAAA/IN':
> 74.54.158.74#53
>
> unexpected RCODE (SERVFAIL) resolving 'SEVENLAKESWEST.COM/AAAA/IN':
> 74.54.158.72#53
>
> too many timeouts resolving 'SEVENLAKESWEST.COM/AAAA' (in
> 'SEVENLAKESWEST.com'?): disabling EDNS
>
> too many timeouts resolving 'SEVENLAKESWEST.COM/AAAA' (in
> 'SEVENLAKESWEST.com'?): disabling EDNS
>
> too many timeouts resolving 'SEVENLAKESWEST.COM/AAAA' (in
> 'SEVENLAKESWEST.com'?): disabling EDNS
>
> too many timeouts resolving 'SEVENLAKESWEST.COM/AAAA' (in
> 'SEVENLAKESWEST.com'?): disabling EDNS
>
> too many timeouts resolving 'SEVENLAKESWEST.COM/AAAA' (in
> 'SEVENLAKESWEST.com'?): disabling EDNS
>
> too many timeouts resolving 'SEVENLAKESWEST.COM/AAAA' (in
> 'SEVENLAKESWEST.com'?): disabling EDNS
>
> too many timeouts resolving 'SEVENLAKESWEST.COM/AAAA' (in
> 'SEVENLAKESWEST.com'?): disabling EDNS
>
> unexpected RCODE (SERVFAIL) resolving 'POLITICALSUBTEXT.COM/A/IN':
> 216.231.41.2#53
>
> lame server resolving 'POLITICALSUBTEXT.COM' (in
> 'POLITICALSUBTEXT.com'?): 216.227.215.2#53
>
> lame server resolving 'POLITICALSUBTEXT.COM' (in
> 'POLITICALSUBTEXT.com'?): 216.227.214.3#53
>
> too many timeouts resolving 'POLITICALSUBTEXT.COM/A' (in
> 'POLITICALSUBTEXT.com'?): disabling EDNS
>
> unexpected RCODE (SERVFAIL) resolving 'POLITICALSUBTEXT.COM/A/IN':
> 63.251.161.33#53
>
> received control channel command 'stats'
>
>  
>
>  
>
>
>
>
>
>