Assertion failure when RPZ zone returns NS records?

McDonald, Daniel (Dan) Dan.McDonald at austinenergy.com
Sat Jun 11 17:19:41 UTC 2016


Apparently it’s not the way to do what I needed, but I created an RPZ record like this:
foo.example.com		IN		NS	ns1.example.org
					IN		NS	ns2.example.org


My goal was to redirect queries to a load balancer serving foo.example.com A records.  I should have created the glue in example.org and then used RPZ to create a CNAME for foo.example.com pointing to foo.example.org


Anyway, with the NS records, I got an assertion failure:
10-Jun-2016 15:49:58.584 client 10.10.207.244#49952 (foo.example.com <http://sts.austinenergy.com/>): query: foo.example.com <http://sts.austinenergy.com/> IN A + (10.2.123.132)
Jun 10 15:49:58 ns11 named[2248]: query.c:3908: REQUIRE(dbp != ((void *)0) && *dbp != ((void *)0)) failed
Jun 10 15:49:58 ns11 named[2248]: exiting (due to assertion failure)

I’m running the supplied version of Bind from SLES 11 SP4:
someone at ns11:/var/lib/named/var/log> rpm -qi bind
Name        : bind                         Relocations: (not relocatable)
Version     : 9.9.6P1                           Vendor: SUSE LINUX Products GmbH, Nuernberg, Germany
Release     : 0.25.1                        Build Date: Wed 09 Mar 2016 10:22:09 AM CST
Install Date: Mon 21 Mar 2016 09:31:21 AM CDT      Build Host: sheep02
Group       : Productivity/Networking/DNS/Servers   Source RPM: bind-9.9.6P1-0.25.1.src.rpm
Size        : 1187259                          License: BSD 3-Clause; X11/MIT
Signature   : RSA/8, Wed 09 Mar 2016 10:23:01 AM CST, Key ID e3a5c360307e3d54
Packager    : https://www.suse.com/
URL         : http://isc.org/sw/bind/


Is this a known error?

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20160611/fd889737/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 204 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20160611/fd889737/attachment.bin>


More information about the bind-users mailing list