HELP - Domain resolution failed

[Filho Arrais]

Hello,

We are running bind 9.10.3-P4-Ubuntu, Ubuntu 16.04.2 LTS, we face a
recurring problem, every 3 or 4 hours Bind does not resolve the
icap-to.com.br domain.

After restarting the Bind service, resolves the host. Could someone give me
a help, I could not find if the problem is in the settings.

The server in question is a public recursive dns. Below are the settings.

named.conf.options

options {
        directory "/var/cache/bind";
        version "XXXX";
        recursive-clients 14000;
        tcp-clients 3000;
        zone-statistics yes;
        listen-on port 53 { any; };
        listen-on-v6 port 53 { none; };
        allow-query     { any; };
        allow-query-cache { any; };
        allow-recursion  { any;};
        recursion yes;
        minimal-responses no;
        dnssec-enable no;
        dnssec-validation no;
        auth-nxdomain no;
        query-source address XXX.XX.XXX.XXX;
        max-cache-size 512M;
        clients-per-query 0;
        max-clients-per-query 0;
};

server 0.0.0.0/0 {
    edns no;
};


root at recursivo-a:~# dig icap-to.com.br

; <<>> DiG 9.10.3-P4-Ubuntu <<>> icap-to.com.br
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 32316
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;icap-to.com.br.                        IN      A

;; Query time: 0 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Tue Jul 18 10:41:59 BRT 2017
;; MSG SIZE  rcvd: 43

root at recursivo-a:~# /etc/init.d/bind9 restart
[ ok ] Restarting bind9 (via systemctl): bind9.service.


root at recursivo-a:~# dig icap-to.com.br

; <<>> DiG 9.10.3-P4-Ubuntu <<>> icap-to.com.br
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 65065
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;icap-to.com.br.                        IN      A

;; ANSWER SECTION:
icap-to.com.br.         14400   IN      A       192.185.216.81

;; AUTHORITY SECTION:
icap-to.com.br.         86400   IN      NS      ns2.desenvolvesistemas.com.
icap-to.com.br.         86400   IN      NS      ns1.desenvolvesistemas.com.

;; Query time: 355 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Tue Jul 18 10:42:17 BRT 2017
;; MSG SIZE  rcvd: 117


-- 

*Atenciosamente,*



*Filho **Arrais  *

Analista de Tecnologia da Informação

MBA em Gestão de Tecnologia da Informação
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20170718/00591293/attachment.html>