Frequent timeout

Carl Byington carl at byington.org
Mon Sep 3 00:02:45 UTC 2018


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On Sat, 2018-09-01 at 23:45 -0400, Alex wrote:


> (71.161.85.209.hostkarma.junkemailfilter.com): query failed (SERVFAIL)
> (71.161.85.209.bl.score.senderscore.com): query failed (SERVFAIL)

> When trying to resolve any of these manually, it just returns
> NXDOMAIN.

What does
   dig -4 71.161.85.209.hostkarma.junkemailfilter.com +trace +nodnssec
show, and it is consistently NXDOMAIN? That ends here with:

71.161.85.209.hostkarma.junkemailfilter.com. 2100 IN A 127.0.0.3
71.161.85.209.hostkarma.junkemailfilter.com. 2100 IN A 127.0.1.1
;; Received 93 bytes from 184.105.182.249#53(rbl1.junkemailfilter.com)
in 20 ms



> I also isolated a packet with the "server failure" information, but
> I'm unable to figure out what the data means. Would someone be
> interested in evaluating it for me? It's a 146-byte pcap file.
> https://drive.google.com/open?id=1Ui893Lg61psZCR8I_9SJtNqs-Sil_br

That is just the reply from bind to some other process running on the
same machine, reporting the server failure.


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.14 (GNU/Linux)

iEYEAREKAAYFAluMefIACgkQL6j7milTFsETsgCgiUbEZtaS2BnRHP4VPh4ycfhF
UvwAnitRg/6OCRXvZsj9EJTygjol7M+u
=2DAt
-----END PGP SIGNATURE-----




More information about the bind-users mailing list