dig ds c10r.facebook.com returns SERVFAIL

[Laurent Bigonville]

Hello,

With bind9 server (I can reproduce that on RHEL7 with 9.9.4, debian 
stable with 9.10.3 and also debian unstable with 9.11.4) when doing "dig 
ds c10r.facebook.com @10.122.17.186", I get a SERVFAIL.

I'm getting this with either a bind acting as a forwarder or as a 
recursive server. In the forwarder case, if I'm doing the query on the 
servers where the query is forwarded to, it is working fine.

I get the same result if I'm doing the query on the server at 
https://www.dns-oarc.net/oarc/services/odvr

I've attached here the capture of the network traffic when bind is 
acting as a forwarder (option forward=first so that's why you see a 
query to facebook server as well)

An idea?

Kind regards,

Laurent Bigonville

-------------- next part --------------
A non-text attachment was scrubbed...
Name: facebook.pcap.gz
Type: application/gzip
Size: 898 bytes
Desc: not available
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20180903/1b2a7211/attachment.bin>