BIND DNS problem (?)

Jukka Pakkanen jukka.pakkanen at qnet.fi
Wed Sep 26 09:55:26 UTC 2018


Started logging named now, but don't see much debug information with these logging settings:

logging {
category lame-servers { null; };
category edns-disabled { null; };
category security { security_file; };
category queries { queries_file; };
category resolver { resolver_file; };
category query-errors { query-errors_file; };

channel query-errors_file {
        file "d:/logs/named/query-errors.log" versions 3 size 5m;
        severity debug;
        print-time yes;
    };

channel queries_file {
        file "d:/logs/named/queries.log" versions 3 size 5m;
        severity debug;
        print-time yes;
    };

channel resolver_file {
        file "d:/logs/named/resolver.log" versions 3 size 5m;
        severity debug;
        print-time yes;
    };

channel security_file {
        file "d:/logs/named/security.log" versions 3 size 5m;
        severity debug;
        print-time yes;
    };

};


Query-errors:

26-syyskuuta-2018 12.00.59.794 client @000001F5160E7150 62.142.220.9#28667 (73cb7fd0d8c8b44cd6e741d6eed0e612.smg.ultra.brightmail.com): query failed (SERVFAIL) for 73cb7fd0d8c8b44cd6e741d6eed0e612.smg.ultra.brightmail.com/IN/TXT at ..\query.c:10692
26-syyskuuta-2018 12.00.59.794 client @000001F516751E40 62.142.220.9#48236 (6680545bc0584602c24adc8dd123f0b5.smg.ultra.brightmail.com): query failed (SERVFAIL) for 6680545bc0584602c24adc8dd123f0b5.smg.ultra.brightmail.com/IN/TXT at ..\query.c:10692
26-syyskuuta-2018 12.00.59.794 client @000001F51768CA50 62.142.220.9#47990 (73cb7fd0d8c8b44cd6e741d6eed0e612.smg.ultra.brightmail.com): query failed (SERVFAIL) for 73cb7fd0d8c8b44cd6e741d6eed0e612.smg.ultra.brightmail.com/IN/TXT at ..\query.c:10692
...

From: bind-users [mailto:bind-users-bounces at lists.isc.org] On Behalf Of Jukka Pakkanen
Sent: Wednesday, September 26, 2018 2:46 AM
To: bind-users at lists.isc.org<mailto:bind-users at lists.isc.org>
Subject: BIND DNS problem (?)

We are running a couple of Symantec SMG servers, and their DNS clients are configured to use your BIND 9.12.2 DNS servers.

In both SMG servers we get the same DNS "server failure" error from all our DNS servers when they do some TXT queries to SMG:

http://www.qnet.fi/jp/dns.png

(sorry for the bad quality/format, hope you can zoom in. That's all I got from Symantec when contacting their support, and they claim the problem is in our DNS servers because of the "server failure" error).

Anyway, I suppose the problem is related to these, in the response:

....
Answer authenticated: Answer/authority portion was not authenticated by the server
Non-authenticated data: Unacceptable
....

Sooo, any ideas what does this mean, is the problem in out BIND servers, or in the other end?

Jukka
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20180926/ad2cfd40/attachment-0001.html>


More information about the bind-users mailing list