[RESOLVED] Re: No response from localhost with "allow-query { any; };"
Axel Rau
Axel.Rau at chaos1.de
Fri Sep 4 09:24:51 UTC 2020
> Am 01.09.2020 um 22:28 schrieb Axel Rau <Axel.Rau at chaos1.de>:
>
> tcp queries are being answered, but udp queries receive no response.
> This is independent of client location (local, remote).
>
> A ktrace shows 8 bytes are written on fd 89, the 8 bytes read on fd 88.
> The next read gets an errno 35 (see below).
Commenting these out, seems to resolve the issue:
query-source address 91.216.35.21;
notify-source 91.216.35.21 port 53;
transfer-source 91.216.35.21 port 53;
query-source-v6 address 2a05:bec0:26:5::71;
notify-source-v6 2a05:bec0:26:5::71 port 53;
transfer-source-v6 2a05:bec0:26:5::71 port 53;
Queries to localhost shows that the response does not come from localhost:
root at ns5:/var/log # dig localhost @localhost
;; reply from unexpected source: 91.216.35.21#53, expected 127.0.0.1#53
;; reply from unexpected source: 91.216.35.21#53, expected 127.0.0.1#53
;; reply from unexpected source: 91.216.35.21#53, expected 127.0.0.1#53
; <<>> DiG 9.16.6 <<>> localhost @localhost
;; global options: +cmd
;; connection timed out; no servers could be reached
No issue with remote queries.
Questions:
What has query-source address to do with a query response?
Why does the issue not happen on another server (same config, same OS&bind version) ?
Axel
---
PGP-Key: CDE74120 ☀ computing @ chaos claudius
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20200904/0235a824/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: Message signed with OpenPGP
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20200904/0235a824/attachment.bin>
More information about the bind-users
mailing list