Problem with a certain domain
Rainer Duffner
rainer at ultra-secure.de
Sat Jun 1 10:18:28 UTC 2024
https://intodns.com/mallorcazeitung.es
They have to fix this first, IMHO.
And that doesn’t take into account the problems found by zonemaster.
https://zonemaster.net/en/result/1041e4ac095c7018
> Am 01.06.2024 um 12:08 schrieb Thomas Barth via bind-users <bind-users at lists.isc.org>:
>
> Am 2024-06-01 04:34, schrieb Michael Batchelder:
>
>> Thomas, can you clarify whether all queries to 127.0.0.1/53 result in:
>> ;; communications error to 127.0.0.1#53: timed out
>> when this problem occurs, or do just queries for
>> s1._domainkey.mg-esp-prod-eu-eu.mallorcazeitung.es fail (or some level
>> of failure in between all queries and the ones for that one domain)?
>> And at that time, can you successfully query from the same system
>> using a public resolver (e.g. "dig @9.9.9.9
>> s1._domainkey.mg-esp-prod-eu-eu.mallorcazeitung.es TXT")? And do you
>> have BIND's logging for the queries that fail?
>
> I have only observed this with this mallorcazeitung domain so far. Perhaps it has something to do with my server or the network environment of my server host. I have another identical server, but in a different network / on a different host system. And on the second server, the duration of the uncached query for this domain is normal (128 msec).
>
> Problem server 1
> ;; Query time: 3348 msec
>
> Server 2
> ;; Query time: 128 msec
>
> I restarted server 1, but this did not bring any improvement. But so far it only takes so long with this mallorcazeitung domain.
>
> I tried to activate logging (found it on a website), but the first attempt resulted in an error. I'm a bit too exhausted now, as I've been sitting in front of the PC all week and now need to take a break.
>
>
> mkdir /var/log/named
> chown bind:root /var/log/named
> chmod 0750 /var/log/named
>
> nano /etc/bind/named.conf.local
>
> logging {
> channel my_syslog {
> syslog daemon;
> severity notice;
> };
> channel my_file {
> file "/var/log/named/messages";
> severity info;
> print-time yes;
> };
>
> category default { my_file; };
> }
> --
> Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list
>
> ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information.
>
>
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20240601/dca399ba/attachment-0003.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: zonemaster_152x152.png
Type: image/png
Size: 9226 bytes
Desc: not available
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20240601/dca399ba/attachment-0003.png>
More information about the bind-users
mailing list