SERVFAIL in BIND when resolving certain domains (.gov.co)

[Cesar Augusto Camacho Sierra]

Hello everyone,

I'm experiencing a problem with my BIND 9 server (version
9.20.3-1+ubuntu22.04.1+deb.sury.org+1-Ubuntu) when trying to resolve
certain domains. Below I share the details of an example of a failed query
for the domain gevir.cundinamarca.gov.co:
portalpagos.claro.com.co:

; <<>> DiG 9.20.3-1+ubuntu22.04.1+deb.sury.org+1-Ubuntu <<>> @localhost
gevir.cundinamarca.gov.co
; (2 servers found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 46766
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
; COOKIE: ff14106bb51bb95f0100000067254618aa625f395bf24155 (good)
;; QUESTION SECTION:
;gevir.cundinamarca.gov.co.     IN      A

;; Query time: 4996 msec
;; SERVER: ::1#53(localhost) (UDP)
;; WHEN: Fri Nov 01 16:20:24 -05 2024
;; MSG SIZE  rcvd: 82


; <<>> DiG 9.20.3-1+ubuntu22.04.1+deb.sury.org+1-Ubuntu <<>> @localhost
portalpagos.claro.com.co
; (2 servers found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 2390
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
; COOKIE: 32bd9c3edc63219e01000000672547d17fd6ab69abe31887 (good)
;; QUESTION SECTION:
;portalpagos.claro.com.co.      IN      A

;; Query time: 5000 msec
;; SERVER: ::1#53(localhost) (UDP)
;; WHEN: Fri Nov 01 16:27:45 -05 2024
;; MSG SIZE  rcvd: 81


BIND Settings: I have disabled dnssec-validation to avoid DNSSEC related
issues.
Using Root Hints and Forwarders: I've tested with Google root servers and
forwarders (8.8.8.8), and only the forwarders seem to resolve the domain
correctly.

Could this issue be related to some additional configuration in BIND or is
it possible that it is a bug in the cundinamarca.gov.co delegation chain? I
appreciate any guidance or suggestions for additional testing.

-- 
*CESAR AUGUSTO CAMACHO SIERRA*
CEO y Gerente General
IPcom Sistemas S.A.S     -  ASN271927
proveedor de redes y/o  Servicios de Telecomunicaciones. ( I.S.P)  Colombia
Registro TIC 96003355 de Fecha 22 de Septiembre de 2016 del Ministerio de
Tecnologías de la Información y las Comunicaciones
Contratación Santander, Colombia
Carrera 2 No 6-34 www.ipcomsistemas.co
312 428 1640  - 018000196067
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20241101/41deeb34/attachment.htm>