SERVFAIL in BIND when resolving certain domains (.gov.co)

[Marco Moock]

Am 01.11.2024 um 16:30:55 Uhr schrieb Cesar Augusto Camacho Sierra:

> Could this issue be related to some additional configuration in BIND
> or is it possible that it is a bug in the cundinamarca.gov.co
> delegation chain? I appreciate any guidance or suggestions for
> additional testing.


Problem in their infrastructure:

cundinamarca.gov.co.    43200   IN      NS      ns1-auth.etb.net.co.
cundinamarca.gov.co.    43200   IN      NS      ns2-auth.etb.net.co.
[...]
;; Received 710 bytes from 156.154.105.25#53(ns6.cctld.co) in 15 ms

;; communications error to 2800:260:ffff:11::221#53: timed out
;; communications error to 2800:260:ffff:11::221#53: timed out
;; communications error to 2800:260:ffff:11::221#53: timed out
gevir.cundinamarca.gov.co. 28800 IN     NS      hillstone.cundinamarca.gov.co.
;; Received 170 bytes from 201.244.1.170#53(ns2-auth.etb.net.co) in 179 ms

;; communications error to 119.26.56.250#53: timed out
;; expected opt record in response
;; Received 43 bytes from
190.26.56.250#53(hillstone.cundinamarca.gov.co) in 191 ms

Both servers are reachable, via IPv6 using ICMP echo req, but the DNS
server isn't listening on UDP nor TCP.

-- 
Gruß
Marco

Send unsolicited bulk mail to 1730475055muell at cartoonies.org