EDE 18/20 recursion failures after devel release upgrade 9.21.14 -> 9.21.15. bug, or config change req'd?
pgnd
pgnd at dev-mail.net
Wed Nov 19 13:53:02 UTC 2025
building devel release on
distro
Name: Fedora Linux 43 (Forty Three)
Version: 43
Codename:
v9.21.14
rpm -qa | grep bind9-current
bind9-current-git_v9.21.14-0.20251119_130057.fc43.x86_64
named -V
BIND 9.21.14 (Development Release) <id:noscm>
running on Linux x86_64 6.17.8-300.fc43.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Nov 14 01:47:12 UTC 2025
built by meson with ...
resolves ok
dig A isc.org @::1
; <<>> DiG 9.21.14 <<>> A isc.org
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 63331
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
; COOKIE: b1c0919d86c0b01001000000691dc03a9ed8ea5890000147 (good)
;; QUESTION SECTION:
;isc.org. IN A
;; ANSWER SECTION:
isc.org. 244 IN A 151.101.194.217
isc.org. 244 IN A 151.101.2.217
isc.org. 244 IN A 151.101.66.217
isc.org. 244 IN A 151.101.130.217
;; Query time: 0 msec
;; SERVER: ::1#53(::1) (UDP)
;; WHEN: Wed Nov 19 08:03:54 EST 2025
;; MSG SIZE rcvd: 128
after upgrade to v9.21.15
rpm -Uvh \
bind9-current-git_v9.21.15-0.20251119_131709.fc43.x86_64.rpm \
systemctl restart bind9-current
named -V
BIND 9.21.15 (Development Release) <id:noscm>
running on Linux x86_64 6.17.8-300.fc43.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Nov 14 01:47:12 UTC 2025
built by meson with ...
resolver fails
dig A isc.org @::1
; <<>> DiG 9.21.15 <<>> A isc.org @::1
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: REFUSED, id: 29342
;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
;; WARNING: recursion requested but not available
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
; COOKIE: e714b97a4e1821be01000000691dc69fed0b5edc11f55428 (good)
; EDE: 18 (Prohibited)
; EDE: 20 (Not Authoritative): (recursion disabled)
;; QUESTION SECTION:
;isc.org. IN A
;; Query time: 0 msec
;; SERVER: ::1#53(::1) (UDP)
;; WHEN: Wed Nov 19 08:31:11 EST 2025
;; MSG SIZE rcvd: 94
note the
; EDE: 18 (Prohibited)
; EDE: 20 (Not Authoritative): (recursion disabled)
and logs filling with
19-Nov-2025 08:32:48.468 resolver: debug 1: set ede: info-code 18 extra-text (null)
19-Nov-2025 08:32:48.468 resolver: debug 1: set ede: info-code 20 extra-text recursion disabled
i see back in
Notes for BIND 9.21.7
...
Support was added for EDE codes 20 (Not Authoritative) when the client requests recursion (RD) but the server has recursion disabled.
...
but nothing obvious in 9.21.15 release notes re: EDE xx, recursion
is this a bug? or a required change in config?
More information about the bind-users
mailing list