<div dir="ltr"><div>Agreed, but without the upstream provider actually fixing the issue I couldn't find a way to provide resolution of this domain to my customers - are there better ways to resolve this from our side?</div><div><br></div><div>There seems to be a document about this issue - <a href="https://kb.isc.org/docs/aa-01387">https://kb.isc.org/docs/aa-01387</a></div><div><br></div><div>Paul<br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Fri, 13 May 2022 at 14:07, Mark Andrews <<a href="mailto:marka@isc.org">marka@isc.org</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="auto">Working around servers that drop queries causes problems for zones that do have protocol compliant servers. The workarounds cause problems with getting DNSSEC responses wic leads to validation failures. <div><br><div dir="ltr">-- <div>Mark Andrews</div></div><div dir="ltr"><br><blockquote type="cite">On 13 May 2022, at 22:58, Paul Stead <<a href="mailto:paul.stead@gmail.com" target="_blank">paul.stead@gmail.com</a>> wrote:<br><br></blockquote></div><blockquote type="cite"><div dir="ltr"><div dir="ltr"><div>Further to this, I've discovered that disabling DNS cookies also seems to help with resolution - <br></div><div><br></div><div>$ dig +nocookie +timeout=1 +retries=0 IN A <a href="http://myapplication.glbaa.barclays.com" target="_blank">myapplication.glbaa.barclays.com</a>. @<a href="http://ns21.barclays.com" target="_blank">ns21.barclays.com</a>.</div><div><br></div><div>Maybe the send-cookie option could be investigated? YMMV..</div><div><br></div><div>On a side note other recursive DNS software seem to fall back gracefully and resolve these problems <br></div><div><br></div><div>Paul<br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Fri, 13 May 2022 at 13:51, Paul Stead <<a href="mailto:paul.stead@gmail.com" target="_blank">paul.stead@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div>I have noticed this, too,</div><div><br></div><div>The problem seems to be related to edns - disabling edns for the upstream servers looks to resolve the issue, this can be seen with later versions of dig -</div><div><br></div><div>$ dig <b>+noedns</b> +timeout=1 +retries=0 IN A <a href="http://myapplication.glbaa.barclays.com" target="_blank">myapplication.glbaa.barclays.com</a>. @<a href="http://ns21.barclays.com" target="_blank">ns21.barclays.com</a>.</div><div><br></div><div>I have config along the lines of - <br></div><div><br></div><div>server 157.83.102.245 {<br> edns no;<br>};</div><div><br></div><div>for each of the problematic upstreams. I contacted Barclays a few months ago about this, but never got a solid response.</div><div><br></div><div>Paul<br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Fri, 13 May 2022 at 13:12, Ondřej Surý <<a href="mailto:ondrej@isc.org" target="_blank">ondrej@isc.org</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">Hi Rainer,<br>
<br>
I believe this is unrelated to any upgrade. The nameservers for the domain are broken:<br>
<br>
$ dig IN A <a href="http://myapplication.international.barclays.com" rel="noreferrer" target="_blank">myapplication.international.barclays.com</a> @<a href="http://ns2.barcap.com" rel="noreferrer" target="_blank">ns2.barcap.com</a>.<br>
<br>
; <<>> DiG 9.19.0-1+0~20220421.76+debian10~1.gbpa71ef8-Debian <<>> IN A <a href="http://myapplication.international.barclays.com" rel="noreferrer" target="_blank">myapplication.international.barclays.com</a> @<a href="http://ns2.barcap.com" rel="noreferrer" target="_blank">ns2.barcap.com</a>.<br>
;; global options: +cmd<br>
;; Got answer:<br>
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 26288<br>
;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 5<br>
;; WARNING: recursion requested but not available<br>
<br>
;; OPT PSEUDOSECTION:<br>
; EDNS: version: 0, flags:; udp: 1220<br>
; COOKIE: 1154fcda62fc8122973932b0627e4a9e96eef4cf1d850adf (good)<br>
;; QUESTION SECTION:<br>
;<a href="http://myapplication.international.barclays.com" rel="noreferrer" target="_blank">myapplication.international.barclays.com</a>. IN A<br>
<br>
;; ANSWER SECTION:<br>
<a href="http://myapplication.international.barclays.com" rel="noreferrer" target="_blank">myapplication.international.barclays.com</a>. 900 IN CNAME <a href="http://myapplication.glbaa.barclays.com" rel="noreferrer" target="_blank">myapplication.glbaa.barclays.com</a>.<br>
<br>
;; AUTHORITY SECTION:<br>
<a href="http://glbaa.barclays.com" rel="noreferrer" target="_blank">glbaa.barclays.com</a>. 900 IN NS <a href="http://ns22.barclays.net" rel="noreferrer" target="_blank">ns22.barclays.net</a>.<br>
<a href="http://glbaa.barclays.com" rel="noreferrer" target="_blank">glbaa.barclays.com</a>. 900 IN NS <a href="http://ns21.barclays.com" rel="noreferrer" target="_blank">ns21.barclays.com</a>.<br>
<a href="http://glbaa.barclays.com" rel="noreferrer" target="_blank">glbaa.barclays.com</a>. 900 IN NS <a href="http://ns24.barclays.net" rel="noreferrer" target="_blank">ns24.barclays.net</a>.<br>
<a href="http://glbaa.barclays.com" rel="noreferrer" target="_blank">glbaa.barclays.com</a>. 900 IN NS <a href="http://ns23.barclays.com" rel="noreferrer" target="_blank">ns23.barclays.com</a>.<br>
<br>
;; ADDITIONAL SECTION:<br>
<a href="http://ns21.barclays.com" rel="noreferrer" target="_blank">ns21.barclays.com</a>. 900 IN A 157.83.102.245<br>
<a href="http://ns23.barclays.com" rel="noreferrer" target="_blank">ns23.barclays.com</a>. 900 IN A 157.83.126.245<br>
<a href="http://ns22.barclays.net" rel="noreferrer" target="_blank">ns22.barclays.net</a>. 600 IN A 157.83.102.246<br>
<a href="http://ns24.barclays.net" rel="noreferrer" target="_blank">ns24.barclays.net</a>. 600 IN A 157.83.126.246<br>
<br>
;; Query time: 196 msec<br>
;; SERVER: 141.228.196.129#53(<a href="http://ns2.barcap.com" rel="noreferrer" target="_blank">ns2.barcap.com</a>.) (UDP)<br>
;; WHEN: Fri May 13 14:08:49 CEST 2022<br>
;; MSG SIZE rcvd: 283<br>
<br>
<br>
and the nameservers itself just timeout:<br>
<br>
$ dig +timeout=1 +retries=0 IN A <a href="http://myapplication.glbaa.barclays.com" rel="noreferrer" target="_blank">myapplication.glbaa.barclays.com</a>. @<a href="http://ns21.barclays.com" rel="noreferrer" target="_blank">ns21.barclays.com</a>.<br>
<br>
; <<>> DiG 9.19.0-1+0~20220421.76+debian10~1.gbpa71ef8-Debian <<>> +timeout +retries IN A <a href="http://myapplication.glbaa.barclays.com" rel="noreferrer" target="_blank">myapplication.glbaa.barclays.com</a>. @<a href="http://ns21.barclays.com" rel="noreferrer" target="_blank">ns21.barclays.com</a>.<br>
;; global options: +cmd<br>
;; connection timed out; no servers could be reached<br>
<br>
<br>
DNSVIZ gives the same result:<br>
<br>
<a href="https://dnsviz.net/d/myapplication.glbaa.barclays.com/dnssec/" rel="noreferrer" target="_blank">https://dnsviz.net/d/myapplication.glbaa.barclays.com/dnssec/</a><br>
<br>
• <a href="http://glbaa.barclays.com" rel="noreferrer" target="_blank">glbaa.barclays.com</a> zone: The server(s) were not responsive to queries over UDP. (157.83.102.245, 157.83.102.246, 157.83.126.245, 157.83.126.246)<br>
<br>
Ondrej<br>
--<br>
Ondřej Surý (He/Him)<br>
<a href="mailto:ondrej@isc.org" target="_blank">ondrej@isc.org</a><br>
<br>
My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours.<br>
<br>
> On 13. 5. 2022, at 13:54, Rainer Duffner <<a href="mailto:rainer@ultra-secure.de" target="_blank">rainer@ultra-secure.de</a>> wrote:<br>
> <br>
> Hi,<br>
> <br>
> at work, I have a problem resolving the following domain:<br>
> <br>
> <a href="http://myapplication.international.barclays.com" rel="noreferrer" target="_blank">myapplication.international.barclays.com</a><br>
> <br>
> <br>
> BIND 9.16.27, FreeBSD 12.3-P5.<br>
> 2022Q2 ports.<br>
> <br>
> <br>
> I copied the config to a VM at home - but it did not work there, either.<br>
> <br>
> I believe it must have happened on the update from BIND 9.16.26 to 9.16.27.<br>
> <br>
> <br>
> options {<br>
> directory "/usr/local/etc/namedb/working";<br>
> pid-file "/var/run/named/pid";<br>
> dump-file "/var/dump/named_dump.db";<br>
> statistics-file "/var/stats/named.stats";<br>
> allow-recursion {"rec";};<br>
> allow-query-cache { localhost; "rec" ; };<br>
> // CIS recommended:<br>
> // serverid none;<br>
> // dnssec-enable yes;<br>
> // dnssec-validation auto;<br>
> // dnssec-accept-expired no;<br>
> <br>
> listen-on { 192.168.1.61; };<br>
> <br>
> disable-empty-zone "255.255.255.255.IN-ADDR.ARPA";<br>
> disable-empty-zone "0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.ARPA";<br>
> disable-empty-zone "1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.ARPA";<br>
> <br>
> };<br>
> <br>
> acl rec {<br>
> <a href="http://127.0.0.0/8" rel="noreferrer" target="_blank">127.0.0.0/8</a>;<br>
> <a href="http://192.168.1.0/24" rel="noreferrer" target="_blank">192.168.1.0/24</a>;<br>
> ::1;<br>
> };<br>
> <br>
> /* Serving the following zones locally will prevent any queries<br>
> for these zones leaving your network and going to the root<br>
> name servers. This has two significant advantages:<br>
> 1. Faster local resolution for your users<br>
> 2. No spurious traffic will be sent from your network to the roots<br>
> */<br>
> // RFCs 1912, 5735 and 6303 (and BCP 32 for localhost)<br>
> zone "localhost" { type master; file "/usr/local/etc/namedb/master/localhost-forward.db"; };<br>
> zone "127.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/localhost-reverse.db"; };<br>
> zone "255.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> <br>
> // RFC 1912-style zone for IPv6 localhost address (RFC 6303)<br>
> zone "0.ip6.arpa" { type master; file "/usr/local/etc/namedb/master/localhost-reverse.db"; };<br>
> <br>
> // "This" Network (RFCs 1912, 5735 and 6303)<br>
> zone "0.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> <br>
> // Private Use Networks (RFCs 1918, 5735 and 6303)<br>
> zone "10.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "16.172.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "17.172.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "18.172.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "19.172.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "20.172.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "21.172.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "22.172.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "23.172.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "24.172.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "25.172.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "26.172.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "27.172.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "28.172.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "29.172.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "30.172.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "31.172.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "168.192.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> <br>
> // Shared Address Space (RFC 6598)<br>
> zone "64.100.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "65.100.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "66.100.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "67.100.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "68.100.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "69.100.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "70.100.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "71.100.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "72.100.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "73.100.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "74.100.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "75.100.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "76.100.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "77.100.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "78.100.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "79.100.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "80.100.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "81.100.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "82.100.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "83.100.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "84.100.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "85.100.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "86.100.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "87.100.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "88.100.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "89.100.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "90.100.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "91.100.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "92.100.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "93.100.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "94.100.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "95.100.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "96.100.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "97.100.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "98.100.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "99.100.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "100.100.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "101.100.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "102.100.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "103.100.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "104.100.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "105.100.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "106.100.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "107.100.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "108.100.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "109.100.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "110.100.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "111.100.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "112.100.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "113.100.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "114.100.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "115.100.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "116.100.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "117.100.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "118.100.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "119.100.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "120.100.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "121.100.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "122.100.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "123.100.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "124.100.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "125.100.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "126.100.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "127.100.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> <br>
> // Link-local/APIPA (RFCs 3927, 5735 and 6303)<br>
> zone "254.169.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> <br>
> // IETF protocol assignments (RFCs 5735 and 5736)<br>
> zone "0.0.192.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> <br>
> // TEST-NET-[1-3] for Documentation (RFCs 5735, 5737 and 6303)<br>
> zone "2.0.192.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "100.51.198.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "113.0.203.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> <br>
> // IPv6 Example Range for Documentation (RFCs 3849 and 6303)<br>
> zone "8.b.d.0.1.0.0.2.ip6.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> <br>
> // Domain Names for Documentation and Testing (BCP 32)<br>
> zone "test" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "example" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "invalid" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "<a href="http://example.com" rel="noreferrer" target="_blank">example.com</a>" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "<a href="http://example.net" rel="noreferrer" target="_blank">example.net</a>" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "<a href="http://example.org" rel="noreferrer" target="_blank">example.org</a>" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> <br>
> // Router Benchmark Testing (RFCs 2544 and 5735)<br>
> zone "18.198.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "19.198.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> <br>
> // IANA Reserved - Old Class E Space (RFC 5735)<br>
> zone "240.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "241.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "242.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "243.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "244.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "245.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "246.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "247.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "248.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "249.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "250.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "251.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "252.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "253.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "254.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> <br>
> // IPv6 Unassigned Addresses (RFC 4291)<br>
> zone "1.ip6.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "3.ip6.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "4.ip6.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "5.ip6.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "6.ip6.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "7.ip6.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "8.ip6.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "9.ip6.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "a.ip6.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "b.ip6.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "c.ip6.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "d.ip6.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "e.ip6.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "0.f.ip6.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "1.f.ip6.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "2.f.ip6.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "3.f.ip6.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "4.f.ip6.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "5.f.ip6.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "6.f.ip6.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "7.f.ip6.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "8.f.ip6.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "9.f.ip6.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "a.f.ip6.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "b.f.ip6.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "0.e.f.ip6.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "1.e.f.ip6.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "2.e.f.ip6.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "3.e.f.ip6.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "4.e.f.ip6.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "5.e.f.ip6.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "6.e.f.ip6.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "7.e.f.ip6.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> <br>
> // IPv6 ULA (RFCs 4193 and 6303)<br>
> zone "c.f.ip6.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "d.f.ip6.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> <br>
> // IPv6 Link Local (RFCs 4291 and 6303)<br>
> zone "8.e.f.ip6.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "9.e.f.ip6.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "a.e.f.ip6.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "b.e.f.ip6.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> <br>
> // IPv6 Deprecated Site-Local Addresses (RFCs 3879 and 6303)<br>
> zone "c.e.f.ip6.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "d.e.f.ip6.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "e.e.f.ip6.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> zone "f.e.f.ip6.arpa" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> <br>
> // <a href="http://IP6.INT" rel="noreferrer" target="_blank">IP6.INT</a> is Deprecated (RFC 4159)<br>
> zone "<a href="http://ip6.int" rel="noreferrer" target="_blank">ip6.int</a>" { type master; file "/usr/local/etc/namedb/master/empty.db"; };<br>
> <br>
> <br>
> include "/usr/local/etc/namedb/log.conf“;<br>
> (bind-unbound-test <namedb>) 0 # drill @<a href="http://192.168.1.61" rel="noreferrer" target="_blank">192.168.1.61</a> <a href="http://myapplication.international.barclays.com" rel="noreferrer" target="_blank">myapplication.international.barclays.com</a><br>
> ;; ->>HEADER<<- opcode: QUERY, rcode: SERVFAIL, id: 3215<br>
> ;; flags: qr rd ra ; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0<br>
> ;; QUESTION SECTION:<br>
> ;; <a href="http://myapplication.international.barclays.com" rel="noreferrer" target="_blank">myapplication.international.barclays.com</a>. IN A<br>
> <br>
> ;; ANSWER SECTION:<br>
> <br>
> ;; AUTHORITY SECTION:<br>
> <br>
> ;; ADDITIONAL SECTION:<br>
> <br>
> ;; Query time: 10056 msec<br>
> ;; SERVER: 192.168.1.61<br>
> ;; WHEN: Fri May 13 13:50:00 2022<br>
> ;; MSG SIZE rcvd: 58<br>
> (bind-unbound-test <namedb>) 0 #<br>
> <br>
> <br>
> <br>
> <br>
> <br>
> <br>
> <br>
> <br>
> <br>
> --<br>
> Visit <a href="https://lists.isc.org/mailman/listinfo/bind-users" rel="noreferrer" target="_blank">https://lists.isc.org/mailman/listinfo/bind-users</a> to unsubscribe from this list<br>
> <br>
> ISC funds the development of this software with paid support subscriptions. Contact us at <a href="https://www.isc.org/contact/" rel="noreferrer" target="_blank">https://www.isc.org/contact/</a> for more information.<br>
> <br>
> <br>
> bind-users mailing list<br>
> <a href="mailto:bind-users@lists.isc.org" target="_blank">bind-users@lists.isc.org</a><br>
> <a href="https://lists.isc.org/mailman/listinfo/bind-users" rel="noreferrer" target="_blank">https://lists.isc.org/mailman/listinfo/bind-users</a><br>
<br>
-- <br>
Visit <a href="https://lists.isc.org/mailman/listinfo/bind-users" rel="noreferrer" target="_blank">https://lists.isc.org/mailman/listinfo/bind-users</a> to unsubscribe from this list<br>
<br>
ISC funds the development of this software with paid support subscriptions. Contact us at <a href="https://www.isc.org/contact/" rel="noreferrer" target="_blank">https://www.isc.org/contact/</a> for more information.<br>
<br>
<br>
bind-users mailing list<br>
<a href="mailto:bind-users@lists.isc.org" target="_blank">bind-users@lists.isc.org</a><br>
<a href="https://lists.isc.org/mailman/listinfo/bind-users" rel="noreferrer" target="_blank">https://lists.isc.org/mailman/listinfo/bind-users</a><br>
</blockquote></div>
</blockquote></div>
<span>-- </span><br><span>Visit <a href="https://lists.isc.org/mailman/listinfo/bind-users" target="_blank">https://lists.isc.org/mailman/listinfo/bind-users</a> to unsubscribe from this list</span><br><span></span><br><span>ISC funds the development of this software with paid support subscriptions. Contact us at <a href="https://www.isc.org/contact/" target="_blank">https://www.isc.org/contact/</a> for more information.</span><br><span></span><br><span></span><br><span>bind-users mailing list</span><br><span><a href="mailto:bind-users@lists.isc.org" target="_blank">bind-users@lists.isc.org</a></span><br><span><a href="https://lists.isc.org/mailman/listinfo/bind-users" target="_blank">https://lists.isc.org/mailman/listinfo/bind-users</a></span><br></div></blockquote></div></div></blockquote></div>