<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style>
</head>
<body lang="EN-US" link="blue" vlink="purple" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal">The .org TLD nameservers point to ns1 – ns4.opensuse.org as the authoritative nameservers for openSUSE.org. Appears that while ns2 and and ns3.opensuse.org are working, ns1 and ns4.opensuse.org return SERVFAIL when querying for openSUSE.org
records. Your first sample log entry for lists.opensuse.org NS record was against ns4.opensuse.org (195.135.221.195) which returns SERVFAIL for your query. Problem is on openSUSE.org’s nameservers (not your end).<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I’m unable to duplicate the second sample log message for SERVFAIL response for A record of 134.94.245.198.bb.barracudacentral.org . Your log indicates that the nameserver 3.13.7.25 (which is the authoritative nameserver blacklist-ns-az1.bci.aws.cudaops.com)
returned a SERVFAIL for the request. The second sample log message may have been due to an anomaly on the authoritative nameserver.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal" style="margin-bottom:12.0pt"><b><span style="font-size:12.0pt;color:black">From:
</span></b><span style="font-size:12.0pt;color:black">bind-users <bind-users-bounces@lists.isc.org> on behalf of Alex <mysqlstudent@gmail.com><br>
<b>Date: </b>Saturday, November 26, 2022 at 9:39 AM<br>
<b>To: </b>bind-users@lists.isc.org <bind-users@lists.isc.org><br>
<b>Subject: </b>lame-servers: SERVFAIL unexpected RCODE resolving<o:p></o:p></span></p>
</div>
<div style="border:solid #9C6500 1.0pt;padding:2.0pt 2.0pt 2.0pt 2.0pt">
<p class="MsoNormal" style="line-height:12.0pt;background:#FFEB9C"><b><span style="font-size:10.0pt;color:#9C6500">CAUTION:</span></b><span style="font-size:10.0pt;color:black"> This email originated from outside of the organization. Do not click links or open
attachments unless you recognize the sender and know the content is safe.<o:p></o:p></span></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div>
<p class="MsoNormal">Hi, <o:p></o:p></p>
<div>
<p class="MsoNormal">Continuing in my quest to figure out why I'm seeing timeout issues from many of the same nameservers, I'm wondering if someone can help me identify the reason for these log entries:<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">26-Nov-2022 09:19:13.969 lame-servers: SERVFAIL unexpected RCODE resolving '<a href="https://nam02.safelinks.protection.outlook.com/?url=http%3A%2F%2Flists.opensuse.org%2FNS%2FIN&data=05%7C01%7Crick.frey%40windstream.com%7C10262a839b59471b67aa08dacfc45bba%7C2567b4c1b0ed40f5aee358d7c5f3e2b2%7C0%7C0%7C638050739513352925%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=DE698kS1g5rgXqhgI4Vk%2F%2FOBvc5B2dmb3nUTzBXNl9U%3D&reserved=0">lists.opensuse.org/NS/IN</a>':
195.135.221.195#53<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">26-Nov-2022 10:02:46.437 lame-servers: SERVFAIL unexpected RCODE resolving '<a href="https://nam02.safelinks.protection.outlook.com/?url=http%3A%2F%2F134.94.245.198.bb.barracudacentral.org%2FA%2FIN&data=05%7C01%7Crick.frey%40windstream.com%7C10262a839b59471b67aa08dacfc45bba%7C2567b4c1b0ed40f5aee358d7c5f3e2b2%7C0%7C0%7C638050739513352925%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=BNpl9x8nLnZ4vuiOeT0zZBJHahr%2BCrfwHJdSM%2B37ufs%3D&reserved=0">134.94.245.198.bb.barracudacentral.org/A/IN</a>':
3.13.7.254#53<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">The vast majority of these types of entries are from the same nameservers as above. This is a mail server and at least the barracuda entry is a query to their blocklist service. Are others having problems with this barracuda service?<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">I realize generally lame-servers entries can be ignored, but it's a bit concerning to me, given the large amount of similar entries we're seeing every day. It also resulted in zero other similar questions when searching for this error.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Any ideas greatly appreciated.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Thanks,<br>
Alex<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
</div>
</div>
<br>
<p style="font-family:Calibri;font-size:8pt;color:#000000;margin:15pt;" align="Left">
Sensitivity: Internal<br>
</p>
</body>
</html>