<div dir="ltr"><div>Hi.</div><div>Looking at the dig flags it suggests you changed your config.</div><div><br></div><div>In the first example the flags are qr (query), rd (recursion desired) ra (recursion available)</div><div>In the second, ra is missing and dig tells you that explicitly:</div><div><br></div><div>
;; WARNING: recursion requested but not available</div><div><br></div><div>Since the digs were to your local resolver, I think something must have changed in your config. The default for "recursion" hasn't changed; it's still "yes". Did you set it to "no"?</div><div><br></div><div>Hope that helps.</div><div>Cheers, Greg</div></div><br><div class="gmail_quote gmail_quote_container"><div dir="ltr" class="gmail_attr">On Wed, 19 Nov 2025 at 13:53, pgnd <<a href="mailto:pgnd@dev-mail.net">pgnd@dev-mail.net</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">building devel release on<br>
<br>
distro<br>
Name: Fedora Linux 43 (Forty Three)<br>
Version: 43<br>
Codename:<br>
<br>
v9.21.14<br>
<br>
rpm -qa | grep bind9-current<br>
bind9-current-git_v9.21.14-0.20251119_130057.fc43.x86_64<br>
<br>
named -V<br>
BIND 9.21.14 (Development Release) <id:noscm><br>
running on Linux x86_64 6.17.8-300.fc43.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Nov 14 01:47:12 UTC 2025<br>
built by meson with ...<br>
<br>
resolves ok<br>
<br>
dig A <a href="http://isc.org" rel="noreferrer" target="_blank">isc.org</a> @::1<br>
<br>
; <<>> DiG 9.21.14 <<>> A <a href="http://isc.org" rel="noreferrer" target="_blank">isc.org</a><br>
;; global options: +cmd<br>
;; Got answer:<br>
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 63331<br>
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 1<br>
<br>
;; OPT PSEUDOSECTION:<br>
; EDNS: version: 0, flags:; udp: 4096<br>
; COOKIE: b1c0919d86c0b01001000000691dc03a9ed8ea5890000147 (good)<br>
;; QUESTION SECTION:<br>
;<a href="http://isc.org" rel="noreferrer" target="_blank">isc.org</a>. IN A<br>
<br>
;; ANSWER SECTION:<br>
<a href="http://isc.org" rel="noreferrer" target="_blank">isc.org</a>. 244 IN A 151.101.194.217<br>
<a href="http://isc.org" rel="noreferrer" target="_blank">isc.org</a>. 244 IN A 151.101.2.217<br>
<a href="http://isc.org" rel="noreferrer" target="_blank">isc.org</a>. 244 IN A 151.101.66.217<br>
<a href="http://isc.org" rel="noreferrer" target="_blank">isc.org</a>. 244 IN A 151.101.130.217<br>
<br>
;; Query time: 0 msec<br>
;; SERVER: ::1#53(::1) (UDP)<br>
;; WHEN: Wed Nov 19 08:03:54 EST 2025<br>
;; MSG SIZE rcvd: 128<br>
<br>
after upgrade to v9.21.15<br>
<br>
rpm -Uvh \<br>
bind9-current-git_v9.21.15-0.20251119_131709.fc43.x86_64.rpm \<br>
<br>
systemctl restart bind9-current<br>
<br>
named -V<br>
BIND 9.21.15 (Development Release) <id:noscm><br>
running on Linux x86_64 6.17.8-300.fc43.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Nov 14 01:47:12 UTC 2025<br>
built by meson with ...<br>
<br>
resolver fails<br>
<br>
dig A <a href="http://isc.org" rel="noreferrer" target="_blank">isc.org</a> @::1<br>
<br>
; <<>> DiG 9.21.15 <<>> A <a href="http://isc.org" rel="noreferrer" target="_blank">isc.org</a> @::1<br>
;; global options: +cmd<br>
;; Got answer:<br>
;; ->>HEADER<<- opcode: QUERY, status: REFUSED, id: 29342<br>
;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1<br>
;; WARNING: recursion requested but not available<br>
<br>
;; OPT PSEUDOSECTION:<br>
; EDNS: version: 0, flags:; udp: 4096<br>
; COOKIE: e714b97a4e1821be01000000691dc69fed0b5edc11f55428 (good)<br>
; EDE: 18 (Prohibited)<br>
; EDE: 20 (Not Authoritative): (recursion disabled)<br>
;; QUESTION SECTION:<br>
;<a href="http://isc.org" rel="noreferrer" target="_blank">isc.org</a>. IN A<br>
<br>
;; Query time: 0 msec<br>
;; SERVER: ::1#53(::1) (UDP)<br>
;; WHEN: Wed Nov 19 08:31:11 EST 2025<br>
;; MSG SIZE rcvd: 94<br>
<br>
note the<br>
<br>
; EDE: 18 (Prohibited)<br>
; EDE: 20 (Not Authoritative): (recursion disabled)<br>
<br>
and logs filling with<br>
<br>
19-Nov-2025 08:32:48.468 resolver: debug 1: set ede: info-code 18 extra-text (null)<br>
19-Nov-2025 08:32:48.468 resolver: debug 1: set ede: info-code 20 extra-text recursion disabled<br>
<br>
<br>
i see back in<br>
<br>
Notes for BIND 9.21.7<br>
...<br>
Support was added for EDE codes 20 (Not Authoritative) when the client requests recursion (RD) but the server has recursion disabled.<br>
...<br>
<br>
but nothing obvious in 9.21.15 release notes re: EDE xx, recursion<br>
<br>
is this a bug? or a required change in config?<br>
-- <br>
Visit <a href="https://lists.isc.org/mailman/listinfo/bind-users" rel="noreferrer" target="_blank">https://lists.isc.org/mailman/listinfo/bind-users</a> to unsubscribe from this list.<br>
</blockquote></div>