<br><div class="gmail_quote">2009/3/16 Ondřej Surý <span dir="ltr"><<a href="mailto:ondrej@sury.org">ondrej@sury.org</a>></span><br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
Hi Cédric,<br>
</blockquote><div>Hi, <br></div><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"><br>
does 192.168.2.2 serve . zone?</blockquote><div> </div><div>No it does not. But (I'll double check) I'm not sure Unbound try to contact the authoritative server.<br>Also it was working fine with BIND. Do they have a different behavior on that point ?<br>
<br>Thanks,<br><br>Cédric<br><br></div><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"><br>
Ondrej<br>
<br>
2009/3/16 Cédric Girard <<a href="mailto:girard.cedric@gmail.com">girard.cedric@gmail.com</a>>:<br>
<div><div></div><div class="h5">> Hello,<br>
><br>
> I'm currently doing some testing on DNS. Thus my configuration is perhaps<br>
> singular.<br>
><br>
> I've an authoritative server set-up and working. This server zone is called<br>
> "test.".<br>
> I've tried to set up a caching server on another server with Unbound 1.2.1.<br>
> This two servers are connected each other through a crossover cable and not<br>
> connected to the Internet.<br>
><br>
> When I try to do a dig from a client (directly connected to the caching<br>
> server and not connected to the Internet) I get a SERVFAIL back. I must say<br>
> that with BIND instead of Unbound and without any other changes to the<br>
> configuration it was fully working.<br>
><br>
> To have a better understanding of following files:<br>
> - 192.168.1.1 is the client<br>
> - 192.168.1.2 is the caching server on the client side<br>
> - 192.168.2.1 is the caching server on the authoritative server side<br>
> - 192.168.2.2 is the authoritative server<br>
><br>
> Content of unbound.conf:<br>
><br>
> server:<br>
> root-hints: "/root/conf/cache/db.root"<br>
> do-ip6: no<br>
> username: ""<br>
> verbosity: 3<br>
> logfile: ""<br>
> chroot: ""<br>
> module-config: "iterator"<br>
> access-control: <a href="http://0.0.0.0/0" target="_blank">0.0.0.0/0</a> allow<br>
> port: 53<br>
> interface: 192.168.1.2<br>
> interface: 192.168.3.2<br>
> outgoing-interface: 192.168.2.1<br>
><br>
><br>
> Content of db.root:<br>
><br>
> ns.test. 36000 A 192.168.2.2<br>
> . 36000 NS ns.test.<br>
><br>
><br>
> Log from Unbound (the request was "dig @<a href="http://192.168.1.2" target="_blank">192.168.1.2</a> test1.test. A")<br>
><br>
> station24:~# unbound -c /etc/unbound.conf -d<br>
> [1237215220] unbound[2605:0] debug: chdir to /usr/local/etc/unbound<br>
> [1237215220] unbound[2605:0] debug: switching log to stderr<br>
> [1237215220] unbound[2605:0] debug: module config: "iterator"<br>
> [1237215220] unbound[2605:0] notice: init module 0: iterator<br>
> [1237215220] unbound[2605:0] debug: target fetch policy for level 0 is 3<br>
> [1237215220] unbound[2605:0] debug: target fetch policy for level 1 is 2<br>
> [1237215220] unbound[2605:0] debug: target fetch policy for level 2 is 1<br>
> [1237215220] unbound[2605:0] debug: target fetch policy for level 3 is 0<br>
> [1237215220] unbound[2605:0] debug: target fetch policy for level 4 is 0<br>
> [1237215220] unbound[2605:0] debug: Reading root hints from<br>
> /root/conf/cache/db.root<br>
> [1237215220] unbound[2605:0] info: DelegationPoint<.>: 1 names (1 missing),<br>
> 0 addrs (0 result, 0 avail)<br>
> [1237215220] unbound[2605:0] debug: cache memory msg=33040 rrset=33040<br>
> infra=1312 val=0<br>
> [1237215220] unbound[2605:0] info: start of service (unbound 1.2.1).<br>
> [1237215271] unbound[2605:0] debug: iterator[module 0] operate:<br>
> extstate:module_state_initial event:module_event_new<br>
> [1237215271] unbound[2605:0] info: resolving <test1.test. A IN><br>
> [1237215271] unbound[2605:0] info: priming . IN NS<br>
> [1237215271] unbound[2605:0] debug: iterator[module 0] operate:<br>
> extstate:module_state_initial event:module_event_pass<br>
> [1237215271] unbound[2605:0] info: iterator operate: query <. NS IN><br>
> [1237215271] unbound[2605:0] info: processQueryTargets: <. NS IN><br>
> [1237215271] unbound[2605:0] info: new target <ns.test. A IN><br>
> [1237215271] unbound[2605:0] debug: iterator[module 0] operate:<br>
> extstate:module_state_initial event:module_event_pass<br>
> [1237215271] unbound[2605:0] info: iterator operate: query <ns.test. A IN><br>
> [1237215271] unbound[2605:0] info: resolving <ns.test. A IN><br>
> [1237215271] unbound[2605:0] info: priming . IN NS<br>
> [1237215271] unbound[2605:0] info: cycle detected <. NS IN><br>
> [1237215271] unbound[2605:0] debug: return error response REFUSED<br>
> [1237215271] unbound[2605:0] debug: iterator[module 0] operate:<br>
> extstate:module_wait_subquery event:module_event_pass<br>
> [1237215271] unbound[2605:0] info: iterator operate: query <. NS IN><br>
> [1237215271] unbound[2605:0] info: processQueryTargets: <. NS IN><br>
> [1237215271] unbound[2605:0] debug: out of query targets -- returning<br>
> SERVFAIL<br>
> [1237215271] unbound[2605:0] debug: return error response SERVFAIL<br>
> [1237215271] unbound[2605:0] debug: iterator[module 0] operate:<br>
> extstate:module_wait_subquery event:module_event_pass<br>
> [1237215271] unbound[2605:0] info: iterator operate: query <test1.test. A<br>
> IN><br>
> [1237215271] unbound[2605:0] info: processQueryTargets: <test1.test. A IN><br>
> [1237215271] unbound[2605:0] debug: Failed to get a delegation, giving up<br>
> [1237215271] unbound[2605:0] debug: return error response SERVFAIL<br>
> [1237215271] unbound[2605:0] debug: cache memory msg=33141 rrset=33040<br>
> infra=1312 val=0<br>
><br>
</div></div>> _______________________________________________<br>
> Unbound-users mailing list<br>
> <a href="mailto:Unbound-users@unbound.net">Unbound-users@unbound.net</a><br>
> <a href="http://unbound.nlnetlabs.nl/mailman/listinfo/unbound-users" target="_blank">http://unbound.nlnetlabs.nl/mailman/listinfo/unbound-users</a><br>
><br>
<font color="#888888"><br>
<br>
<br>
--<br>
Ondřej Surý <<a href="mailto:ondrej@sury.org">ondrej@sury.org</a>><br>
<a href="http://blog.rfc1925.org/" target="_blank">http://blog.rfc1925.org/</a><br>
</font></blockquote></div><br>