<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Exchange Server">
<!-- converted from rtf -->
<style><!-- .EmailQuote { margin-left: 1pt; padding-left: 4pt; border-left: #800000 2px solid; } --></style>
</head>
<body>
<font face="Arial, sans-serif" size="2">
<div>Hi,</div>
<div> </div>
<div>I configured a stub-zone for testing a new zone that solely responds nxdomain with a min ttl of 1 week on all PTR's</div>
<div>Assumption is that unbound would limit the TTL to the value configured in unbound.conf that equals 1 day by default.</div>
<div> </div>
<div>cache-max-ttl: 86400</div>
<div> </div>
<div>I noticed that unbound responds with either the TTL configured in the zone or the cache-max-ttl. The inconsistency in ttl in the answers seem to be sort of random to me.</div>
<div>To be sure only 1 cache wil be used, I set the thread number to 1.</div>
<div> </div>
<div>Stub-zone conf</div>
<div> </div>
<div>stub-zone:</div>
<div> name: "98.95.in-addr.arpa."</div>
<div> stub-host: ns1.info.nl.</div>
<div> stub-host: ns2.info.nl.</div>
<div> stub-host: ns2.info.nl.</div>
<div> </div>
<div>Tcpdump shows that the auth nameserver is consulted only once for 95.98.40.50 and returns a min ttl of 1 week.</div>
<div> </div>
<div># pkill unbound</div>
<div># /opt/unbound-1.4.8/sbin/unbound </div>
<div>[1299446231] unbound[8183:0] warning: increased limit(open files) from 1024 to 8338</div>
<div># dig @localhost -x 95.98.40.50 </div>
<div> </div>
<div>; <<>> DiG 9.4.2-P2 <<>> @localhost -x 95.98.40.50</div>
<div>; (3 servers found)</div>
<div>;; global options: printcmd</div>
<div>;; Got answer:</div>
<div>;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 40349</div>
<div>;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0</div>
<div> </div>
<div>;; QUESTION SECTION:</div>
<div>;50.40.98.95.in-addr.arpa. IN PTR</div>
<div> </div>
<div>;; AUTHORITY SECTION:</div>
<div>98.95.in-addr.arpa. 604800 IN SOA ns1.info.nl. postmaster.info.nl. 2010067876 3600 900 1209600 604800</div>
<div> </div>
<div>;; Query time: 531 msec</div>
<div>;; SERVER: 127.0.0.1#53(127.0.0.1)</div>
<div>;; WHEN: Sun Mar 6 22:17:15 2011</div>
<div>;; MSG SIZE rcvd: 100</div>
<div> </div>
<div># dig @localhost -x 95.98.40.50 </div>
<div> </div>
<div>; <<>> DiG 9.4.2-P2 <<>> @localhost -x 95.98.40.50</div>
<div>; (3 servers found)</div>
<div>;; global options: printcmd</div>
<div>;; Got answer:</div>
<div>;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 62410</div>
<div>;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0</div>
<div> </div>
<div>;; QUESTION SECTION:</div>
<div>;50.40.98.95.in-addr.arpa. IN PTR</div>
<div> </div>
<div>;; AUTHORITY SECTION:</div>
<div>98.95.in-addr.arpa. 604798 IN SOA ns1.info.nl. postmaster.info.nl. 2010067876 3600 900 1209600 604800</div>
<div> </div>
<div>;; Query time: 0 msec</div>
<div>;; SERVER: 127.0.0.1#53(127.0.0.1)</div>
<div>;; WHEN: Sun Mar 6 22:17:17 2011</div>
<div>;; MSG SIZE rcvd: 100</div>
<div> </div>
<div># dig @localhost -x 95.98.40.51 </div>
<div> </div>
<div>; <<>> DiG 9.4.2-P2 <<>> @localhost -x 95.98.40.51</div>
<div>; (3 servers found)</div>
<div>;; global options: printcmd</div>
<div>;; Got answer:</div>
<div>;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 17167</div>
<div>;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0</div>
<div> </div>
<div>;; QUESTION SECTION:</div>
<div>;51.40.98.95.in-addr.arpa. IN PTR</div>
<div> </div>
<div>;; AUTHORITY SECTION:</div>
<div>98.95.in-addr.arpa. 86400 IN SOA ns1.info.nl. postmaster.info.nl. 2010067876 3600 900 1209600 86400</div>
<div> </div>
<div>;; Query time: 4 msec</div>
<div>;; SERVER: 127.0.0.1#53(127.0.0.1)</div>
<div>;; WHEN: Sun Mar 6 22:17:21 2011</div>
<div>;; MSG SIZE rcvd: 100</div>
<div> </div>
<div># dig @localhost -x 95.98.40.50 </div>
<div> </div>
<div>; <<>> DiG 9.4.2-P2 <<>> @localhost -x 95.98.40.50</div>
<div>; (3 servers found)</div>
<div>;; global options: printcmd</div>
<div>;; Got answer:</div>
<div>;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 58939</div>
<div>;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0</div>
<div> </div>
<div>;; QUESTION SECTION:</div>
<div>;50.40.98.95.in-addr.arpa. IN PTR</div>
<div> </div>
<div>;; AUTHORITY SECTION:</div>
<div>98.95.in-addr.arpa. 86397 IN SOA ns1.info.nl. postmaster.info.nl. 2010067876 3600 900 1209600 86400</div>
<div> </div>
<div>;; Query time: 0 msec</div>
<div>;; SERVER: 127.0.0.1#53(127.0.0.1)</div>
<div>;; WHEN: Sun Mar 6 22:17:24 2011</div>
<div>;; MSG SIZE rcvd: 100</div>
<div> </div>
<div># dig @localhost -x 95.98.40.50 </div>
<div> </div>
<div>; <<>> DiG 9.4.2-P2 <<>> @localhost -x 95.98.40.50</div>
<div>; (3 servers found)</div>
<div>;; global options: printcmd</div>
<div>;; Got answer:</div>
<div>;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 45396</div>
<div>;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0</div>
<div> </div>
<div>;; QUESTION SECTION:</div>
<div>;50.40.98.95.in-addr.arpa. IN PTR</div>
<div> </div>
<div>;; AUTHORITY SECTION:</div>
<div>98.95.in-addr.arpa. 86393 IN SOA ns1.info.nl. postmaster.info.nl. 2010067876 3600 900 1209600 86400</div>
<div> </div>
<div>;; Query time: 0 msec</div>
<div>;; SERVER: 127.0.0.1#53(127.0.0.1)</div>
<div>;; WHEN: Sun Mar 6 22:17:28 2011</div>
<div>;; MSG SIZE rcvd: 100</div>
<div> </div>
<div># dig @localhost -x 95.98.40.53 </div>
<div> </div>
<div>; <<>> DiG 9.4.2-P2 <<>> @localhost -x 95.98.40.53</div>
<div>; (3 servers found)</div>
<div>;; global options: printcmd</div>
<div>;; Got answer:</div>
<div>;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 39376</div>
<div>;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0</div>
<div> </div>
<div>;; QUESTION SECTION:</div>
<div>;53.40.98.95.in-addr.arpa. IN PTR</div>
<div> </div>
<div>;; AUTHORITY SECTION:</div>
<div>98.95.in-addr.arpa. 86400 IN SOA ns1.info.nl. postmaster.info.nl. 2010067876 3600 900 1209600 86400</div>
<div> </div>
<div>;; Query time: 4 msec</div>
<div>;; SERVER: 127.0.0.1#53(127.0.0.1)</div>
<div>;; WHEN: Sun Mar 6 22:17:31 2011</div>
<div>;; MSG SIZE rcvd: 100</div>
<div> </div>
<div># dig @localhost -x 95.98.40.535</div>
<div> </div>
<div>; <<>> DiG 9.4.2-P2 <<>> @localhost -x 95.98.40.535</div>
<div>; (3 servers found)</div>
<div>;; global options: printcmd</div>
<div>;; Got answer:</div>
<div>;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 33243</div>
<div>;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0</div>
<div> </div>
<div>;; QUESTION SECTION:</div>
<div>;535.40.98.95.in-addr.arpa. IN PTR</div>
<div> </div>
<div>;; AUTHORITY SECTION:</div>
<div>98.95.in-addr.arpa. 86400 IN SOA ns1.info.nl. postmaster.info.nl. 2010067876 3600 900 1209600 86400</div>
<div> </div>
<div>;; Query time: 4 msec</div>
<div>;; SERVER: 127.0.0.1#53(127.0.0.1)</div>
<div>;; WHEN: Sun Mar 6 22:17:33 2011</div>
<div>;; MSG SIZE rcvd: 101</div>
<div> </div>
<div># dig @localhost -x 95.98.40.54 </div>
<div> </div>
<div>; <<>> DiG 9.4.2-P2 <<>> @localhost -x 95.98.40.54</div>
<div>; (3 servers found)</div>
<div>;; global options: printcmd</div>
<div>;; Got answer:</div>
<div>;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 33576</div>
<div>;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0</div>
<div> </div>
<div>;; QUESTION SECTION:</div>
<div>;54.40.98.95.in-addr.arpa. IN PTR</div>
<div> </div>
<div>;; AUTHORITY SECTION:</div>
<div>98.95.in-addr.arpa. 604800 IN SOA ns1.info.nl. postmaster.info.nl. 2010067876 3600 900 1209600 604800</div>
<div> </div>
<div>;; Query time: 3 msec</div>
<div>;; SERVER: 127.0.0.1#53(127.0.0.1)</div>
<div>;; WHEN: Sun Mar 6 22:17:38 2011</div>
<div>;; MSG SIZE rcvd: 100</div>
<div> </div>
<div># dig @localhost -x 95.98.40.54 </div>
<div> </div>
<div>; <<>> DiG 9.4.2-P2 <<>> @localhost -x 95.98.40.54</div>
<div>; (3 servers found)</div>
<div>;; global options: printcmd</div>
<div>;; Got answer:</div>
<div>;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14717</div>
<div>;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0</div>
<div> </div>
<div>;; QUESTION SECTION:</div>
<div>;54.40.98.95.in-addr.arpa. IN PTR</div>
<div> </div>
<div>;; AUTHORITY SECTION:</div>
<div>98.95.in-addr.arpa. 604797 IN SOA ns1.info.nl. postmaster.info.nl. 2010067876 3600 900 1209600 604800</div>
<div> </div>
<div>;; Query time: 0 msec</div>
<div>;; SERVER: 127.0.0.1#53(127.0.0.1)</div>
<div>;; WHEN: Sun Mar 6 22:17:41 2011</div>
<div>;; MSG SIZE rcvd: 100</div>
<div> </div>
<div># dig @localhost -x 95.98.40.53 </div>
<div> </div>
<div>; <<>> DiG 9.4.2-P2 <<>> @localhost -x 95.98.40.53</div>
<div>; (3 servers found)</div>
<div>;; global options: printcmd</div>
<div>;; Got answer:</div>
<div>;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 21754</div>
<div>;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0</div>
<div> </div>
<div>;; QUESTION SECTION:</div>
<div>;53.40.98.95.in-addr.arpa. IN PTR</div>
<div> </div>
<div>;; AUTHORITY SECTION:</div>
<div>98.95.in-addr.arpa. 604795 IN SOA ns1.info.nl. postmaster.info.nl. 2010067876 3600 900 1209600 604800</div>
<div> </div>
<div>;; Query time: 0 msec</div>
<div>;; SERVER: 127.0.0.1#53(127.0.0.1)</div>
<div>;; WHEN: Sun Mar 6 22:17:43 2011</div>
<div>;; MSG SIZE rcvd: 100</div>
<div> </div>
<div># dig @localhost -x 95.98.40.50 </div>
<div> </div>
<div>; <<>> DiG 9.4.2-P2 <<>> @localhost -x 95.98.40.50</div>
<div>; (3 servers found)</div>
<div>;; global options: printcmd</div>
<div>;; Got answer:</div>
<div>;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 48501</div>
<div>;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0</div>
<div> </div>
<div>;; QUESTION SECTION:</div>
<div>;50.40.98.95.in-addr.arpa. IN PTR</div>
<div> </div>
<div>;; AUTHORITY SECTION:</div>
<div>98.95.in-addr.arpa. 604792 IN SOA ns1.info.nl. postmaster.info.nl. 2010067876 3600 900 1209600 604800</div>
<div> </div>
<div>;; Query time: 0 msec</div>
<div>;; SERVER: 127.0.0.1#53(127.0.0.1)</div>
<div>;; WHEN: Sun Mar 6 22:17:46 2011</div>
<div>;; MSG SIZE rcvd: 100</div>
<div> </div>
<div>Is this a bug or am I missing something obvious here?</div>
<div> </div>
<div>Thanks,</div>
<div>Mike</div>
<div> </div>
</font>
<p><span style="font-family:'Tele-GroteskNor';font-size:8pt;">******************************************************************************** </span></p>
<p><span style="font-family:'Tele-GroteskNor';font-size:8pt;"> </span></p>
<p><span style="font-family:'Tele-GroteskNor';font-size:8pt;">N.B.: op (de inhoud van) deze e-mail is een DISCLAIMER met belangrijke VOORBEHOUDEN van toepassing: zie http://www.t-mobile.nl/disclaimer </span></p>
<p><span style="font-family:'Tele-GroteskNor';font-size:8pt;"> </span></p>
<p><span style="font-family:'Tele-GroteskNor';font-size:8pt;">This e-mail and its contents are subject to a DISCLAIMER with important RESERVATIONS: see http://www.t-mobile.nl/disclaimer </span></p>
<p><span style="font-family:'Tele-GroteskNor';font-size:8pt;"> </span></p>
<p><span style="font-family:'Tele-GroteskNor';font-size:8pt;"> </span></p>
<p><span style="font-family:'Tele-GroteskNor';font-size:8pt;">******************************************************************************** </span></p>
<p><span style="font-family:'Tele-GroteskNor';font-size:8pt;"> </span></p></body>
</html>