<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
<META content="MSHTML 6.00.2900.6049" name=GENERATOR><!-- converted from rtf -->
<STYLE>.EmailQuote {
PADDING-LEFT: 4pt; MARGIN-LEFT: 1pt; BORDER-LEFT: #800000 2px solid
}
</STYLE>
</HEAD>
<BODY>
<DIV dir=ltr align=left><FONT face=Arial color=#0000ff size=2><SPAN
class=276254208-07032011>Hi Wouter,</SPAN></FONT></DIV>
<DIV dir=ltr align=left><FONT face=Arial color=#0000ff size=2><SPAN
class=276254208-07032011></SPAN></FONT><FONT face=Arial color=#0000ff
size=2><SPAN class=276254208-07032011></SPAN></FONT> </DIV>
<DIV dir=ltr align=left><FONT face=Arial color=#0000ff size=2><SPAN
class=276254208-07032011>You are correct, ns2 is not consistent with the other
ns.</SPAN></FONT></DIV>
<DIV dir=ltr align=left><FONT face=Arial color=#0000ff size=2><SPAN
class=276254208-07032011>I knew it had to be something obvious
:s</SPAN></FONT></DIV>
<DIV dir=ltr align=left><FONT face=Arial color=#0000ff size=2><SPAN
class=276254208-07032011></SPAN></FONT> </DIV>
<DIV dir=ltr align=left><FONT face=Arial color=#0000ff size=2><SPAN
class=276254208-07032011>Thanks,</SPAN></FONT></DIV>
<DIV dir=ltr align=left><FONT face=Arial color=#0000ff size=2><SPAN
class=276254208-07032011>Mike</SPAN></FONT></DIV><BR>
<DIV class=OutlookMessageHeader lang=en-us dir=ltr align=left>
<HR tabIndex=-1>
<FONT face=Tahoma size=2><B>From:</B> unbound-users-bounces@NLnetLabs.nl
[mailto:unbound-users-bounces@NLnetLabs.nl] <B>On Behalf Of </B>Slingerland,
Michael van<BR><B>Sent:</B> Sunday, 06 March 2011 23:14<BR><B>To:</B>
unbound-users@unbound.net<BR><B>Subject:</B> [Unbound-users] Inconsistent TTL in
(nxdomain) responses,<BR></FONT><BR></DIV>
<DIV></DIV><FONT face="Arial, sans-serif" size=2>
<DIV>Hi,</DIV>
<DIV> </DIV>
<DIV>I configured a stub-zone for testing a new zone that solely responds
nxdomain with a min ttl of 1 week on all PTR's</DIV>
<DIV>Assumption is that unbound would limit the TTL to the value configured in
unbound.conf that equals 1 day by default.</DIV>
<DIV> </DIV>
<DIV>cache-max-ttl: 86400</DIV>
<DIV> </DIV>
<DIV>I noticed that unbound responds with either the TTL configured in the zone
or the cache-max-ttl. The inconsistency in ttl in the answers seem to be sort of
random to me.</DIV>
<DIV>To be sure only 1 cache wil be used, I set the thread number to 1.</DIV>
<DIV> </DIV>
<DIV>Stub-zone conf</DIV>
<DIV> </DIV>
<DIV>stub-zone:</DIV>
<DIV> name:
"98.95.in-addr.arpa."</DIV>
<DIV> stub-host: ns1.info.nl.</DIV>
<DIV> stub-host: ns2.info.nl.</DIV>
<DIV> stub-host: ns2.info.nl.</DIV>
<DIV> </DIV>
<DIV>Tcpdump shows that the auth nameserver is consulted only once for
95.98.40.50 and returns a min ttl of 1 week.</DIV>
<DIV> </DIV>
<DIV># pkill unbound</DIV>
<DIV># /opt/unbound-1.4.8/sbin/unbound </DIV>
<DIV>[1299446231] unbound[8183:0] warning: increased limit(open files) from 1024
to 8338</DIV>
<DIV># dig @localhost -x 95.98.40.50 </DIV>
<DIV> </DIV>
<DIV>; <<>> DiG 9.4.2-P2 <<>> @localhost -x
95.98.40.50</DIV>
<DIV>; (3 servers found)</DIV>
<DIV>;; global options: printcmd</DIV>
<DIV>;; Got answer:</DIV>
<DIV>;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id:
40349</DIV>
<DIV>;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0</DIV>
<DIV> </DIV>
<DIV>;; QUESTION SECTION:</DIV>
<DIV>;50.40.98.95.in-addr.arpa.
IN PTR</DIV>
<DIV> </DIV>
<DIV>;; AUTHORITY SECTION:</DIV>
<DIV>98.95.in-addr.arpa. 604800
IN SOA ns1.info.nl.
postmaster.info.nl. 2010067876 3600 900 1209600 604800</DIV>
<DIV> </DIV>
<DIV>;; Query time: 531 msec</DIV>
<DIV>;; SERVER: 127.0.0.1#53(127.0.0.1)</DIV>
<DIV>;; WHEN: Sun Mar 6 22:17:15 2011</DIV>
<DIV>;; MSG SIZE rcvd: 100</DIV>
<DIV> </DIV>
<DIV># dig @localhost -x 95.98.40.50 </DIV>
<DIV> </DIV>
<DIV>; <<>> DiG 9.4.2-P2 <<>> @localhost -x
95.98.40.50</DIV>
<DIV>; (3 servers found)</DIV>
<DIV>;; global options: printcmd</DIV>
<DIV>;; Got answer:</DIV>
<DIV>;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id:
62410</DIV>
<DIV>;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0</DIV>
<DIV> </DIV>
<DIV>;; QUESTION SECTION:</DIV>
<DIV>;50.40.98.95.in-addr.arpa.
IN PTR</DIV>
<DIV> </DIV>
<DIV>;; AUTHORITY SECTION:</DIV>
<DIV>98.95.in-addr.arpa. 604798
IN SOA ns1.info.nl.
postmaster.info.nl. 2010067876 3600 900 1209600 604800</DIV>
<DIV> </DIV>
<DIV>;; Query time: 0 msec</DIV>
<DIV>;; SERVER: 127.0.0.1#53(127.0.0.1)</DIV>
<DIV>;; WHEN: Sun Mar 6 22:17:17 2011</DIV>
<DIV>;; MSG SIZE rcvd: 100</DIV>
<DIV> </DIV>
<DIV># dig @localhost -x 95.98.40.51 </DIV>
<DIV> </DIV>
<DIV>; <<>> DiG 9.4.2-P2 <<>> @localhost -x
95.98.40.51</DIV>
<DIV>; (3 servers found)</DIV>
<DIV>;; global options: printcmd</DIV>
<DIV>;; Got answer:</DIV>
<DIV>;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id:
17167</DIV>
<DIV>;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0</DIV>
<DIV> </DIV>
<DIV>;; QUESTION SECTION:</DIV>
<DIV>;51.40.98.95.in-addr.arpa.
IN PTR</DIV>
<DIV> </DIV>
<DIV>;; AUTHORITY SECTION:</DIV>
<DIV>98.95.in-addr.arpa. 86400
IN SOA ns1.info.nl.
postmaster.info.nl. 2010067876 3600 900 1209600 86400</DIV>
<DIV> </DIV>
<DIV>;; Query time: 4 msec</DIV>
<DIV>;; SERVER: 127.0.0.1#53(127.0.0.1)</DIV>
<DIV>;; WHEN: Sun Mar 6 22:17:21 2011</DIV>
<DIV>;; MSG SIZE rcvd: 100</DIV>
<DIV> </DIV>
<DIV># dig @localhost -x 95.98.40.50 </DIV>
<DIV> </DIV>
<DIV>; <<>> DiG 9.4.2-P2 <<>> @localhost -x
95.98.40.50</DIV>
<DIV>; (3 servers found)</DIV>
<DIV>;; global options: printcmd</DIV>
<DIV>;; Got answer:</DIV>
<DIV>;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id:
58939</DIV>
<DIV>;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0</DIV>
<DIV> </DIV>
<DIV>;; QUESTION SECTION:</DIV>
<DIV>;50.40.98.95.in-addr.arpa.
IN PTR</DIV>
<DIV> </DIV>
<DIV>;; AUTHORITY SECTION:</DIV>
<DIV>98.95.in-addr.arpa. 86397
IN SOA ns1.info.nl.
postmaster.info.nl. 2010067876 3600 900 1209600 86400</DIV>
<DIV> </DIV>
<DIV>;; Query time: 0 msec</DIV>
<DIV>;; SERVER: 127.0.0.1#53(127.0.0.1)</DIV>
<DIV>;; WHEN: Sun Mar 6 22:17:24 2011</DIV>
<DIV>;; MSG SIZE rcvd: 100</DIV>
<DIV> </DIV>
<DIV># dig @localhost -x 95.98.40.50 </DIV>
<DIV> </DIV>
<DIV>; <<>> DiG 9.4.2-P2 <<>> @localhost -x
95.98.40.50</DIV>
<DIV>; (3 servers found)</DIV>
<DIV>;; global options: printcmd</DIV>
<DIV>;; Got answer:</DIV>
<DIV>;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id:
45396</DIV>
<DIV>;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0</DIV>
<DIV> </DIV>
<DIV>;; QUESTION SECTION:</DIV>
<DIV>;50.40.98.95.in-addr.arpa.
IN PTR</DIV>
<DIV> </DIV>
<DIV>;; AUTHORITY SECTION:</DIV>
<DIV>98.95.in-addr.arpa. 86393
IN SOA ns1.info.nl.
postmaster.info.nl. 2010067876 3600 900 1209600 86400</DIV>
<DIV> </DIV>
<DIV>;; Query time: 0 msec</DIV>
<DIV>;; SERVER: 127.0.0.1#53(127.0.0.1)</DIV>
<DIV>;; WHEN: Sun Mar 6 22:17:28 2011</DIV>
<DIV>;; MSG SIZE rcvd: 100</DIV>
<DIV> </DIV>
<DIV># dig @localhost -x 95.98.40.53 </DIV>
<DIV> </DIV>
<DIV>; <<>> DiG 9.4.2-P2 <<>> @localhost -x
95.98.40.53</DIV>
<DIV>; (3 servers found)</DIV>
<DIV>;; global options: printcmd</DIV>
<DIV>;; Got answer:</DIV>
<DIV>;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id:
39376</DIV>
<DIV>;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0</DIV>
<DIV> </DIV>
<DIV>;; QUESTION SECTION:</DIV>
<DIV>;53.40.98.95.in-addr.arpa.
IN PTR</DIV>
<DIV> </DIV>
<DIV>;; AUTHORITY SECTION:</DIV>
<DIV>98.95.in-addr.arpa. 86400
IN SOA ns1.info.nl.
postmaster.info.nl. 2010067876 3600 900 1209600 86400</DIV>
<DIV> </DIV>
<DIV>;; Query time: 4 msec</DIV>
<DIV>;; SERVER: 127.0.0.1#53(127.0.0.1)</DIV>
<DIV>;; WHEN: Sun Mar 6 22:17:31 2011</DIV>
<DIV>;; MSG SIZE rcvd: 100</DIV>
<DIV> </DIV>
<DIV># dig @localhost -x 95.98.40.535</DIV>
<DIV> </DIV>
<DIV>; <<>> DiG 9.4.2-P2 <<>> @localhost -x
95.98.40.535</DIV>
<DIV>; (3 servers found)</DIV>
<DIV>;; global options: printcmd</DIV>
<DIV>;; Got answer:</DIV>
<DIV>;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id:
33243</DIV>
<DIV>;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0</DIV>
<DIV> </DIV>
<DIV>;; QUESTION SECTION:</DIV>
<DIV>;535.40.98.95.in-addr.arpa.
IN PTR</DIV>
<DIV> </DIV>
<DIV>;; AUTHORITY SECTION:</DIV>
<DIV>98.95.in-addr.arpa. 86400
IN SOA ns1.info.nl.
postmaster.info.nl. 2010067876 3600 900 1209600 86400</DIV>
<DIV> </DIV>
<DIV>;; Query time: 4 msec</DIV>
<DIV>;; SERVER: 127.0.0.1#53(127.0.0.1)</DIV>
<DIV>;; WHEN: Sun Mar 6 22:17:33 2011</DIV>
<DIV>;; MSG SIZE rcvd: 101</DIV>
<DIV> </DIV>
<DIV># dig @localhost -x 95.98.40.54 </DIV>
<DIV> </DIV>
<DIV>; <<>> DiG 9.4.2-P2 <<>> @localhost -x
95.98.40.54</DIV>
<DIV>; (3 servers found)</DIV>
<DIV>;; global options: printcmd</DIV>
<DIV>;; Got answer:</DIV>
<DIV>;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id:
33576</DIV>
<DIV>;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0</DIV>
<DIV> </DIV>
<DIV>;; QUESTION SECTION:</DIV>
<DIV>;54.40.98.95.in-addr.arpa.
IN PTR</DIV>
<DIV> </DIV>
<DIV>;; AUTHORITY SECTION:</DIV>
<DIV>98.95.in-addr.arpa. 604800
IN SOA ns1.info.nl.
postmaster.info.nl. 2010067876 3600 900 1209600 604800</DIV>
<DIV> </DIV>
<DIV>;; Query time: 3 msec</DIV>
<DIV>;; SERVER: 127.0.0.1#53(127.0.0.1)</DIV>
<DIV>;; WHEN: Sun Mar 6 22:17:38 2011</DIV>
<DIV>;; MSG SIZE rcvd: 100</DIV>
<DIV> </DIV>
<DIV># dig @localhost -x 95.98.40.54 </DIV>
<DIV> </DIV>
<DIV>; <<>> DiG 9.4.2-P2 <<>> @localhost -x
95.98.40.54</DIV>
<DIV>; (3 servers found)</DIV>
<DIV>;; global options: printcmd</DIV>
<DIV>;; Got answer:</DIV>
<DIV>;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id:
14717</DIV>
<DIV>;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0</DIV>
<DIV> </DIV>
<DIV>;; QUESTION SECTION:</DIV>
<DIV>;54.40.98.95.in-addr.arpa.
IN PTR</DIV>
<DIV> </DIV>
<DIV>;; AUTHORITY SECTION:</DIV>
<DIV>98.95.in-addr.arpa. 604797
IN SOA ns1.info.nl.
postmaster.info.nl. 2010067876 3600 900 1209600 604800</DIV>
<DIV> </DIV>
<DIV>;; Query time: 0 msec</DIV>
<DIV>;; SERVER: 127.0.0.1#53(127.0.0.1)</DIV>
<DIV>;; WHEN: Sun Mar 6 22:17:41 2011</DIV>
<DIV>;; MSG SIZE rcvd: 100</DIV>
<DIV> </DIV>
<DIV># dig @localhost -x 95.98.40.53 </DIV>
<DIV> </DIV>
<DIV>; <<>> DiG 9.4.2-P2 <<>> @localhost -x
95.98.40.53</DIV>
<DIV>; (3 servers found)</DIV>
<DIV>;; global options: printcmd</DIV>
<DIV>;; Got answer:</DIV>
<DIV>;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id:
21754</DIV>
<DIV>;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0</DIV>
<DIV> </DIV>
<DIV>;; QUESTION SECTION:</DIV>
<DIV>;53.40.98.95.in-addr.arpa.
IN PTR</DIV>
<DIV> </DIV>
<DIV>;; AUTHORITY SECTION:</DIV>
<DIV>98.95.in-addr.arpa. 604795
IN SOA ns1.info.nl.
postmaster.info.nl. 2010067876 3600 900 1209600 604800</DIV>
<DIV> </DIV>
<DIV>;; Query time: 0 msec</DIV>
<DIV>;; SERVER: 127.0.0.1#53(127.0.0.1)</DIV>
<DIV>;; WHEN: Sun Mar 6 22:17:43 2011</DIV>
<DIV>;; MSG SIZE rcvd: 100</DIV>
<DIV> </DIV>
<DIV># dig @localhost -x 95.98.40.50 </DIV>
<DIV> </DIV>
<DIV>; <<>> DiG 9.4.2-P2 <<>> @localhost -x
95.98.40.50</DIV>
<DIV>; (3 servers found)</DIV>
<DIV>;; global options: printcmd</DIV>
<DIV>;; Got answer:</DIV>
<DIV>;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id:
48501</DIV>
<DIV>;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0</DIV>
<DIV> </DIV>
<DIV>;; QUESTION SECTION:</DIV>
<DIV>;50.40.98.95.in-addr.arpa.
IN PTR</DIV>
<DIV> </DIV>
<DIV>;; AUTHORITY SECTION:</DIV>
<DIV>98.95.in-addr.arpa. 604792
IN SOA ns1.info.nl.
postmaster.info.nl. 2010067876 3600 900 1209600 604800</DIV>
<DIV> </DIV>
<DIV>;; Query time: 0 msec</DIV>
<DIV>;; SERVER: 127.0.0.1#53(127.0.0.1)</DIV>
<DIV>;; WHEN: Sun Mar 6 22:17:46 2011</DIV>
<DIV>;; MSG SIZE rcvd: 100</DIV>
<DIV> </DIV>
<DIV>Is this a bug or am I missing something obvious here?</DIV>
<DIV> </DIV>
<DIV>Thanks,</DIV>
<DIV>Mike</DIV>
<DIV> </DIV></FONT>
<P><SPAN
style="FONT-SIZE: 8pt; FONT-FAMILY: 'Tele-GroteskNor'">********************************************************************************
</SPAN></P>
<P><SPAN style="FONT-SIZE: 8pt; FONT-FAMILY: 'Tele-GroteskNor'"></SPAN></P>
<P><SPAN style="FONT-SIZE: 8pt; FONT-FAMILY: 'Tele-GroteskNor'">N.B.: op (de
inhoud van) deze e-mail is een DISCLAIMER met belangrijke VOORBEHOUDEN van
toepassing: zie http://www.t-mobile.nl/disclaimer </SPAN></P>
<P><SPAN style="FONT-SIZE: 8pt; FONT-FAMILY: 'Tele-GroteskNor'"></SPAN></P>
<P><SPAN style="FONT-SIZE: 8pt; FONT-FAMILY: 'Tele-GroteskNor'">This e-mail and
its contents are subject to a DISCLAIMER with important RESERVATIONS: see
http://www.t-mobile.nl/disclaimer </SPAN></P>
<P><SPAN style="FONT-SIZE: 8pt; FONT-FAMILY: 'Tele-GroteskNor'"></SPAN></P>
<P><SPAN style="FONT-SIZE: 8pt; FONT-FAMILY: 'Tele-GroteskNor'"></SPAN></P>
<P><SPAN
style="FONT-SIZE: 8pt; FONT-FAMILY: 'Tele-GroteskNor'">********************************************************************************
</SPAN></P>
<P><SPAN
style="FONT-SIZE: 8pt; FONT-FAMILY: 'Tele-GroteskNor'"></SPAN> </P></BODY></HTML>