<html><head><meta http-equiv="Content-Type" content="text/html charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><div apple-content-edited="true"><div style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><span><div style="font-family: Helvetica; font-size: medium; "><br></div><div style="font-family: Helvetica; font-size: medium; ">Hello Carsten,</div><div style="font-family: Helvetica; font-size: medium; "><br></div><div style="font-family: Helvetica; font-size: medium; ">Thank you so very much. That was absolutely perfect. I would have gladly used option a) or b) but since it's for a server application, it was easier to use option c) as there were also no drawbacks. </div></span></div><br class="Apple-interchange-newline" style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; ">Many thanks again.
</div><div apple-content-edited="true"><br></div><div apple-content-edited="true">Patrick</div>
<br><div><div>On Jul 25, 2014, at 11:27 PM, Carsten Strotmann <<a href="mailto:unbound@strotmann.de">unbound@strotmann.de</a>> wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><br>Hello Patrick,<br><br>pcl-associates writes:<br><br><blockquote type="cite">Hi,<br><br>Unbound seems to be handling failed lookups in a strange manner. Certain lookups provide my external IP as the answer. I'm interpreting that as a failed lookup. If that's the case, then how can I get unbound to provide an actual "failed lookup" response rather than my own external IP address? <br><br>I've looked all over the unbound.conf site and found nothing with respect to this particular problem. The logs don't give me <br><br>Machine w Unbound# nslookup 96.94.160.167.<a href="http://sbl-xbl.spamhaus.org">sbl-xbl.spamhaus.org</a><br>Server:<span class="Apple-tab-span" style="white-space:pre"> </span><span class="Apple-tab-span" style="white-space:pre"> </span>127.0.0.2<br>Address:<span class="Apple-tab-span" style="white-space:pre"> </span>127.0.0.2#53<br><br>Non-authoritative answer:<br>Name:<span class="Apple-tab-span" style="white-space:pre"> </span>96.94.160.167.sbl-xbl.spamhaus.org.aquawest.net<br>Address: 1xx.1xx.1xx.1xx [my external IP address]<br><br></blockquote><br>There is probably nothing wrong with Unbound, but your query tool<br>(nslookup) appends a local domain name ".<a href="http://aquawest.net">aquawest.net</a>" to the<br>query. nslookup, as well as the operating system stub-resolver, appends<br>the local domain and/or any DNS searchlist in case the original query<br>gives a negative response (NXDOMAIN).<br><br>You have a wildcard-record on ".<a href="http://aquawest.net">aquawest.net</a>" <br><br>dig "*.<a href="http://aquawest.net">aquawest.net</a>" +noall +answer<br><br>; <<>> DiG 9.10.0-P1 <<>> *.<a href="http://aquawest.net">aquawest.net</a> +noall +answer<br>;; global options: +cmd<br>*.<a href="http://aquawest.net">aquawest.net</a>. 5992 IN A 109.164.249.126<br><br>that IP address will be returned on all queries that end in<br>".<a href="http://aquawest.net">aquawest.net</a>".<br><br>If you don't want that, you can<br><br>a) make the domain name you query full qualified by ending with a dot: <br>"nslookup 96.94.160.167.<a href="http://sbl-xbl.spamhaus.org">sbl-xbl.spamhaus.org</a>."<br><br>b) use better DNS query tools than "nslookup" ("dig" or "drill" or<br>"unbound-host")<br><br>c) remove the local domain/searchlist from the computer's TCP/IP<br>configuration you're sending the query from.<br><br>-- <br>Carsten Strotmann<br>Email: <a href="mailto:cas@strotmann.de">cas@strotmann.de</a><br>Blog: <a href="http://strotmann.de">strotmann.de</a><br><br></blockquote></div><br></body></html>