<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META content=text/html;charset=iso-8859-1 http-equiv=Content-Type>
<META name=GENERATOR content="MSHTML 11.00.9600.17280"></HEAD>
<BODY id=MailContainerBody
style="PADDING-TOP: 15px; PADDING-LEFT: 10px; PADDING-RIGHT: 10px" leftMargin=0
topMargin=0 CanvasTabStop="true" name="Compose message area">
<DIV><FONT face=Calibri><SPAN
style="WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FLOAT: none; COLOR: rgb(0,0,0); FONT: 12px/17px Verdana, Arial, Helvetica, sans-serif; DISPLAY: inline !important; LETTER-SPACING: normal; BACKGROUND-COLOR: rgb(234,234,234); TEXT-INDENT: 0px; -webkit-text-stroke-width: 0px">Synopsis:
having issues where unbound stops responding properly to lookups (doesn't report
error, just gives bad info) until I restart it.</SPAN><BR
style="WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; COLOR: rgb(0,0,0); FONT: 12px/17px Verdana, Arial, Helvetica, sans-serif; LETTER-SPACING: normal; BACKGROUND-COLOR: rgb(234,234,234); TEXT-INDENT: 0px; -webkit-text-stroke-width: 0px"><BR
style="WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; COLOR: rgb(0,0,0); FONT: 12px/17px Verdana, Arial, Helvetica, sans-serif; LETTER-SPACING: normal; BACKGROUND-COLOR: rgb(234,234,234); TEXT-INDENT: 0px; -webkit-text-stroke-width: 0px"><SPAN
style="WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FLOAT: none; COLOR: rgb(0,0,0); FONT: 12px/17px Verdana, Arial, Helvetica, sans-serif; DISPLAY: inline !important; LETTER-SPACING: normal; BACKGROUND-COLOR: rgb(234,234,234); TEXT-INDENT: 0px; -webkit-text-stroke-width: 0px">Background:</SPAN><BR
style="WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; COLOR: rgb(0,0,0); FONT: 12px/17px Verdana, Arial, Helvetica, sans-serif; LETTER-SPACING: normal; BACKGROUND-COLOR: rgb(234,234,234); TEXT-INDENT: 0px; -webkit-text-stroke-width: 0px"><BR
style="WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; COLOR: rgb(0,0,0); FONT: 12px/17px Verdana, Arial, Helvetica, sans-serif; LETTER-SPACING: normal; BACKGROUND-COLOR: rgb(234,234,234); TEXT-INDENT: 0px; -webkit-text-stroke-width: 0px"><SPAN
style="WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FLOAT: none; COLOR: rgb(0,0,0); FONT: 12px/17px Verdana, Arial, Helvetica, sans-serif; DISPLAY: inline !important; LETTER-SPACING: normal; BACKGROUND-COLOR: rgb(234,234,234); TEXT-INDENT: 0px; -webkit-text-stroke-width: 0px">I
recently upgraded pfsense to 2.1 and switched to Unbound for the DNS resolver
because I needed to do resolving directly instead of forwarding due to mail RBL
service query overloading. Had no problem getting Unbound to work
initially, but after a day I started getting a lot of malformed MX record
lookups on my mail server and when I queried the records I was seeing a lot of
null mx records, but doing a lookup on an external DNS service showed normal MX
records. I disabled DNSSEC thinking it was related to that and the problem
*seemed* to go away. However today the same problem started happening
again and restarting the Unbound service has resolved. When the problem
happens, Unbound reports bad info for the lookup... below is a lookup for
navyfederal.org MX and notice is returns a null MX</SPAN><BR
style="WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; COLOR: rgb(0,0,0); FONT: 12px/17px Verdana, Arial, Helvetica, sans-serif; LETTER-SPACING: normal; BACKGROUND-COLOR: rgb(234,234,234); TEXT-INDENT: 0px; -webkit-text-stroke-width: 0px"><BR
style="WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; COLOR: rgb(0,0,0); FONT: 12px/17px Verdana, Arial, Helvetica, sans-serif; LETTER-SPACING: normal; BACKGROUND-COLOR: rgb(234,234,234); TEXT-INDENT: 0px; -webkit-text-stroke-width: 0px"><PRE style="FONT-VARIANT: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: normal; COLOR: rgb(0,0,0); FONT-STYLE: normal; LETTER-SPACING: normal; LINE-HEIGHT: 17px; BACKGROUND-COLOR: rgb(234,234,234); TEXT-INDENT: 0px; -webkit-text-stroke-width: 0px"><BR>>> dig @192.168.100.1 -t mx navyfederal.org.<BR><BR>; <<>> DiG 9.9.5-3-Ubuntu <<>> @192.168.100.1 -t mx navyfederal.org.<BR>; (1 server found)<BR>;; global options: +cmd<BR>;; Got answer:<BR>;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 17827<BR>;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 1<BR><BR>;; OPT PSEUDOSECTION:<BR>; EDNS: version: 0, flags:; udp: 4096<BR>;; QUESTION SECTION:<BR>;navyfederal.org. IN MX<BR><BR>;; ANSWER SECTION:<BR>navyfederal.org. 261 IN MX 0 .<BR><BR>;; AUTHORITY SECTION:<BR>org. 22284 IN NS ns.buydomains.com.<BR>org. 22284 IN NS this-domain-for-sale.com.<BR><BR>;; Query time: 0 msec<BR>;; SERVER: 192.168.100.1#53(192.168.100.1)<BR>;; WHEN: Wed Sep 24 12:29:47 EDT 2014<BR>;; MSG SIZE rcvd: 125<BR></PRE><BR
style="WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; COLOR: rgb(0,0,0); FONT: 12px/17px Verdana, Arial, Helvetica, sans-serif; LETTER-SPACING: normal; BACKGROUND-COLOR: rgb(234,234,234); TEXT-INDENT: 0px; -webkit-text-stroke-width: 0px"><BR
style="WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; COLOR: rgb(0,0,0); FONT: 12px/17px Verdana, Arial, Helvetica, sans-serif; LETTER-SPACING: normal; BACKGROUND-COLOR: rgb(234,234,234); TEXT-INDENT: 0px; -webkit-text-stroke-width: 0px"><BR
style="WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; COLOR: rgb(0,0,0); FONT: 12px/17px Verdana, Arial, Helvetica, sans-serif; LETTER-SPACING: normal; BACKGROUND-COLOR: rgb(234,234,234); TEXT-INDENT: 0px; -webkit-text-stroke-width: 0px"><SPAN
style="WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FLOAT: none; COLOR: rgb(0,0,0); FONT: 12px/17px Verdana, Arial, Helvetica, sans-serif; DISPLAY: inline !important; LETTER-SPACING: normal; BACKGROUND-COLOR: rgb(234,234,234); TEXT-INDENT: 0px; -webkit-text-stroke-width: 0px">Restarting
Unbound and repeating now gives:</SPAN><BR
style="WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; COLOR: rgb(0,0,0); FONT: 12px/17px Verdana, Arial, Helvetica, sans-serif; LETTER-SPACING: normal; BACKGROUND-COLOR: rgb(234,234,234); TEXT-INDENT: 0px; -webkit-text-stroke-width: 0px"><BR
style="WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; COLOR: rgb(0,0,0); FONT: 12px/17px Verdana, Arial, Helvetica, sans-serif; LETTER-SPACING: normal; BACKGROUND-COLOR: rgb(234,234,234); TEXT-INDENT: 0px; -webkit-text-stroke-width: 0px"><PRE style="FONT-VARIANT: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: normal; COLOR: rgb(0,0,0); FONT-STYLE: normal; LETTER-SPACING: normal; LINE-HEIGHT: 17px; BACKGROUND-COLOR: rgb(234,234,234); TEXT-INDENT: 0px; -webkit-text-stroke-width: 0px"><BR>>> dig @192.168.100.1 -t mx navyfederal.org.<BR><BR>; <<>> DiG 9.9.5-3-Ubuntu <<>> @192.168.100.1 -t mx navyfederal.org.<BR>; (1 server found)<BR>;; global options: +cmd<BR>;; Got answer:<BR>;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 14040<BR>;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 3, ADDITIONAL: 2<BR><BR>;; OPT PSEUDOSECTION:<BR>; EDNS: version: 0, flags:; udp: 4096<BR>;; QUESTION SECTION:<BR>;navyfederal.org. IN MX<BR><BR>;; ANSWER SECTION:<BR>navyfederal.org. 300 IN MX 10 navyfederal-org.mail.protection.outlook.com.<BR><BR>;; AUTHORITY SECTION:<BR>navyfederal.org. 500 IN NS ns1.navyfedcu.org.<BR>navyfederal.org. 500 IN NS ns.navyfedcu.org.<BR>navyfederal.org. 500 IN NS ns1.navyfederal.org.<BR><BR>;; ADDITIONAL SECTION:<BR>ns1.navyfederal.org. 500 IN A 4.31.59.245<BR><BR>;; Query time: 41 msec<BR>;; SERVER: 192.168.100.1#53(192.168.100.1)<BR>;; WHEN: Wed Sep 24 12:35:48 EDT 2014<BR>;; MSG SIZE rcvd: 182<BR></PRE><BR
style="WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; COLOR: rgb(0,0,0); FONT: 12px/17px Verdana, Arial, Helvetica, sans-serif; LETTER-SPACING: normal; BACKGROUND-COLOR: rgb(234,234,234); TEXT-INDENT: 0px; -webkit-text-stroke-width: 0px"><BR
style="WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; COLOR: rgb(0,0,0); FONT: 12px/17px Verdana, Arial, Helvetica, sans-serif; LETTER-SPACING: normal; BACKGROUND-COLOR: rgb(234,234,234); TEXT-INDENT: 0px; -webkit-text-stroke-width: 0px"><SPAN
style="WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FLOAT: none; COLOR: rgb(0,0,0); FONT: 12px/17px Verdana, Arial, Helvetica, sans-serif; DISPLAY: inline !important; LETTER-SPACING: normal; BACKGROUND-COLOR: rgb(234,234,234); TEXT-INDENT: 0px; -webkit-text-stroke-width: 0px">I'm
not seeing anything obvious in the Unbound logs, so any help how to troubleshoot
this is greatly appreciated. </SPAN></FONT></DIV></BODY></HTML>