<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<br>
# control which clients are allowed to make (recursive) queries<br>
# to this server. Specify classless netblocks with /size and
action.<br>
# By default everything is refused, except for localhost.<br>
# Choose deny (drop message), refuse (polite error reply),<br>
# allow (recursive ok), <font color="#ff0000"><b>allow_snoop
(recursive and nonrecursive ok)</b></font><br>
# access-control: 0.0.0.0/0 refuse<br>
<font color="#ff0000"><b> access-control: 127.0.0.0/8 allow_snoop</b></font><br>
<br>
<br>
<div class="moz-cite-prefix">On 07/28/2015 04:01 PM, Fongaboo via
Unbound-users wrote:<br>
</div>
<blockquote
cite="mid:alpine.BSF.2.00.1507280852410.76392@helix.wtfayla.net"
type="cite">
<br>
I have unbound running and clients using dig seem not to be able
to trace?
<br>
<br>
<br>
dig +trace <a class="moz-txt-link-abbreviated" href="http://www.amiga.com">www.amiga.com</a>
<br>
<br>
; <<>> DiG 9.6.2-P2 <<>> +trace
<a class="moz-txt-link-abbreviated" href="http://www.amiga.com">www.amiga.com</a>
<br>
;; global options: +cmd
<br>
;; Received 12 bytes from <MY-UNBOUND-IP>#53(MY-UNBOUND-IP)
in 0 ms
<br>
<br>
<br>
However if I hit Google's lookup servers with the same command
from the same client machine, I get the expected response...
<br>
<br>
<br>
dig +trace @8.8.8.8 <a class="moz-txt-link-abbreviated" href="http://www.amiga.com">www.amiga.com</a>
<br>
<br>
; <<>> DiG 9.6.2-P2 <<>> +trace @8.8.8.8
<a class="moz-txt-link-abbreviated" href="http://www.amiga.com">www.amiga.com</a>
<br>
; (1 server found)
<br>
;; global options: +cmd
<br>
. 8647 IN NS
b.root-servers.net.
<br>
. 8647 IN NS
g.root-servers.net.
<br>
. 8647 IN NS
c.root-servers.net.
<br>
. 8647 IN NS
i.root-servers.net.
<br>
. 8647 IN NS
j.root-servers.net.
<br>
. 8647 IN NS
h.root-servers.net.
<br>
. 8647 IN NS
e.root-servers.net.
<br>
. 8647 IN NS
m.root-servers.net.
<br>
. 8647 IN NS
f.root-servers.net.
<br>
. 8647 IN NS
a.root-servers.net.
<br>
. 8647 IN NS
l.root-servers.net.
<br>
. 8647 IN NS
k.root-servers.net.
<br>
. 8647 IN NS
d.root-servers.net.
<br>
;; Received 228 bytes from 8.8.8.8#53(8.8.8.8) in 12 ms
<br>
<br>
com. 172800 IN NS
h.gtld-servers.net.
<br>
com. 172800 IN NS
a.gtld-servers.net.
<br>
com. 172800 IN NS
j.gtld-servers.net.
<br>
com. 172800 IN NS
e.gtld-servers.net.
<br>
com. 172800 IN NS
g.gtld-servers.net.
<br>
com. 172800 IN NS
d.gtld-servers.net.
<br>
com. 172800 IN NS
b.gtld-servers.net.
<br>
com. 172800 IN NS
m.gtld-servers.net.
<br>
com. 172800 IN NS
i.gtld-servers.net.
<br>
com. 172800 IN NS
f.gtld-servers.net.
<br>
com. 172800 IN NS
c.gtld-servers.net.
<br>
com. 172800 IN NS
l.gtld-servers.net.
<br>
com. 172800 IN NS
k.gtld-servers.net.
<br>
;; Received 503 bytes from 192.203.230.10#53(e.root-servers.net)
in 92 ms
<br>
<br>
amiga.com. 172800 IN NS
ns15.domaincontrol.com.
<br>
amiga.com. 172800 IN NS
ns16.domaincontrol.com.
<br>
;; Received 115 bytes from 192.12.94.30#53(e.gtld-servers.net) in
126 ms
<br>
<br>
<a class="moz-txt-link-abbreviated" href="http://www.amiga.com">www.amiga.com</a>. 3600 IN CNAME amiga.com.
<br>
amiga.com. 600 IN A 68.115.249.34
<br>
amiga.com. 3600 IN NS
ns16.domaincontrol.com.
<br>
amiga.com. 3600 IN NS
ns15.domaincontrol.com.
<br>
;; Received 113 bytes from
208.109.255.8#53(ns16.domaincontrol.com) in 24 ms
<br>
<br>
<br>
drill -T <a class="moz-txt-link-abbreviated" href="http://www.amiga.com">www.amiga.com</a> seems to do the job these days. I guess I
am just mostly curious what about Unbound keeps good ol' dig
+trace from working?
<br>
<br>
<br>
TIA
<br>
<br>
<br>
FONG
<br>
<br>
<br>
-------------------------------------------------------------------------
<br>
shot through the heart ooh baby do you know what
that's worth
<br>
and you're to blame ooh heaven is a place
on earth
<br>
darling you give love they say in heaven love
comes first
<br>
a bad name we'll make heaven a place
on earth
<br>
ORBITAL
"Halcyon Live"
<br>
</blockquote>
<br>
<pre class="moz-signature" cols="72">
</pre>
</body>
</html>