<html><head><meta http-equiv="Content-Type" content="text/html; charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><div class=""><br class=""></div><div class=""> Of the three authoritative servers, <a href="http://ns21.kpmedia.org" class="">ns21.kpmedia.org</a> is responding with a REFUSED response.</div><div class=""><br class=""></div><div class=""><div class="">$ dig <a href="http://www.heroesonline.com" class="">www.heroesonline.com</a> @ns21.kpmedia.org</div><div class=""><br class=""></div><div class="">; <<>> DiG 9.10.6 <<>> <a href="http://www.heroesonline.com" class="">www.heroesonline.com</a> @ns21.kpmedia.org</div><div class="">;; global options: +cmd</div><div class="">;; Got answer:</div><div class="">;; ->>HEADER<<- opcode: QUERY, status: REFUSED, id: 506</div><div class="">;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1</div><div class="">;; WARNING: recursion requested but not available</div><div class=""><br class=""></div><div class="">;; OPT PSEUDOSECTION:</div><div class="">; EDNS: version: 0, flags:; udp: 4096</div><div class="">;; QUESTION SECTION:</div><div class="">;<a href="http://www.heroesonline.com" class="">www.heroesonline.com</a>.<span class="Apple-tab-span" style="white-space:pre"> </span>IN<span class="Apple-tab-span" style="white-space:pre"> </span>A</div><div class=""><br class=""></div><div class="">;; Query time: 348 msec</div><div class="">;; SERVER: 37.61.235.107#53(37.61.235.107)</div><div class="">;; WHEN: Wed May 01 20:40:38 PDT 2019</div><div class="">;; MSG SIZE rcvd: 49</div></div><div class=""><br class=""></div><div class=""><br class=""></div><div class=""><br class=""></div><div class=""> So 33% of lookups will fail. It is possible that Google retries different NS servers, if a REFUSED is received. Or perhaps they hit the two working servers, and are just returning the cached result.</div><div class=""><br class=""></div><div class=""> Either way, this is not specifically an Unbound issue, as the REFUSED behaviour can be seen anywhere on the Internet.</div><div class=""> </div><div class=""><br class=""></div><br class=""><div><br class=""><blockquote type="cite" class=""><div class="">On May 1, 2019, at 1:14 PM, Todd Blake via Unbound-users <<a href="mailto:unbound-users@nlnetlabs.nl" class="">unbound-users@nlnetlabs.nl</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div class="gmail_default" style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><font face="verdana, sans-serif" class=""> <span class="Apple-converted-space"> </span><a href="http://heroesonline.com/" class="">heroesonline.com</a><span class="Apple-converted-space"> </span>name server<span class="Apple-converted-space"> </span><a href="http://ns21.kpmedia.org/" class="">ns21.kpmedia.org</a>.</font></div><div class="gmail_default" style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><font face="verdana, sans-serif" class=""> <span class="Apple-converted-space"> </span><a href="http://heroesonline.com/" class="">heroesonline.com</a><span class="Apple-converted-space"> </span>name server<span class="Apple-converted-space"> </span><a href="http://ns19.kpmedia.org/" class="">ns19.kpmedia.org</a>.</font></div><div class="gmail_default" style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><font face="verdana, sans-serif" class=""> <span class="Apple-converted-space"> </span><a href="http://heroesonline.com/" class="">heroesonline.com</a><span class="Apple-converted-space"> </span>name server<span class="Apple-converted-space"> </span><a href="http://ns20.kpmedia.org/" class="">ns20.kpmedia.org</a>.</font></div><div class="gmail_default" style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><font face="verdana, sans-serif" class=""> root@stretch:~# host<span class="Apple-converted-space"> </span><a href="http://ns21.kpmedia.org/" class="">ns21.kpmedia.org</a>. 8.8.8.8</font></div><div class="gmail_default" style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><font face="verdana, sans-serif" class=""> Using domain server:</font></div><div class="gmail_default" style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><font face="verdana, sans-serif" class=""> Name: 8.8.8.8</font></div><div class="gmail_default" style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><font face="verdana, sans-serif" class=""> Address: 8.8.8.8#53</font></div><div class="gmail_default" style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><font face="verdana, sans-serif" class=""> Aliases:</font></div></div></blockquote></div><br class=""></body></html>