<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Type" content="text/xhtml; charset=utf-8">
</head>
<body>
<div style="font-family:sans-serif"><div style="white-space:normal"><p dir="auto">(disclaimer: I work for Quad9.)</p>
<p dir="auto">For clarification on this: Quad9 uses both unbound and PowerDNS recursor (and on some addresses, BIND) to serve queries so it is somewhat random which resolver may receive any particular attempt. I did however try manually to query unbound and PowerDNS recursor separately in our infrastructure, and both are able to resolve the domain in question from the POP in which my attempts were made, so I suspect this is a transient problem.</p>
<p dir="auto">DNSViz shows nothing horribly wrong (<a href="https://dnsviz.net/d/www.startpuntgeldzaken.nl/dnssec/" style="color:#3983C4">https://dnsviz.net/d/www.startpuntgeldzaken.nl/dnssec/</a>) but it is a wildcard entry with some minor warnings. This domain is served exclusively by TransIP.</p>
<p dir="auto">Viktor Dukhovni mentioned in the DNS-OARC chat room today that “I'm now seeing poor results for DANE survey lookups of many .NL domains hosted by TransIP, with Google sometimes returning REFUSED and overall an atypically high SERVFAIL rate.” His remarks were in reference to DoT to auth servers, which Quad9 is currently not using, so I’m not sure if those are related issues, but it does seem that there are anecdotal problems with .nl domains and TransIP authoritative servers so that would be the path you may want to pursue first for additional debugging.</p>
<p dir="auto">JT</p>
<br><p dir="auto">On 5 May 2021, at 12:33, Olivier Benghozi via Unbound-users wrote:</p>
</div>
<blockquote style="border-left:2px solid #777; color:#777; margin:0 0 5px; padding-left:5px"><div id="AF52ABB5-F53B-41DA-800D-1CE338CFDBC5"><div style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Seems to me that this domain has some transient issues, independent of Unbound:<div class=""><br class=""></div><div class=""><br class=""></div><div class=""><br class=""></div><div class=""><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo;" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">% dig <a href="http://www.startpuntgeldzaken.nl" class="">www.startpuntgeldzaken.nl</a> @9.9.9.9</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; min-height: 13px;" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""></span><br class=""></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo;" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">; <<>> DiG 9.10.6 <<>> <a href="http://www.startpuntgeldzaken.nl" class="">www.startpuntgeldzaken.nl</a> @9.9.9.9</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo;" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">;; global options: +cmd</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo;" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">;; connection timed out; no servers could be reached</span></div><div class=""><span style="font-variant-ligatures: no-common-ligatures" class=""><br class=""></span></div><div class=""><span style="font-variant-ligatures: no-common-ligatures" class=""><br class=""></span></div><div class=""><span style="font-variant-ligatures: no-common-ligatures" class=""><br class=""></span></div><div class=""><span style="font-variant-ligatures: no-common-ligatures" class=""><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo;" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">% dig <a href="http://www.startpuntgeldzaken.nl" class="">www.startpuntgeldzaken.nl</a> @8.8.8.8</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; min-height: 13px;" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""></span><br class=""></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo;" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">; <<>> DiG 9.10.6 <<>> <a href="http://www.startpuntgeldzaken.nl" class="">www.startpuntgeldzaken.nl</a> @8.8.8.8</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo;" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">;; global options: +cmd</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo;" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">;; Got answer:</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo;" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 47521</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo;" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; min-height: 13px;" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""></span><br class=""></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo;" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">;; OPT PSEUDOSECTION:</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo;" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">; EDNS: version: 0, flags:; udp: 512</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo;" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">;; QUESTION SECTION:</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo;" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">;<a href="http://www.startpuntgeldzaken.nl" class="">www.startpuntgeldzaken.nl</a>.<span class="Apple-tab-span" style="white-space:pre"> </span>IN<span class="Apple-tab-span" style="white-space:pre"> </span>A</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; min-height: 13px;" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""></span><br class=""></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo;" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">;; Query time: 61 msec</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo;" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">;; SERVER: 8.8.8.8#53(8.8.8.8)</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo;" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">;; WHEN: Wed May 05 21:29:40 CEST 2021</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo;" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">;; MSG SIZE rcvd: 54</span></div><div class=""><span style="font-variant-ligatures: no-common-ligatures" class=""><br class=""></span></div><div class=""><span style="font-variant-ligatures: no-common-ligatures" class=""><br class=""></span></div></span></div><div><br class=""><blockquote type="cite" class=""><div class="">Le 5 mai 2021 à 19:03, Gerben Wierda via Unbound-users <<a href="mailto:unbound-users@lists.nlnetlabs.nl" class="">unbound-users@lists.nlnetlabs.nl</a>> a écrit :</div><br class="Apple-interchange-newline"><div class=""><meta http-equiv="Content-Type" content="text/html; charset=us-ascii" class=""><div style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><div class="">My unbound 1.12.0 will not resolve <a href="http://www.startpuntgeldzaken.nl/" class="">www.startpuntgeldzaken.nl</a> but it does resolve most other domains without a problem</div><div class=""><br class=""></div>May 05 16:54:50 unbound-default[40069:0] info: resolving <a href="http://www.startpuntgeldzaken.nl/" class="">www.startpuntgeldzaken.nl</a>. A IN<br class="">May 05 16:54:50 unbound-default[40069:0] info: processQueryTargets: <a href="http://www.startpuntgeldzaken.nl/" class="">www.startpuntgeldzaken.nl</a>. A IN<br class="">May 05 16:54:50 unbound-default[40069:0] info: sending query: <a href="http://www.startpuntgeldzaken.nl" class="">www.startpuntgeldzaken.nl</a>. A IN<br class="">May 05 16:54:50 unbound-default[40069:0] debug: sending to target: <.> 9.9.9.9#53<br class="">May 05 16:54:50 unbound-default[40069:0] debug: cache memory msg=297432 rrset=298522 infra=30866 val=296000<br class="">May 05 16:54:53 unbound-default[40069:0] debug: tcp error for address 9.9.9.9 port 53<br class="">May 05 16:54:53 unbound-default[40069:0] debug: iterator[module 1] operate: extstate:module_wait_reply event:module_event_noreply<br class="">May 05 16:54:53 unbound-default[40069:0] info: iterator operate: query <a href="http://www.startpuntgeldzaken.nl" class="">www.startpuntgeldzaken.nl</a>. A IN<br class="">May 05 16:54:53 unbound-default[40069:0] info: processQueryTargets: <a href="http://www.startpuntgeldzaken.nl" class="">www.startpuntgeldzaken.nl</a>. A IN<br class="">May 05 16:54:53 unbound-default[40069:0] info: sending query: <a href="http://www.startpuntgeldzaken.nl" class="">www.startpuntgeldzaken.nl</a>. A IN<br class="">May 05 16:54:53 unbound-default[40069:0] debug: sending to target: <.> 149.112.112.112#53<br class="">May 05 16:54:53 unbound-default[40069:0] debug: cache memory msg=297432 rrset=298522 infra=30866 val=296000<br class="">May 05 16:54:55 unbound-default[40069:0] info: 192.168.2.66 <a href="http://www.startpuntgeldzaken.nl" class="">www.startpuntgeldzaken.nl</a>. A IN<br class="">May 05 16:54:55 unbound-default[40069:0] debug: cache memory msg=297432 rrset=298522 infra=30866 val=296000<br class=""><br class=""><div class="">The problem seems to be tcp error, but I have no clue what causes that error. I could use some help in hunting this down.</div><div class=""><br class=""></div><div class="">Note, asking the forwarder directly resolves without problem. So it is the communication between my unbound and the other resolver.</div><div class=""><br class=""></div><div class="">
<div dir="auto" style="text-align: start; text-indent: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><div dir="auto" style="text-align: start; text-indent: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><div dir="auto" style="text-align: start; text-indent: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><div dir="auto" style="text-align: start; text-indent: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><div dir="auto" style="text-align: start; text-indent: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><div dir="auto" style="text-align: start; text-indent: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><div class=""><div class="">Gerben Wierda (<a href="https://www.linkedin.com/in/gerbenwierda" class="">LinkedIn</a>)</div><div style="caret-color: rgb(0, 0, 0); letter-spacing: normal; text-transform: none; white-space: normal; word-spacing: 0px; text-decoration: none; -webkit-text-stroke-width: 0px;" class=""><a href="https://ea.rna.nl/" class="">R&A Enterprise Architecture</a> (main site)<br class="">Book: <a href="https://ea.rna.nl/the-book/" class="">Chess and the Art of Enterprise Architecture</a><br class="">Book: <a href="https://ea.rna.nl/the-book-edition-iii/" class="">Mastering ArchiMate</a><br class=""></div></div></div></div></div></div></div></div>
</div>
<br class=""></div></div></blockquote></div><br class=""></div></div></div></blockquote>
<div style="white-space:normal"><blockquote style="border-left:2px solid #777; color:#777; margin:0 0 5px; padding-left:5px">
</blockquote></div>
</div>
</body>
</html>