[Unbound-users] Problems with dipmap.com

[W.C.A. Wijngaards]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 09/19/2011 03:43 PM, Attila Nagy wrote:
> On 09/19/11 15:34, W.C.A. Wijngaards wrote:
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA1
>>
>> On 09/19/2011 03:27 PM, Attila Nagy wrote:
>>> No, it's a nearly up to date trunk (I can give exact subversion revision).
>>> Here's the verbose log:
>>> Sep 19 15:16:40 cns01d unbound: [61501:2] info: validator operate: query
>>> tirparkolo.dipmap.com. A IN
>> ..
>>
>>> Only ns.dipmap.com is accessible, the others don't answer.
>> So it says:
>> Sep 19 15:16:40 cns01d unbound: [61501:2] debug:   ADDR_LAME  ip4
>> 202.133.227.43 port 53 (len 16)
>>
>> So the only working one, ns.dipmap is LAME.  That flag means that it
>> seems to not serve the zone at all.  It serves upwards referral (like
>> BIND does) for the zones that it does not have.  This was seen and
>> cached for dipmap.com for the .43 IP address.  The host cache times out
>> in 15 minutes.
>>
> Indeed, it looks very lame. My only problem is that the user says "it's
> working elsewhere".
> For example google&opendns serves it right.

I do not understand how they continue to query LAME servers.  You are
not supposed to do so.  BIND would not do so too.  Is it that it only
gives lame answers to some queries or some queriers?  If it would not
give Lame answers, then it would work with unbound (and the parent-child
disagreement would not be an issue).

Best regards, Wouter
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
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=C8hD
-----END PGP SIGNATURE-----