[Unbound-users] Inconsistent problems when resolving www.ratp.fr

[Stephane Bortzmeyer]

On Tue, Dec 11, 2012 at 11:57:29AM +0100,
 Stephane Bortzmeyer <bortzmeyer at nic.fr> wrote 
 a message of 28 lines which said:

> When trying to get the IP address of www.ratp.fr, Unbound has an
> inconsistent behaviour. Sometimes, it works, sometimes it servfails.

After more investigation:

* the domain is delegated to two broken Web load balancers, probably Radware
Alteon (tested with another Alteon boxes)
* a DANE extension is installed in my Firefox and sends requests for
_443._tcp.www.ratp.fr
* The incorrect response to these requests (NXDOMAIN but without a
SOA) seems to trigger the problem