[Unbound-users] again: capsforid let unbound fail to resolv a domain

[W.C.A. Wijngaards]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Andreas,

On 02/27/2015 02:11 PM, A. Schulze wrote:
> 
> Hello,
> 
> after unbound 1.5.2 was announced I was happy to read: - Fix 0x20
> capsforid fallback to omit gratuitous NS and additional section
> changes.
> 
> Yea! Unfortunately that fix still make my unbound not resolve some 
> problematic domains.

The code repository contains fixes for capsforid fallbacks that makes
the cases below resolve.  (This code just missed 1.5.3).

One domain 14.177.82.in-addr.arpa I do not know if it works now
(please try).

Most of the fixes hinge around accepting a smaller number of fallback
(but equal) replies, because no more can be fetched.  The last resort
fallback for nameserver lookup was interfering with the 0x20 fallback,
and also maximum query sent count was interfering with the 0x20 fallback.

Best regards,
   Wouter

> Current case:
> 
> dig @ns1.ansmann.de 111.105.6.217.IN-ADDR.ARPA. ptr +noall +answer 
> +nocomments
> 
> ; <<>> DiG 9.9.4-P2 <<>> @ns1.ansmann.de
> 111.105.6.217.IN-ADDR.ARPA. ptr +noall +answer +nocomments ; (1
> server found) ;; global options: +cmd 111.105.6.217.in-addr.arpa.
> 3600 IN     PTR     mx1.ansmann.de.
> 
> -> notice the lowercase "in-addr.arpa" in the answer section
> 
> other domains I have workarounds for: * 224.182.213.in-addr.arpa *
> 23.216.91.in-addr.arpa * 14.177.82.in-addr.arpa * cn4e.com *
> gc-tinnen.internetcube.net
> 
> The last one is not related to capsforid. The Nameserver 
> ns.internetcube.net[85.214.85.64] serve the label with a ttl 0
> seconds and ns2.internetcube.net don't answer at all. At the end
> unbound to fail to resolve gc-tinnen.internetcube.net.
> 
> Andreas
> 
> _______________________________________________ Unbound-users
> mailing list Unbound-users at unbound.net 
> http://unbound.nlnetlabs.nl/mailman/listinfo/unbound-users

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=tQmZ
-----END PGP SIGNATURE-----