Unbound 1.5.9
A. Schulze
sca at andreasschulze.de
Wed Jun 15 10:23:02 UTC 2016
A. Schulze via Unbound-users:
> - just upgraded and no visible problems so far
Hello,
there is a change in unbound-1.5.9 which make some IPv6 addresses
un-resolvable.
$host 2001:a60:f0b4:e503:2cdb:beff:feaa:880b
unbound <= 1.5.8: success
unbound = 1.5.9: SERVFAIL
One reason may be a missconfiguration found via
http://dnsviz.net/d/4.b.0.f.0.6.a.0.1.0.0.2.ip6.arpa/dnssec/
the non-existence of 0.6.a.0.1.0.0.2.ip6.arpa is prooved by DNSSEC at
a.0.1.0.0.2.ip6.arpa
OK, I tried to workaround that by adding
server:
domain-insecure: "4.b.0.f.0.6.a.0.1.0.0.2.ip6.arpa."
to unbound.conf.
But that does not help. Even it I add "domain-insecure: ip6.arpa" I
still get SERVFAIL.
Any advise?
Thanks
Andreas
More information about the Unbound-users
mailing list