resolving yahoodns.net. fails

[A. Schulze]

Am 21.04.20 um 15:46 schrieb Michael Ströder via Unbound-users:

> I currently see problems resolving domain yahoodns.net through unbound.
> It perfectly works with PowerDNS recursor.

likely it's not only unbounds fault:

$ zonemaster-cli yahoodns.net
Seconds Level     Message
======= ========= =======
  21.71 NOTICE    Nameserver ns5.yahoo.com/2406:2000:ff60::53 did not respond to NS query.
  71.99 ERROR     Nameserver ns5.yahoo.com/2406:2000:ff60::53 not accessible over UDP on port 53.
  82.01 ERROR     Nameserver ns1.yahoo.com/2001:4998:130::1001 not accessible over TCP on port 53.
  92.02 ERROR     Nameserver ns1.yahoo.com/68.180.131.16 not accessible over TCP on port 53.
 116.30 ERROR     Nameserver ns5.yahoo.com/202.165.97.53 not accessible over TCP on port 53.
 126.32 ERROR     Nameserver ns5.yahoo.com/2406:2000:ff60::53 not accessible over TCP on port 53.
 129.73 WARNING   Nameserver ns5.yahoo.com/2406:2000:ff60::53 did not respond.
 129.73 WARNING   Nameserver ns5.yahoo.com/2406:2000:ff60::53 did not respond.
 129.76 WARNING   Nameserver ns5.yahoo.com/2406:2000:ff60::53 did not respond.
 129.76 WARNING   Nameserver ns5.yahoo.com/2406:2000:ff60::53 did not respond.
 129.79 WARNING   Nameserver ns5.yahoo.com/2406:2000:ff60::53 did not respond.
 129.79 WARNING   Nameserver ns5.yahoo.com/2406:2000:ff60::53 did not respond.
 129.82 WARNING   Nameserver ns5.yahoo.com/2406:2000:ff60::53 did not respond.
 129.82 WARNING   Nameserver ns5.yahoo.com/2406:2000:ff60::53 did not respond.
 130.33 WARNING   Nameserver ns5.yahoo.com/2406:2000:ff60::53 did not respond.
 130.34 WARNING   Nameserver ns5.yahoo.com/2406:2000:ff60::53 did not respond.
 130.39 NOTICE    There are neither DS nor DNSKEY records for the zone.
 130.40 NOTICE    The zone is not signed with DNSSEC.
 130.83 WARNING   No response from ns5.yahoo.com/2406:2000:ff60::53 asking for xn--nameservertest.iis.se.
 130.83 WARNING   No response from ns5.yahoo.com/2406:2000:ff60::53 asking for xn--nameservertest.icann.org.
 130.84 WARNING   No response from ns5.yahoo.com/2406:2000:ff60::53 asking for xn--nameservertest.ripe.net.
 144.36 WARNING   No response from ns5.yahoo.com/2406:2000:ff60::53 asking for yahoodns.net.
 180.59 NOTICE    Nameserver ns5.yahoo.com/2406:2000:ff60::53 dropped AAAA query.
 189.73 WARNING   No response from ns5.yahoo.com/2406:2000:ff60::53 asking for yahoodns.net.
 195.88 WARNING   No response from ns5.yahoo.com/2406:2000:ff60::53 asking for yahoodns.net.
 196.39 WARNING   No response from ns5.yahoo.com/2406:2000:ff60::53 asking for yahoodns.net.
 196.81 WARNING   No response from ns5.yahoo.com/2406:2000:ff60::53 asking for yahoodns.net.
 197.48 WARNING   No response from ns5.yahoo.com/2406:2000:ff60::53 asking for yahoodns.net.
 198.35 NOTICE    SOA 'mname' nameserver (hidden-master.yahoo.com) is not listed in "parent" NS records for tested zone (ns1.yahoo.com;ns2.yahoo.com;ns3.yahoo.com;ns4.yahoo.com;ns5.yahoo.com).
 198.35 NOTICE    SOA 'refresh' value (3600) is less than the recommended one (14400).
 198.36 NOTICE    SOA 'retry' value (900) is less than the recommended one (3600).

$ kdig version.bind. txt ch +short
"unbound 1.10.0"

but even a cold cache find the expected data here:
# killall unbound ; sleep 1 ; kdig yahoodns.net. ns +short
ns4.yahoo.com.
ns5.yahoo.com.
ns1.yahoo.com.
ns3.yahoo.com.
ns2.yahoo.com.

Andreas