unbound fails to do reverse look ups

[Måns Nilsson]

Subject: unbound fails to do reverse look ups Date: Fri, Oct 17, 2025 at 09:09:29PM +0200 Quoting Carlo Wood via Unbound-users (unbound-users at lists.nlnetlabs.nl):
> Hi, after two days of investigations I'm feeling a bit desperate...

Is your connectivity OK?  The query: 

@f.in-addr-servers.arpa in-addr.arpa DNSKEY +dnssec +tcp +nosplit +norecurse +mult

(mult added for readability) 

works here: 

;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 44981
;; flags: qr aa; QUERY: 1, ANSWER: 5, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 1232
;; QUESTION SECTION:
;in-addr.arpa.		IN DNSKEY

;; ANSWER SECTION:
in-addr.arpa.		3600 IN	DNSKEY 257 3 8 (
				AwEAAbdOaEhLDa/H2m+hbXBHiAUE95PgpL2358lkJCBmb2Dn7aImc5sqoaEa48hlabMuG2PfnbWd3ttpVXX6mwLRMppyhJeBbr1q2YWtzi+Xx5modXLKSDPuLliLUQ1oPnq2QWK7BUNwmV70gQSOx78vkisDqFzocC2aiFAi+D2r45GPvtBMbjfCA1FB0SELeUCsxhgoAHphO5T6ITCrOccM7XX7A4qRbcbS65HOcbT+UDG9OoXjmw2j8mWgJXrpwvdsskaISrTivzcqadgOinSgAL3bVYFKCkiVBmx87d88v+OuK+358xsUIU+0MzXUidLS8086BpdiEW4cJ6c08oDyC10=
				) ; KSK; alg = RSASHA256 ; key id = 47054
in-addr.arpa.		3600 IN	DNSKEY 256 3 8 (
				AwEAAcLg6IbJ4/8UYx7tf/gluXK27boQ+ZYphcdvLdSDIHElensV3TZTKK+eH9bwAwnwhR4Aqyq7IAskLfxFllYjUj1fmjdXr7/eqpR9qANXYlmUoxuJb+d6nEzs9sl7fAKqotSKsYU1bCrainQDV1WINttNJKe3APW0TDB13znjvstJ
				) ; ZSK; alg = RSASHA256 ; key id = 2109
in-addr.arpa.		3600 IN	DNSKEY 257 3 8 (
				AwEAAbNX16PjL99cu7CpO7Nt5EXoq8k6TCZpzxz13wCITdkwIce4UrzUqw7b76WH7N3KKAb4uJgmswkujk+gYMqnMAwNBFELrCDDkflw2AIjFPXBd2Txw8o3H5of2uIbAijm76B562VIiT3p0RIP1SH4eA+wHwYmqM3o/PiYfCxQD1c+EJx6b6dRcKAfeX4XMSsM6DyI6tjLGZ//w/IspRnbRb6Q36zWNyPPY2+5fqkaJ/94OKapvXTCUpWsNqKYlOxMwovwW9a2uBIgldzSq9mCtGUXU7mRZkwUIpnzA5Qe+lYdimWnzve7BXVs8ZZUyNhlDMlWYUrYHiaJ0uESYAWZQ98=
				) ; KSK; alg = RSASHA256 ; key id = 54956
in-addr.arpa.		3600 IN	RRSIG DNSKEY 8 2 3600 (
				20251029140514 20251008031929 47054 in-addr.arpa.
				eqmVvWQJouCrrFAs+H6vjDBEIarUGrRZP23EAa6fEJYGR3/pYdQe4BuM9IH4fhDC1n8n9QwWFlzYguZyAc2zwKErlySh4dvgnW5BP1PFIvUaMpRw07j75VSyi6DeGUMCKLxMOLKXdCvNLkmpggclZGrUBiahC3i5Pa41wDRXimUJ+570qTKKpNHqATMFnpAsc+zX0vk2e6+mONs6qD7xPop8beksBahDK51gtx/+VVpXYbSH9SAmjSYTOpOZK/Cm+PpPalqYC+LiAtZT8lWXeFibXIlgKJHBIheI//7t6mMRwCusOtsP4V4MdlVykL9KMEMLbPJPggPcX2c3xRoxIQ== )
in-addr.arpa.		3600 IN	RRSIG DNSKEY 8 2 3600 (
				20251029140514 20251008031929 54956 in-addr.arpa.
				JbsD1JOJqMjj9ZUNx3FECbF+MzSaYNBbqRNalAOtcL5rifZbGXq5b5SmvgPLbKMNJuUk72p7/GcFLqVEslJ9Jbj4H0WShXE7lP/ndLsegkCIOWuuBTZrGDS75KOR7wjti4MDNzmJJHZ3lBN5MyyISmYjdYzsLSUSr0aIQ9+l54BlKaLcFhyeX1po/+5RrHHF6YcYghHtHvs8Utv7DcslwQWsJ7+fZdVTa+zre1kUoRMDhdShahPTTzlQnsuu5/wRjdWcdmGMsSUsMt36I2I+2YkxvPwvy06a2bZAJK3oatxF5qD7Is623TseCuV3H5JaQBSfHmCscTPr2himXAHaTA== )

I'd check what answers or refuses your query.. 

dig @f.in-addr-servers.arpa. hostname.bind  CH TXT +short 
"ns1.se-sto.authdns.ripe.net"


-- 
Måns Nilsson     primary/secondary/besserwisser/machina
MN-1334-RIPE           SA0XLR            +46 705 989668
Look DEEP into the OPENINGS!!  Do you see any ELVES or EDSELS ... or a
HIGHBALL?? ...
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://lists.nlnetlabs.nl/pipermail/unbound-users/attachments/20251018/432c3064/attachment.bin>