hdais
June 29, 2019, 3:44am
1
“dig +trace” to Unbound doesn’t work for long time due to RD=0 queries for root server (we often need “allow_snoop” access-control to accept them). Now ISC fixed this issue (BIND 9.11.8)
https://gitlab.isc.org/isc-projects/bind9/commit/7575b663ad1697c03b1efa5f08d5617532128f6f
Works on 1.9.2
# dig +trace
; <<>> DiG 9.10.8-P1 <<>> +trace
;; global options: +cmd
. 14400 IN NS j.root-servers.net.
. 14400 IN NS i.root-servers.net.
. 14400 IN NS l.root-servers.net.
. 14400 IN NS b.root-servers.net.
. 14400 IN NS h.root-servers.net.
. 14400 IN NS a.root-servers.net.
. 14400 IN NS d.root-servers.net.
. 14400 IN NS m.root-servers.net.
. 14400 IN NS c.root-servers.net.
. 14400 IN NS e.root-servers.net.
. 14400 IN NS g.root-servers.net.
. 14400 IN NS f.root-servers.net.
. 14400 IN NS k.root-servers.net.
. 14400 IN RRSIG NS 8 0 518400
20190711170000 20190628160000 25266 .
bElKhZFmnnQZsn9RO/chr3gsD1Rd7WxsAQXYLhl8j6rOVyi1h09DGNBS
zdSN8Y0Ewt3HGDAkbIdffDyis+Pbq0erVX/nQs4lgHJzOFI/oufSecbw
C9zdfNcvhg1/6bvMHEeeKKNlQyjxrM6DSga4e+fqYNq3h069O21MeKVd
Mmr4w2dVCVUR2g8xg+nK6NnQKacjdWBHwlxaMa64t6cn69R7mSHQJOSi
nN/W59NqJe5BcpLYcjZfmrZuY2OEWPY+wnn5ATcaMI7lUqZbosYsgukm
yb+Vli6kAR5tppw/4vPW4Eqyt/XfF1D+8WLhBs79wtmEuexq81aksKUS nseDxg==
;; Received 525 bytes from 127.0.0.1#53(127.0.0.1) in 546 ms
. 518400 IN NS j.root-servers.net.
. 518400 IN NS i.root-servers.net.
. 518400 IN NS e.root-servers.net.
. 518400 IN NS f.root-servers.net.
. 518400 IN NS c.root-servers.net.
. 518400 IN NS a.root-servers.net.
. 518400 IN NS k.root-servers.net.
. 518400 IN NS g.root-servers.net.
. 518400 IN NS d.root-servers.net.
. 518400 IN NS b.root-servers.net.
. 518400 IN NS l.root-servers.net.
. 518400 IN NS h.root-servers.net.
. 518400 IN NS m.root-servers.net.
. 518400 IN RRSIG NS 8 0 518400
20190712050000 20190629040000 25266 .
X/rjrStf514AgnYHajcrYGOtRam6STrQbTX5GVQXenvgQEfFK5I/7kFW
IK4vTvqHdt3UD0p6MqvOitr3cXFuxN6h+emt+U6sdMpRUfa34No1O9B4
NWuPtsguUQWysXebZU5KSY2Q3AmPu7Ld5nyR1NpVKbvLDvcw6IhRrDHG
nTZ1r9FKDS+p7cLYWpuefovjkditmF4MWHuPgP/hW3wE+a4pr3Tenwmx
aTEwXNqq/UaUkVtaFpCp/ieqV3yfmlhXasX+bWeYcM/1FuNvKqfEYbHC
pqlycb18VPZ67NODxGNwv+OhEIuXzjY0N2P0eLSk/k8xi1J2+062iVHY yzq9dQ==
;; Received 1097 bytes from 192.36.148.17#53(i.root-servers.net) in 108 ms
29.06.2019 09:44, Daisuke HIGASHI via Unbound-users пишет: