From owner-freebsd-questions@freebsd.org Wed Sep 6 22:49:49 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id C597DE1B98E for ; Wed, 6 Sep 2017 22:49:49 +0000 (UTC) (envelope-from frank@woodcruft.co.uk) Received: from a-painless.mh.aa.net.uk (a-painless.mh.aa.net.uk [81.187.30.51]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 0D9A2760C4 for ; Wed, 6 Sep 2017 22:49:48 +0000 (UTC) (envelope-from frank@woodcruft.co.uk) Received: from woodcruft.co.uk ([81.187.27.248] helo=lime.woodcruft.co.uk) by a-painless.mh.aa.net.uk with esmtp (Exim 4.84_2) (envelope-from ) id 1dpj8k-0000eW-90; Wed, 06 Sep 2017 23:49:46 +0100 Received: by lime.woodcruft.co.uk (Postfix, from userid 1001) id 3AA0F622A3; Wed, 6 Sep 2017 23:49:14 +0100 (BST) Date: Wed, 6 Sep 2017 23:49:14 +0100 From: Frank Shute To: "James B. Byrne" Cc: freebsd-questions@freebsd.org Subject: Re: local_unbound stops resolving Message-ID: <20170906224913.GA81612@woodcruft.co.uk> Reply-To: Frank Shute Mail-Followup-To: "James B. Byrne" , freebsd-questions@freebsd.org References: MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="YZ5djTAD1cGYuMQK" Content-Disposition: inline In-Reply-To: X-Face: *}~{PHnDTzvXPe'wl_-f%!@+r5; VLhb':*DsX%wEOPg\fDrXWQJf|2\,92"DdS%63t*BHDyQ|OWo@Gfjcd72eaN!4%NE{0]p)ihQ1MyFNtWL X-Operating-System: FreeBSD 11.1-RELEASE-p1 amd64 X-Organisation: 'woodcruft.co.uk' X-PGP-Key: http://woodcruft.co.uk/misc/pubkey.asc User-Agent: Mutt/1.8.3 (2017-05-23) X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 Sep 2017 22:49:50 -0000 --YZ5djTAD1cGYuMQK Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Wed, Sep 06, 2017 at 11:19:40AM -0400, James B. Byrne wrote: > > The problem that I am having on my desktop FreeBSD-11.0p12 is still > with me and I have confirmed that the system time is correct. This > issue only arises with our own domain (harte-lyne.ca). Below are two > debug logs for the same query (drill inet02.hamilton.harte-lyne.ca). > The first is when the problem is exhibited. The second immediately > after local_unbound is restarted. >=20 > Before restart: >=20 > # drill inet02.hamilton.harte-lyne.ca > ;; ->>HEADER<<- opcode: QUERY, rcode: SERVFAIL, id: 36528 > ;; flags: qr rd ra ; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0 > ;; QUESTION SECTION: > ;; inet02.hamilton.harte-lyne.ca. IN A > . . . > ;; Query time: 11 msec > ;; SERVER: 127.0.0.1 > ;; WHEN: Wed Sep 6 11:05:15 2017 > ;; MSG SIZE rcvd: 47 >=20 > Debug Log: Hi James, You mention about a "key" being mentioned in the debug log but I wouldn't be surprised if that is just due to the tool, drill(1), you're using; which =66rom it's manpage seems to expect DNSSEC. My best guess, is that your hosts(5) might not be entirely in order which maybe causing some funky Unbound behaviour from queries from the same machine: I assume that /etc/host.conf looks like: hosts dns and resolv.conf(5) looks like: nameserver 127.0.0.1 so hosts(s) should look something like: 127.0.0.1 localhost inet08.hamilton.harte-lyne.ca (I'm going from your email headers). Anyway, just batting about some ideas rather than a definitive solution. Regards, --=20 Frank --YZ5djTAD1cGYuMQK Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEXRpQZWMUMC1nxphkORvOAPtvi1oFAlmwe2kACgkQORvOAPtv i1olww/+NJapLbsRq4g1qESO2Yc7SKl3xfNxdboO+7sUEQx4h5n/SGjdioPFkzVn esfRUaHGdrzi6WV1mVrKhoH/vsx7z6KQS98vBSOOwR7BjWAxnvCpUJGZgQMa91kQ V1pPMY0lS+Z0jF39FLGC3bsl+d+eYt4BaOlbl+dhbh4prEwKQf6FlAkDYuJpr7A8 Ca6/tgNFZFWdr72umYSpBgSQBWcwFNgbCEqAilKiIXVU5zawIOUzn0QEeY9VauEB XWbxKIM9ZnRAVsexe2HqAuo6LXwVFyZaja6CZsoSwVjMLPAOoJvZp6TTX4jqsKZ4 OP0PLV5ZXEZZt/t4UqPyng2iw+lZnUW925vlsFFg4Wr2ToRi6gjfzPrdGwWfimL/ dseJYGpNbV0V+MHq+N10TjtLtvHsKgtrd2FHOAE67LjMGZRevYUaKUNkUqbAVyhH 4q+hfDEUMWqA0LRvopXNfz21yiTA+ZgS25dm6MyqxAWmWXmnf4Nu0jvRVp6u0miI ODEWY2AA9LsSdoaPjhja33942LLw/xHXvFZh93Exf0AlHSgi1k9tGJM2/rJbNJQq +MIGNqOFhaMg/sWEG1CjvcgbyrK8z/80Z3R/LLD3nIYBGLKGu4KE1K4AinobMl+i 5AvWsyi9MM/a68otXDK5eRcG2aNPuI3kHZVRxxsUu6pPPbYEf8g= =wIfh -----END PGP SIGNATURE----- --YZ5djTAD1cGYuMQK--