From owner-freebsd-questions@FreeBSD.ORG Thu Aug 22 01:15:07 2013 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTP id 74D58D63 for ; Thu, 22 Aug 2013 01:15:07 +0000 (UTC) (envelope-from colin@restecp.com) Received: from max.restecp.com (max.restecp.com [IPv6:2a01:4f8:d13:e00::2]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id 184E32BAD for ; Thu, 22 Aug 2013 01:15:07 +0000 (UTC) Received: from max.restecp.com (localhost [127.0.0.1]) by max.restecp.com (Postfix) with ESMTP id 654B32C90AA; Thu, 22 Aug 2013 01:14:58 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=restecp.com; h=message-id :date:from:mime-version:to:cc:subject:references:in-reply-to :content-type:content-transfer-encoding; s=dkim; bh=KNAH91DN0AM9 iN4Fito4rseU6BI=; b=nY+chwedLhmcyYCMiHwFriPGmeoecgfEMvk7BoSTeJMH DLqpGz/M12WosPGTnVyhYyFor2QoQ90A6e+pzVNE6khDcFgYrN+qbP/k9gJV05f2 CHEa0spvPB9oy14O/VIyz7lQURMDqH01cSuh5BS7Xfe1n2UFTjchlAFydVKkvl+5 ePLG7++bzfLyEfQjaP/ZAqHi1MSR7ZbbH4mvS21eNzGY9Lxo8CE6+3sQzWWpXkey pCOFvI3xKc/ULAv99KlagiILBSB8CGTMHphKDdCPz8CKh9s6CwvQRCg+aDoXYa5A sG2xI8y5VM5hrUg4IiT6vouUgElhMfDsYEw4p3On7g== DomainKey-Signature: a=rsa-sha1; c=nofws; d=restecp.com; h=message-id :date:from:mime-version:to:cc:subject:references:in-reply-to :content-type:content-transfer-encoding; q=dns; s=dkim; b=gT/Q+G k4jg8Zcz67B9qmnGvlGIoLZJE5IVCp8xsqQhPa0jPrIVyWj1/eWtnZotQ9f0vhzv 3YEeBIu38aaj8X1GSHMMdTy9T7rd5yCI2bfVFSeUCmc5W1rx3qycUujagB4e+EK5 mfxSZJ4rsKwWm+kxbQciNKqzjSutrSBhRNotKoicQgwL8JjS0v1qYYcaVk+AXCWu XiA7LiCoWMNb6N11EppZxczAILq7Pw3sR+3lBp/ujkjOqz27P/pmidm55C5t4rjq aRsqpS/jwW2IWsfvzG1lLY8uMBa5PpUVl9CbKXS++rlUFLUE+rNkyZXgnU68EFPd vnUL3YzmaYOcHB3g== Received: from [172.30.42.66] (c220-237-77-150.fitzg4.qld.optusnet.com.au [220.237.77.150]) by max.restecp.com (Postfix) with ESMTPSA id EB0972C908E; Thu, 22 Aug 2013 01:14:45 +0000 (UTC) Message-ID: <521565DC.7040501@restecp.com> Date: Thu, 22 Aug 2013 11:14:04 +1000 From: Colin House User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:17.0) Gecko/20130620 Thunderbird/17.0.7 MIME-Version: 1.0 To: Doug Hardie Subject: Re: dig References: In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: "freebsd-questions@freebsd.org List" X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 22 Aug 2013 01:15:07 -0000 On 22/08/2013 9:34 AM, Doug Hardie wrote: > There appears to be a problem with dig and the +trace option in 9.2. I believe its also in 9.1. The command: > > dig freebsd.org +trace > > Only yields a dumb response. No useful information is provided. Running the same command on FreeBSD 7.2 yields a complete trace with lots of useful information. Have you tested against another NS? I ran into a similar problem when setting up unbound as a local recursor recently on a 9.1-STABLE (r251985) box. dig +trace would return (next to) nothing. dig +trace @8.8.8.8 worked as expected. I found it was the access-control configuration of unbound. Changing my "access-control: ::1 allow" to "access-control: ::1 allow_snoop" restored the +trace functionality. I'm not sure how this translates with bind.. Perhaps the defaults have changed between the versions that you're running (if you're running the base versions on 7.2 and 9.1) or your recursive server isn't allowing it on 9.2? Fwiw, in unbound, "allow" allows recursive lookups, "allow_snoop" allows both recursive and non-recursive lookups. - Col