<div dir="ltr">
<p class="MsoNormal"><span style="font-family:"Nokia Pure Text Light",sans-serif">Hello
all,</span></p>
<p class="MsoNormal"><span style="font-family:"Nokia Pure Text Light",sans-serif"> </span></p>
<p class="MsoNormal"><span style="font-family:"Nokia Pure Text Light",sans-serif" lang="EN-US">We are running some tests over pdns-recursor 4.1.1 and where finding a forwarding scenario that is not working the same way as in 4.0.4 version.</span></p><p class="MsoNormal"><span style="font-family:"Nokia Pure Text Light",sans-serif" lang="EN-US"><br></span></p><p class="MsoNormal"><span style="font-family:"Nokia Pure Text Light",sans-serif" lang="EN-US">We have forward-zones-recurse=.=8.8.8.8 configured in our recursor.</span></p><p class="MsoNormal"><span style="font-family:"Nokia Pure Text Light",sans-serif" lang="EN-US">After requesting wikipedia name we can see the cache entry that has bben created.</span></p><p class="MsoNormal"><span style="font-family:"Nokia Pure Text Light",sans-serif" lang="EN-US"><br></span></p><p class="MsoNormal"><span style="font-family:"Nokia Pure Text Light",sans-serif" lang="EN-US"><br>; <<>> DiG 9.9.3 <<>> @<a href="http://10.0.3.204">10.0.3.204</a> <a href="http://wikipedia.com">wikipedia.com</a><br>; (1 server found)<br>;; global options: +cmd<br>;; Got answer:<br>;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 36999<br>;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1<br><br>;; OPT PSEUDOSECTION:<br>; EDNS: version: 0, flags:; udp: 4096<br>;; QUESTION SECTION:<br>;<a href="http://wikipedia.com">wikipedia.com</a>. IN A<br><br>;; ANSWER SECTION:<br><a href="http://wikipedia.com">wikipedia.com</a>. 599 IN A 91.198.174.192<br><br>;; Query time: 41 msec<br>;; SERVER: 10.0.3.204#53(10.0.3.204)<br>;; WHEN: Thu Mar 16 04:45:26 CET 2017<br>;; MSG SIZE rcvd: 58<br><br></span></p><p class="MsoNormal"><span style="font-family:"Nokia Pure Text Light",sans-serif" lang="EN-US"><br></span></p><p class="MsoNormal"><span style="font-family:"Nokia Pure Text Light",sans-serif" lang="EN-US">; main record cache dump from thread follows<br>;<br><a href="http://a.root-servers.net">a.root-servers.net</a>. 3599580 IN A 198.41.0.4 ; (Insecure) auth=1<br><a href="http://a.root-servers.net">a.root-servers.net</a>. 3599580 IN AAAA 2001:503:ba3e::2:30 ; (Insecure) auth=1<br><a href="http://b.root-servers.net">b.root-servers.net</a>. 3599580 IN A 199.9.14.201 ; (Insecure) auth=1<br><a href="http://b.root-servers.net">b.root-servers.net</a>. 3599580 IN AAAA 2001:500:200::b ; (Insecure) auth=1<br><a href="http://c.root-servers.net">c.root-servers.net</a>. 3599580 IN A 192.33.4.12 ; (Insecure) auth=1<br><a href="http://c.root-servers.net">c.root-servers.net</a>. 3599580 IN AAAA 2001:500:2::c ; (Insecure) auth=1<br><a href="http://d.root-servers.net">d.root-servers.net</a>. 3599580 IN A 199.7.91.13 ; (Insecure) auth=1<br><a href="http://d.root-servers.net">d.root-servers.net</a>. 3599580 IN AAAA 2001:500:2d::d ; (Insecure) auth=1<br><a href="http://e.root-servers.net">e.root-servers.net</a>. 3599580 IN A 192.203.230.10 ; (Insecure) auth=1<br><a href="http://e.root-servers.net">e.root-servers.net</a>. 3599580 IN AAAA 2001:500:a8::e ; (Insecure) auth=1<br><a href="http://f.root-servers.net">f.root-servers.net</a>. 3599580 IN A 192.5.5.241 ; (Insecure) auth=1<br><a href="http://f.root-servers.net">f.root-servers.net</a>. 3599580 IN AAAA 2001:500:2f::f ; (Insecure) auth=1<br><a href="http://g.root-servers.net">g.root-servers.net</a>. 3599580 IN A 192.112.36.4 ; (Insecure) auth=1<br><a href="http://g.root-servers.net">g.root-servers.net</a>. 3599580 IN AAAA 2001:500:12::d0d ; (Insecure) auth=1<br><a href="http://h.root-servers.net">h.root-servers.net</a>. 3599580 IN A 198.97.190.53 ; (Insecure) auth=1<br><a href="http://h.root-servers.net">h.root-servers.net</a>. 3599580 IN AAAA 2001:500:1::53 ; (Insecure) auth=1<br><a href="http://i.root-servers.net">i.root-servers.net</a>. 3599580 IN A 192.36.148.17 ; (Insecure) auth=1<br><a href="http://i.root-servers.net">i.root-servers.net</a>. 3599580 IN AAAA 2001:7fe::53 ; (Insecure) auth=1<br><a href="http://j.root-servers.net">j.root-servers.net</a>. 3599580 IN A 192.58.128.30 ; (Insecure) auth=1<br><a href="http://j.root-servers.net">j.root-servers.net</a>. 3599580 IN AAAA 2001:503:c27::2:30 ; (Insecure) auth=1<br><a href="http://k.root-servers.net">k.root-servers.net</a>. 3599580 IN A 193.0.14.129 ; (Insecure) auth=1<br><a href="http://k.root-servers.net">k.root-servers.net</a>. 3599580 IN AAAA 2001:7fd::1 ; (Insecure) auth=1<br><a href="http://l.root-servers.net">l.root-servers.net</a>. 3599580 IN A 199.7.83.42 ; (Insecure) auth=1<br><a href="http://l.root-servers.net">l.root-servers.net</a>. 3599580 IN AAAA 2001:500:9f::42 ; (Insecure) auth=1<br><a href="http://m.root-servers.net">m.root-servers.net</a>. 3599580 IN A 202.12.27.33 ; (Insecure) auth=1<br><a href="http://m.root-servers.net">m.root-servers.net</a>. 3599580 IN AAAA 2001:dc3::35 ; (Insecure) auth=1<br>. 85980 IN NS <a href="http://c.root-servers.net">c.root-servers.net</a>. ; (Indeterminate) auth=0<br>. 85980 IN NS <a href="http://d.root-servers.net">d.root-servers.net</a>. ; (Indeterminate) auth=0<br>. 85980 IN NS <a href="http://a.root-servers.net">a.root-servers.net</a>. ; (Indeterminate) auth=0<br>. 85980 IN NS <a href="http://i.root-servers.net">i.root-servers.net</a>. ; (Indeterminate) auth=0<br>. 85980 IN NS <a href="http://f.root-servers.net">f.root-servers.net</a>. ; (Indeterminate) auth=0<br>. 85980 IN NS <a href="http://g.root-servers.net">g.root-servers.net</a>. ; (Indeterminate) auth=0<br>. 85980 IN NS <a href="http://b.root-servers.net">b.root-servers.net</a>. ; (Indeterminate) auth=0<br>. 85980 IN NS <a href="http://e.root-servers.net">e.root-servers.net</a>. ; (Indeterminate) auth=0<br>. 85980 IN NS <a href="http://j.root-servers.net">j.root-servers.net</a>. ; (Indeterminate) auth=0<br>. 85980 IN NS <a href="http://h.root-servers.net">h.root-servers.net</a>. ; (Indeterminate) auth=0<br>. 85980 IN NS <a href="http://k.root-servers.net">k.root-servers.net</a>. ; (Indeterminate) auth=0<br>. 85980 IN NS <a href="http://m.root-servers.net">m.root-servers.net</a>. ; (Indeterminate) auth=0<br>. 85980 IN NS <a href="http://l.root-servers.net">l.root-servers.net</a>. ; (Indeterminate) auth=0<br><a href="http://recursor-4.1.1.security-status.secpoll.powerdns.com">recursor-4.1.1.security-status.secpoll.powerdns.com</a>. -361 IN TXT "1 OK" ; (Indeterminate) auth=0<br><a href="http://wikipedia.com">wikipedia.com</a>. 573 IN A 91.198.174.192 ; (Indeterminate) auth=0<br>; negcache dump from thread follows<br>;<br>; main packet cache dump from thread follows<br>;<br></span></p><p class="MsoNormal"><span style="font-family:"Nokia Pure Text Light",sans-serif" lang="EN-US"><br></span></p><p class="MsoNormal"><span style="font-family:"Nokia Pure Text Light",sans-serif" lang="EN-US">The following attempts to resolve the same query are not answered form cache and pdns-recursor goes always to 8.8.8.8 to provide an answer.</span></p><p class="MsoNormal"><span style="font-family:"Nokia Pure Text Light",sans-serif" lang="EN-US"><br></span></p><p class="MsoNormal"><span style="font-family:"Nokia Pure Text Light",sans-serif" lang="EN-US">0 [18/1] question for '<a href="http://wikipedia.com">wikipedia.com</a>|A' from 10.0.3.200<br>[18] <a href="http://wikipedia.com">wikipedia.com</a>: Wants NO DNSSEC processing, auth data in query for A<br>[18] <a href="http://wikipedia.com">wikipedia.com</a>: Looking for CNAME cache hit of '<a href="http://wikipedia.com">wikipedia.com</a>|CNAME'<br>[18] <a href="http://wikipedia.com">wikipedia.com</a>: No CNAME cache hit of '<a href="http://wikipedia.com">wikipedia.com</a>|CNAME' found<br>[18] <a href="http://wikipedia.com">wikipedia.com</a>: No cache hit for '<a href="http://wikipedia.com">wikipedia.com</a>|A', trying to find an appropriate NS record<br>[18] : got TA for '.'<br>[18] : setting cut state for . to Secure<br>[18] <a href="http://wikipedia.com">wikipedia.com</a>: initial validation status for <a href="http://wikipedia.com">wikipedia.com</a> is Indeterminate<br>[18] <a href="http://wikipedia.com">wikipedia.com</a>: Cache consultations done, have 1 NS to contact<br>[18] <a href="http://wikipedia.com">wikipedia.com</a>: Domain has hardcoded nameserver<br>[18] <a href="http://wikipedia.com">wikipedia.com</a>: Resolved '.' NS (empty) to: 8.8.8.8<br>[18] <a href="http://wikipedia.com">wikipedia.com</a>: Trying IP <a href="http://8.8.8.8:53">8.8.8.8:53</a>, asking '<a href="http://wikipedia.com">wikipedia.com</a>|A'<br>[18] <a href="http://wikipedia.com">wikipedia.com</a>: Got 2 answers from (empty) (8.8.8.8), rcode=0 (No Error), aa=0, in 30ms<br>[18] <a href="http://wikipedia.com">wikipedia.com</a>: accept answer '<a href="http://wikipedia.com">wikipedia.com</a>|A|91.198.174.192' from '.' nameservers? ttl=319, place=1 YES! - This answer was received from a server we forward to.<br>[18] <a href="http://wikipedia.com">wikipedia.com</a>: OPT answer '.' from '.' nameservers<br>[18] : got initial zone status Indeterminate for record <a href="http://wikipedia.com">wikipedia.com</a><br>[18] <a href="http://wikipedia.com">wikipedia.com</a>: determining status after receiving this packet<br>[18] <a href="http://wikipedia.com">wikipedia.com</a>: answer is in: resolved to '91.198.174.192|A'<br>[18] <a href="http://wikipedia.com">wikipedia.com</a>: status=got results, this level of recursion done<br>[18] <a href="http://wikipedia.com">wikipedia.com</a>: validation status is Indeterminate<br>0 [18/1] answer to question '<a href="http://wikipedia.com">wikipedia.com</a>|A': 1 answers, 1 additional, took 1 packets, 30.615 netw ms, 30.737 tot ms, 0 throttled, 0 timeouts, 0 tcp connections, rcode=0<br></span></p><p class="MsoNormal"><span style="font-family:"Nokia Pure Text Light",sans-serif" lang="EN-US"><br></span></p><p class="MsoNormal"><span style="font-family:"Nokia Pure Text Light",sans-serif" lang="EN-US">In version 4.0.4 pdns-recurasor is able to answer the queries using available cache entry un TTL expires<br></span></p><p class="MsoNormal"><span style="font-family:"Nokia Pure Text Light",sans-serif" lang="EN-US"><br></span></p><p class="MsoNormal"><span style="font-family:"Nokia Pure Text Light",sans-serif" lang="EN-US">Kind regards and thanks in advance,</span></p><p class="MsoNormal"><span style="font-family:"Nokia Pure Text Light",sans-serif" lang="EN-US"><br></span></p><p class="MsoNormal"><span style="font-family:"Nokia Pure Text Light",sans-serif" lang="EN-US"> Carlos<br></span></p><p class="MsoNormal"><span style="font-family:"Nokia Pure Text Light",sans-serif" lang="EN-US"><br></span></p><p class="MsoNormal"><span style="font-family:"Nokia Pure Text Light",sans-serif" lang="EN-US"><br></span></p><p class="MsoNormal"><span style="font-family:"Nokia Pure Text Light",sans-serif" lang="EN-US"><br></span></p>
</div>