<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<div class="moz-cite-prefix">On 18/09/2018 03:14, Nur Tantio Pratomo
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:CAG=TY8mtxAfwDs-KsEj9wHOVV5Zxzjwrw1wEPxq1Qfx2LOfihQ@mail.gmail.com">
<div dir="ltr">i haven't enable logging yet when the error occurs</div>
<div dir="ltr"><br>
</div>
<div dir="ltr">202.91.8.101 with nameserver <a
href="http://oceanic.te.net.id" moz-do-not-send="true">oceanic.te.net.id</a>
<div>180.214.246.58 with nameserver <a
href="http://lloyd.te.net.id" moz-do-not-send="true">lloyd.te.net.id</a></div>
<div><br>
</div>
<div>i use mysql backend and this is my config </div>
<div><br>
</div>
<div>
<div>launch=gmysql</div>
<div>gmysql-host=127.0.0.1</div>
<div>gmysql-user=powerdns_user</div>
<div>gmysql-password=xxxxx</div>
<div>gmysql-dbname=powerdns</div>
<div>setuid=pdns</div>
<div>setgid=pdns</div>
<div>do-ipv6-additional-processing=yes<br>
</div>
<div>local-address=202.91.8.101<br>
</div>
<div>local-ipv6=2402:f080:0:4::101</div>
</div>
</div>
</blockquote>
<p>It's certainly behaving problematically, returning SERVFAIL for
these domains. tcpdump shows a UDP exchange followed by two TCP
exchanges.<br>
</p>
<p>$ dig @202.91.8.101 radininten2-airport.org any<br>
;; Truncated, retrying in TCP mode.<br>
<br>
; <<>> DiG 9.8.3-P1 <<>> @202.91.8.101
radininten2-airport.org any<br>
; (1 server found)<br>
;; global options: +cmd<br>
;; Got answer:<br>
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id:
19370<br>
;; flags: qr aa rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL:
0<br>
;; WARNING: recursion requested but not available<br>
<br>
;; QUESTION SECTION:<br>
;radininten2-airport.org. IN ANY<br>
<br>
;; Query time: 261 msec<br>
;; SERVER: 202.91.8.101#53(202.91.8.101)<br>
;; WHEN: Tue Sep 18 07:22:20 2018<br>
;; MSG SIZE rcvd: 41<br>
<br>
$ dig @180.214.246.58 radininten2-airport.org any<br>
;; Truncated, retrying in TCP mode.<br>
<br>
; <<>> DiG 9.8.3-P1 <<>> @180.214.246.58
radininten2-airport.org any<br>
; (1 server found)<br>
;; global options: +cmd<br>
;; Got answer:<br>
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id:
39845<br>
;; flags: qr aa rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL:
0<br>
;; WARNING: recursion requested but not available<br>
<br>
;; QUESTION SECTION:<br>
;radininten2-airport.org. IN ANY<br>
<br>
;; Query time: 234 msec<br>
;; SERVER: 180.214.246.58#53(180.214.246.58)<br>
;; WHEN: Tue Sep 18 07:22:43 2018<br>
;; MSG SIZE rcvd: 41<br>
</p>
<p>Since this problem is reproducible, I'd suggest your next step is
to turn on logging in powerdns, and if that doesn't show the
problem, enable query logging in mysql as well.</p>
<p>Check your schemas (SHOW CREATE TABLE ...), and manually check
all your records for the affected domain. Presumably you haven't
overridden any of the queries. You could try issuing one of the
queries manually to see what it returns, e.g.<br>
</p>
<pre style="box-sizing: border-box; overflow: auto; font-family: Consolas, monospace; font-size: 15px; display: block; padding: 14px 0px 14px 20px; margin: 20px 0px; line-height: 23px; word-break: break-all; overflow-wrap: normal; color: rgb(51, 51, 51); background-color: rgb(255, 255, 255); border-width: 0px 0px 0px 2px; border-style: solid; border-color: rgb(238, 238, 238); border-image: initial; border-radius: 4px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration-style: initial; text-decoration-color: initial;">gmysql-basic-query=SELECT content,ttl,prio,type,domain_id,disabled,name,auth FROM records WHERE disabled=0 and type=? and name=?</pre>
<p>Regards,</p>
<p>Brian.<br>
</p>
</body>
</html>