[Pdns-users] dig doesn't work after adding SPF record

[root]

forgot to mention, I use SPF records on my server and it works ok.
dig 9.2.1 and pdns 2.9.22

On Fri, 31 Jul 2009 18:04:25 +0300, shion <svenbroeske at web.de> wrote:

>
> Hi folks,
>
> I have added a domain in my nameserver with the following configuration:
> SOA	ns.inwx.de foo at bar.de 2009073103
> NS	ns.inwx.de
> NS	ns2.inwx.de
> NS	ns3.inwx.de
>
> After this I have checked the entries with dig, that everything is  
> correct.
>
> -----------------------------------------------------------------
> $ dig @ns.inwx.de spf-record-test.de ANY
>
> ; <<>> DiG 9.5.1-P2 <<>> @ns.inwx.de spf-record-test.de ANY
> ; (1 server found)
> ;; global options:  printcmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 42148
> ;; flags: qr aa rd; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 3
> ;; WARNING: recursion requested but not available
>
> ;; QUESTION SECTION:
> ;spf-record-test.de.            IN      ANY
>
> ;; ANSWER SECTION:
> spf-record-test.de.     3600    IN      NS      ns.inwx.de.
> spf-record-test.de.     3600    IN      NS      ns2.inwx.de.
> spf-record-test.de.     3600    IN      SOA     ns.inwx.de. foo at bar.de.
> 2009073103 10800 3600 604800 3600
> spf-record-test.de.     3600    IN      NS      ns3.inwx.de.
>
> ;; ADDITIONAL SECTION:
> ns3.inwx.de.            3600    IN      A       217.20.112.194
> ns2.inwx.de.            3600    IN      A       213.239.206.103
> ns.inwx.de.             3600    IN      A       217.70.142.66
>
> ;; Query time: 26 msec
> ;; SERVER: 217.70.142.66#53(217.70.142.66)
> ;; WHEN: Fri Jul 31 16:09:54 2009
> ;; MSG SIZE  rcvd: 181
> -----------------------------------------------------------------
>
> Next step..
> Now I have added a SPF record.
> SPF	v=spf1 -all
>
> And checked the entries with dig again.
>
> -----------------------------------------------------------------
> $ dig @ns.inwx.de spf-record-test.de ANY
>
> ; <<>> DiG 9.5.1-P2 <<>> @ns.inwx.de spf-record-test.de ANY
> ; (1 server found)
> ;; global options:  printcmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 54903
> ;; flags: qr aa rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
> ;; WARNING: recursion requested but not available
>
> ;; QUESTION SECTION:
> ;spf-record-test.de.            IN      ANY
>
> ;; Query time: 27 msec
> ;; SERVER: 217.70.142.66#53(217.70.142.66)
> ;; WHEN: Fri Jul 31 16:12:29 2009
> ;; MSG SIZE  rcvd: 36
> -----------------------------------------------------------------
>
> After adding a SPF record, it isn't possible to dig the domain.
> I don't get any records of the domain. After removing the SPF record it  
> is
> possible again.
> It seems to be a problem with pdns and SPF records.
>
> Furthermore it seems that some mailservers can't deliver e-mails because  
> the
> nameserver lookup deferred, if the SPF record is set.
>
> Does somebody know, what I can do to solve the problem?
> Or maybe it is a bug?!
>
> The used pdns-server version is 2.9.22-1.
>
> $ dig -v
> DiG 9.5.1-P2
>
> Thanks,
>
> shion



-- 
http://www.ciuly.com