[Pdns-users] Query throttled message in pdns_recursor trace log

[Remi Gacogne]

Hi,

On 8/14/18 11:44 AM, haries fajar nugroho wrote:
> I've got some weird result when query some domains, for
> example coachingindonesia.com . I got
> servfail but if i query without www appended, i can get the result.

The servers for this domain are utterly broken, sending REFUSED for
valid queries: http://dnsviz.net/d/www.coachingindonesia.com/dnssec/

This is the reason why we are throttling it for a while, because we
don't want to waste our time sending queries to broken servers.

> Below is what i got from my pdns recursor (4.1.3) on Ubuntu 17.10 that
> installed with apt-get.
> 
> www.coachingindonesia.com
> ---------------------------------
> ; <<>> DiG 9.8.1-P1 <<>> www.coachingindonesia.com @192.168.77.215
> ;; global options: +cmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 1660
> ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0
> 
> ;; QUESTION SECTION:
> ;www.coachingindonesia.com.     IN 
>     A
> 
> ;; ANSWER SECTION:
> www.coachingindonesia.com. 6021 IN 
>     CNAME   coachingindonesia.com.
> 
> coachingindonesia.com
> -------------------------------
> ;; Query time: 3 msec
> ;; SERVER: 192.168.77.215#53(192.168.77.215)
> ;; WHEN: Tue Aug 14 14:23:44 2018
> ;; MSG SIZE  rcvd: 57
> 
> ; <<>> DiG 9.8.1-P1 <<>> coachingindonesia.com  @192.168.77.215
> ;; global options: +cmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 60544
> ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0
> 
> ;; QUESTION SECTION:
> ;coachingindonesia.com.         IN      A
> 
> ;; ANSWER SECTION:
> coachingindonesia.com.  5979    IN     
> A       107.180.76.89
> 
> ;; Query time: 212 msec
> ;; SERVER: 192.168.77.215#53(192.168.77.215)
> ;; WHEN: Tue Aug 14 14:24:26 2018
> ;; MSG SIZE  rcvd: 55
> 
> I found that domains that failed to resolved had "query throttled"
> message, like : [2]  coachingindonesia.com: query throttled
> 216.69.185.1, coachingindonesia.com; A.
> I don't know what i have to do, because i can query that domain if i use
> another dns recursor software in the same machine and IP
> 
> I also attached the trace log query for that domain. 


Best regards,
-- 
Remi Gacogne
PowerDNS.COM BV - https://www.powerdns.com/

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 488 bytes
Desc: OpenPGP digital signature
URL: <http://mailman.powerdns.com/pipermail/pdns-users/attachments/20180814/af8ac492/attachment.sig>