[Pdns-users] max-negative-ttl does not work

Wed Jan 9 11:05:53 UTC 2019

)

Am 09.01.19 um 12:00 schrieb Brian Candler:
> On 09/01/2019 10:51, Stefan Priebe - Profihost AG wrote:
>> Real test is / was:
>> mydomain.multi.uribl.rblserver.de-nserver.de
> 
> I see a SERVFAIL here, not an NXDOMAIN.  Do you get the same?
> 
> $ dig mydomain.multi.uribl.rblserver.de-nserver.de
> 
> ; <<>> DiG 9.10.6 <<>> mydomain.multi.uribl.rblserver.de-nserver.de
> ;; global options: +cmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 20062
> ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
> 
> With dig +trace it stops here:
> 
> ...
> 
> uribl.rblserver.de-nserver.de. 3600 IN    NS rblserver.de-nserver.de.
> ;; Received 87 bytes from 91.151.23.20#53(ns2.de-nserver.de) in 9 ms
> 
> ;; connection timed out; no servers could be reached

This is NO public DNS.

My results:
# dig -t A mydomain.multi.uribl.rblserver.de-nserver.de

; <<>> DiG 9.10.3-P4-Debian <<>> -t A
mydomain.multi.uribl.rblserver.de-nserver.de
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 46632
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;mydomain.multi.uribl.rblserver.de-nserver.de. IN A

;; Query time: 0 msec
;; SERVER: 85.158.182.72#53(85.158.182.72)
;; WHEN: Wed Jan 09 12:04:32 CET 2019
;; MSG SIZE  rcvd: 73

Trace:
# dig +trace mydomain.multi.uribl.rblserver.de-nserver.de

; <<>> DiG 9.10.3-P4-Debian <<>> +trace
mydomain.multi.uribl.rblserver.de-nserver.de
;; global options: +cmd
.                       80778   IN      NS      g.root-servers.net.
.                       80778   IN      NS      j.root-servers.net.
.                       80778   IN      NS      f.root-servers.net.
.                       80778   IN      NS      c.root-servers.net.
.                       80778   IN      NS      e.root-servers.net.
.                       80778   IN      NS      d.root-servers.net.
.                       80778   IN      NS      i.root-servers.net.
.                       80778   IN      NS      k.root-servers.net.
.                       80778   IN      NS      m.root-servers.net.
.                       80778   IN      NS      a.root-servers.net.
.                       80778   IN      NS      h.root-servers.net.
.                       80778   IN      NS      l.root-servers.net.
.                       80778   IN      NS      b.root-servers.net.
.                       80778   IN      RRSIG   NS 8 0 518400
20190122050000 20190109040000 16749 .
UC7DxFJYeiTMVtBR0kcCMfE3GVncEfMT2m7Hzz81UWzG1k3UIHqC0A1x
3KFo7BuKDdnA59usvv+QcDK5EoCqsO3KZ4Lk4EMgR7J4sBCyWZ+784iH
HJCF2T9fdeTnaaUIJNq947EsVDV40oGALziPkh7SSKQm0CKoeiuCZ61o
Ww6rvk/Sx002UL8YJFov3QAy7Y347yYZx87pQpo0oyrmA2IySyutH1qg
UMA283tNt5k6sVZmi6pWATwJRzd1A1utd+AETKXD4OecWgEl9Lil7CjN
Dj9/0OFdJWsvQeC/VO1759xZEGGBz1H4HUxDRuToctN9TzezY7FMyzUe krZYdQ==
;; Received 540 bytes from 85.158.182.72#53(85.158.182.72) in 0 ms

de.                     172800  IN      NS      a.nic.de.
de.                     172800  IN      NS      n.de.net.
de.                     172800  IN      NS      z.nic.de.
de.                     172800  IN      NS      s.de.net.
de.                     172800  IN      NS      l.de.net.
de.                     172800  IN      NS      f.nic.de.
de.                     86400   IN      DS      39227 8 2
AAB73083B9EF70E4A5E94769A418AC12E887FC3C0875EF206C3451DC 40B6C4FA
de.                     86400   IN      RRSIG   DS 8 1 86400
20190122050000 20190109040000 16749 .
OEPFm49y45+2DDMA55S1QVgshU9S1nBcPI67vXmoR7qELJSRX5mAWAUL
HjEmR+odWXdg94WC6UABXhjt+QpFlcMaS4g2F8Rb1AXMGt7qUNl5L0sH
bCCAbzi14+NTLw6AdqFd2ykyUhOV9en1cJtIq4gmNbnrpAWoo1tE7CD1
sEcGqeFXmJNQr4A6VJQwcuHIA5c0gMMidlqk0FKID6a59mTTydP15nJC
3S4GapELtwQjJvbU70SNRhtX5iN9Ajd74/0EH09KyhGOmvmYdnmKAhyJ
vhCYsRY9IRfVNoR6UTd4T0ZHfOP/vAukymg9RKFweQGZOdHSVr8lgmlI oPWgPQ==
;; Received 750 bytes from 202.12.27.33#53(m.root-servers.net) in 28 ms

de-nserver.de.          86400   IN      NS      ns1.de-nserver.de.
de-nserver.de.          86400   IN      NS      ns2.de-nserver.de.
h319dm5gc3edek691vqbhehot7vggj2b.de. 7200 IN NSEC3 1 1 15 BA5EBA11
H31FUML57S63NB5L4QH158A73MPV701V NS SOA RRSIG DNSKEY NSEC3PARAM
lvsfvftn8it0bdemb0t1irherpiiaj34.de. 7200 IN NSEC3 1 1 15 BA5EBA11
LVSHNHSJR5IU9OC059BCTAS6QC3DP76T A RRSIG
h319dm5gc3edek691vqbhehot7vggj2b.de. 7200 IN RRSIG NSEC3 8 2 7200
20190116090105 20190109090105 2713 de.
c2TxXD2M9mHuYJD7aBwEKrXbyYYATZ5yPoieNTWu2HTkOAMpepuYix3a
ZDGiPi2QpAQlHADYtFGd7NCe73subkcHmmPeOdIiLYadmIvnjH7FA6r7
SD0wUrjktwNo+nnbfZJ52k/fdziV9FFdLP/FiIHl4ngZuYBGFNFcK3ad 2BQ=
lvsfvftn8it0bdemb0t1irherpiiaj34.de. 7200 IN RRSIG NSEC3 8 2 7200
20190116090105 20190109090105 2713 de.
pY9TzDaxDb8GxDeBFzgUZ4kR/KFsL1RJO34S1bqPzkpeBGoqGr6oyPNO
eF5R6jSLdszkRBNfw9xxeIiq3dVtq2PakDTxSwMqo9AkTsPQ2+ns1XMc
bPejPloXQe4bBskPVOhWArhYjjKcsTTYS7IKbdgfSpqfxylu4UQzsp/Z xUE=
;; Received 632 bytes from 194.246.96.1#53(z.nic.de) in 19 ms

uribl.rblserver.de-nserver.de. 3600 IN  NS      rblserver.de-nserver.de.
;; Received 87 bytes from 91.151.23.20#53(ns2.de-nserver.de) in 15 ms

;; Received 62 bytes from 37.228.159.37#53(rblserver.de-nserver.de) in 0 ms

Stefan