[Pdns-users] specfic problem with efax.com

Mike mike+lists at yourtownonline.com
Thu Jun 20 05:20:24 UTC 2019


Hi,


    I noticed tonight that resolving for 'efax.com' is failing and my
resolvers (pdns_recursor) are returning 'servfail' while google dns is
returing the data.


    The specfic error I notice seems to be:

    Removing record 'inbound.efax.com|A|204.11.168.109' in the answer
section without the AA bit set received from efax.com

    I am attaching a regex trace for 'efax' so you can see what I see. I
guess my question here is this an efax.com problem or something I should
try to work around with settings at my resolver?


Thank you.


  


Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: 2 [3546701/3]
question for 'inbound.efax.com|MX' from w.x.y.z:58108
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]
inbound.efax.com: Wants DNSSEC processing, auth data in query for MX
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]
inbound.efax.com: Looking for CNAME cache hit of 'inbound.efax.com|CNAME'
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]
inbound.efax.com: Looking for DNAME cache hit of 'com|DNAME'
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]
inbound.efax.com: Looking for DNAME cache hit of 'efax.com|DNAME'
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]
inbound.efax.com: No CNAME or DNAME cache hit of 'inbound.efax.com' found
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]
inbound.efax.com: No cache hit for 'inbound.efax.com|MX', trying to find
an appropriate NS record
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] : got TA
for '.'
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] : setting
cut state for . to Secure
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] : -
Looking for a cut at com
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] : no TA
found for 'com' among 1
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   com:
Wants DNSSEC processing, auth data in query for DS
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   com:
Found cache hit for DS: 30909 8 2
e2d3c916f6deeac73294e8268fb5885044a833fc5459588f4a9184cfc41a5766[ttl=60704]
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   com:
updating validation state with cache content for com to Secure
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] : - Found
cut at com
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] : New
state for com is Secure
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] : -
Looking for a cut at efax.com
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] : no TA
found for 'efax.com' among 1
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]  
efax.com: Wants DNSSEC processing, auth data in query for DS
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]  
efax.com: No cache hit for 'efax.com|DS', trying to find an appropriate
NS record
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   com:
Checking if we have NS in cache for 'com'
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   com: NS
(with ip, or non-glue) in cache for 'com' -> 'a.gtld-servers.net'
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   com:
within bailiwick: 0, not in cache / did not look at cache
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   com: NS
(with ip, or non-glue) in cache for 'com' -> 'g.gtld-servers.net'
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   com:
within bailiwick: 0, not in cache / did not look at cache
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   com: NS
(with ip, or non-glue) in cache for 'com' -> 'm.gtld-servers.net'
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   com:
within bailiwick: 0, not in cache / did not look at cache
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   com: NS
(with ip, or non-glue) in cache for 'com' -> 'h.gtld-servers.net'
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   com:
within bailiwick: 0, not in cache / did not look at cache
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   com: NS
(with ip, or non-glue) in cache for 'com' -> 'b.gtld-servers.net'
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   com:
within bailiwick: 0, not in cache / did not look at cache
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   com: NS
(with ip, or non-glue) in cache for 'com' -> 'c.gtld-servers.net'
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   com:
within bailiwick: 0, not in cache / did not look at cache
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   com: NS
(with ip, or non-glue) in cache for 'com' -> 'd.gtld-servers.net'
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   com:
within bailiwick: 0, not in cache / did not look at cache
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   com: NS
(with ip, or non-glue) in cache for 'com' -> 'f.gtld-servers.net'
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   com:
within bailiwick: 0, not in cache / did not look at cache
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   com: NS
(with ip, or non-glue) in cache for 'com' -> 'l.gtld-servers.net'
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   com:
within bailiwick: 0, not in cache / did not look at cache
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   com: NS
(with ip, or non-glue) in cache for 'com' -> 'k.gtld-servers.net'
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   com:
within bailiwick: 0, not in cache / did not look at cache
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   com: NS
(with ip, or non-glue) in cache for 'com' -> 'e.gtld-servers.net'
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   com:
within bailiwick: 0, not in cache / did not look at cache
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   com: NS
(with ip, or non-glue) in cache for 'com' -> 'i.gtld-servers.net'
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   com:
within bailiwick: 0, not in cache / did not look at cache
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   com: NS
(with ip, or non-glue) in cache for 'com' -> 'j.gtld-servers.net'
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   com:
within bailiwick: 0, not in cache / did not look at cache
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   com: We
have NS in cache for 'com' (flawedNSSet=0)
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] : got
status Secure for name efax.com (from com)
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]  
efax.com: initial validation status for efax.com is Secure
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]  
efax.com: Cache consultations done, have 13 NS to contact
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]  
efax.com.: Nameservers: d.gtld-servers.net(2.89ms),
m.gtld-servers.net(2.92ms), l.gtld-servers.net(2.95ms),
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]  
efax.com.:              k.gtld-servers.net(3.01ms),
b.gtld-servers.net(3.89ms), h.gtld-servers.net(4.09ms),
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]  
efax.com.:              j.gtld-servers.net(5.01ms),
i.gtld-servers.net(5.88ms), g.gtld-servers.net(7.57ms),
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]  
efax.com.:              f.gtld-servers.net(7.68ms),
c.gtld-servers.net(7.94ms), e.gtld-servers.net(9.86ms),
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]  
efax.com.:              a.gtld-servers.net(11.15ms)
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]  
efax.com: Trying to resolve NS 'd.gtld-servers.net' (1/13)
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]     
d.gtld-servers.net: Wants DNSSEC processing, NO auth data in query for A
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]     
d.gtld-servers.net: Found cache hit for A: 192.31.80.30[ttl=34195]
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]     
d.gtld-servers.net: updating validation state with cache content for
d.gtld-servers.net to Insecure
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]    
Nameserver d.gtld-servers.net IPs: 2001:500:856e::30(2.89ms),
192.31.80.30(12.81ms)
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]  
efax.com: Resolved 'com' NS d.gtld-servers.net to: 2001:500:856e::30,
192.31.80.30
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]  
efax.com: Trying IP [2001:500:856e::30]:53, asking 'efax.com|DS'
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]  
efax.com: Got 7 answers from d.gtld-servers.net (2001:500:856e::30),
rcode=0 (No Error), aa=1, in 60ms
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]  
efax.com: accept answer 'CK0POJMG874LJREF7EFN8430QVIT8BSM.com|NSEC3|1 1
0 - CK0Q1GIN43N1ARRC9OSM6QPQR81H5M9A NS SOA RRSIG DNSKEY NSEC3PARAM'
from 'com' nameservers? ttl=86400, place=2 YES!
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]  
efax.com: accept answer
'CK0POJMG874LJREF7EFN8430QVIT8BSM.com|RRSIG|NSEC3 8 2 86400
20190624044534 20190617033534 3800 com.
CXkmAw0Yj+e3boQ92LrOOdoyYyXpX3KIWBytEn0RQtae+a5yww4+SnUimpdagv57ZOUS5TLNl1Bgr5Z9s1vKEZhipRWe1qERl8HiNjL8uwkcNqFfEs3pkOxuwZJJEwTuG5clELIs83v+6najjEIJw56q/eu4VT/vw21pEk9mtYI='
from 'com' nameservers? ttl=86400, place=2 RRSIG - separate
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]  
efax.com: accept answer 'com|SOA|a.gtld-servers.net.
nstld.verisign-grs.com. 1561007656 1800 900 604800 86400' from 'com'
nameservers? ttl=900, place=2 YES!
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]  
efax.com: accept answer 'com|RRSIG|SOA 8 1 900 20190627051416
20190620040416 3800 com.
Fqugfk6Qm+m2fZymHEuSbWkwwYh+bpq8B2BRpXwO28mvlPsYhB0rMtuyS1eyhbHB51CcQQEjFk+Vesr6YcUqag3lu06T+Lc0zJXM+fmM6jXe4dAC3N7+Xg2mhpv87FdNuNeyjxVh2BzXBXC3cCR273VaYHkDLDjbiQft9AsF45U='
from 'com' nameservers? ttl=900, place=2 RRSIG - separate
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]  
efax.com: accept answer 'UE91PO6QM9K9CRKPCPBU5GE4S5QNJS4C.com|NSEC3|1 1
0 - UE93IVHH5QPHRO2CKETFIHCN58H1576G NS DS RRSIG' from 'com'
nameservers? ttl=86400, place=2 YES!
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]  
efax.com: accept answer
'UE91PO6QM9K9CRKPCPBU5GE4S5QNJS4C.com|RRSIG|NSEC3 8 2 86400
20190626042101 20190619031101 3800 com.
N96N6Qy5K0E+O0MXCPaFAwJGTLRayYXI70TUb2cCsDKs7aYl/SrT5pKoutY3fUG2Fk13JYdqzZ46UjEN1BGE5ttF40m+L7W0wNQbUIr0xhF4AaXveFc2bR6jQZbry9AiZlBbewbdw5vOU7lAyXP/lPsC9rZFNui8froFwnxkMP4='
from 'com' nameservers? ttl=86400, place=2 RRSIG - separate
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]  
efax.com: OPT answer '.' from 'com' nameservers
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] : got
status Secure for name com (from com)
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] : got
initial zone status Secure for record com|SOA
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Validating
non-additional record for com
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Retrieving
DNSKeys for com
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]    com:
Wants DNSSEC processing, auth data in query for DNSKEY
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]    com:
Found cache hit for DNSKEY: 256 3 8
AQOcWJruwENIaapq3h3lKJlflLx6rWJz2aKRBV6CBJRTxZu4ge2iDX164dQ7Hpc9b8C9z2gqWyx1XyjvbQisgSid24voeUHQgD0weedVDQjD6B9By7zMI6Yz+cM/w6H8zB8ZRn6qZuWZAxFOjKvzoz+3vf32tyZE7QmLFnXDgQpFxw==[ttl=55271]
257 3 8
AQPDzldNmMvZFX4NcNJ0uEnKDg7tmv/F3MyQR0lpBmVcNcsIszxNFxsBfKNW9JYCYqpik8366LE7VbIcNRzfp2h9OO8HRl+H+E08zauK8k7evWEmu/6od+2boggPoiEfGNyvNPaSI7FOIroDsnw/taggzHRX1Z7SOiOiPWPNIwSUyWOZ79VmcQ1GLkC6NlYvG3HwYmynQv6oFwGv/KELSw7ZSdrbTQ0HXvZbqMUI7BaMskmvgm1G7oKZ1YiF7O9ioVNc0+7ASbqmZN7Z98EGU/Qh2K/BgUe8Hs0XVcdPKrtyYnoQHd2ynKPcMMlTEih2/2HDHjRPJ2aywIpKNnv4oPo/[ttl=55271]
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]    com:
updating validation state with cache content for com to Secure
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Retrieved
2 DNSKeys for com, state is Secure
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Going to
validate 1 record contents with 1 sigs and 2 keys for com
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Secure!
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] : got
status Secure for name UE91PO6QM9K9CRKPCPBU5GE4S5QNJS4C.com (from com)
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] : got
initial zone status Secure for record
UE91PO6QM9K9CRKPCPBU5GE4S5QNJS4C.com|NSEC3
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Validating
non-additional record for UE91PO6QM9K9CRKPCPBU5GE4S5QNJS4C.com
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Retrieving
DNSKeys for com
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]    com:
Wants DNSSEC processing, auth data in query for DNSKEY
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]    com:
Found cache hit for DNSKEY: 256 3 8
AQOcWJruwENIaapq3h3lKJlflLx6rWJz2aKRBV6CBJRTxZu4ge2iDX164dQ7Hpc9b8C9z2gqWyx1XyjvbQisgSid24voeUHQgD0weedVDQjD6B9By7zMI6Yz+cM/w6H8zB8ZRn6qZuWZAxFOjKvzoz+3vf32tyZE7QmLFnXDgQpFxw==[ttl=55271]
257 3 8
AQPDzldNmMvZFX4NcNJ0uEnKDg7tmv/F3MyQR0lpBmVcNcsIszxNFxsBfKNW9JYCYqpik8366LE7VbIcNRzfp2h9OO8HRl+H+E08zauK8k7evWEmu/6od+2boggPoiEfGNyvNPaSI7FOIroDsnw/taggzHRX1Z7SOiOiPWPNIwSUyWOZ79VmcQ1GLkC6NlYvG3HwYmynQv6oFwGv/KELSw7ZSdrbTQ0HXvZbqMUI7BaMskmvgm1G7oKZ1YiF7O9ioVNc0+7ASbqmZN7Z98EGU/Qh2K/BgUe8Hs0XVcdPKrtyYnoQHd2ynKPcMMlTEih2/2HDHjRPJ2aywIpKNnv4oPo/[ttl=55271]
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]    com:
updating validation state with cache content for com to Secure
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Retrieved
2 DNSKeys for com, state is Secure
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Going to
validate 1 record contents with 1 sigs and 2 keys for
UE91PO6QM9K9CRKPCPBU5GE4S5QNJS4C.com
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Secure!
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] : got
status Secure for name CK0POJMG874LJREF7EFN8430QVIT8BSM.com (from com)
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] : got
initial zone status Secure for record
CK0POJMG874LJREF7EFN8430QVIT8BSM.com|NSEC3
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Validating
non-additional record for CK0POJMG874LJREF7EFN8430QVIT8BSM.com
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Retrieving
DNSKeys for com
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]    com:
Wants DNSSEC processing, auth data in query for DNSKEY
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]    com:
Found cache hit for DNSKEY: 256 3 8
AQOcWJruwENIaapq3h3lKJlflLx6rWJz2aKRBV6CBJRTxZu4ge2iDX164dQ7Hpc9b8C9z2gqWyx1XyjvbQisgSid24voeUHQgD0weedVDQjD6B9By7zMI6Yz+cM/w6H8zB8ZRn6qZuWZAxFOjKvzoz+3vf32tyZE7QmLFnXDgQpFxw==[ttl=55271]
257 3 8
AQPDzldNmMvZFX4NcNJ0uEnKDg7tmv/F3MyQR0lpBmVcNcsIszxNFxsBfKNW9JYCYqpik8366LE7VbIcNRzfp2h9OO8HRl+H+E08zauK8k7evWEmu/6od+2boggPoiEfGNyvNPaSI7FOIroDsnw/taggzHRX1Z7SOiOiPWPNIwSUyWOZ79VmcQ1GLkC6NlYvG3HwYmynQv6oFwGv/KELSw7ZSdrbTQ0HXvZbqMUI7BaMskmvgm1G7oKZ1YiF7O9ioVNc0+7ASbqmZN7Z98EGU/Qh2K/BgUe8Hs0XVcdPKrtyYnoQHd2ynKPcMMlTEih2/2HDHjRPJ2aywIpKNnv4oPo/[ttl=55271]
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]    com:
updating validation state with cache content for com to Secure
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Retrieved
2 DNSKeys for com, state is Secure
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Going to
validate 1 record contents with 1 sigs and 2 keys for
CK0POJMG874LJREF7EFN8430QVIT8BSM.com
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Secure!
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]  
efax.com: determining status after receiving this packet
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]  
efax.com: got negative caching indication for 'efax.com|DS'
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] OPT-out
denial found for efax.com
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]  
efax.com: status=noerror, other types may exist, but we are done (have
negative SOA) (have aa bit)
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] : - Found
cut at efax.com
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] : New
state for efax.com is Insecure
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] : -
Looking for a cut at inbound.efax.com
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] : no TA
found for 'inbound.efax.com' among 1
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] : list of
cuts from inbound.efax.com to .
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]:  - .: Secure
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]:  - com: Secure
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]:  - efax.com: Insecure
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]
inbound.efax.com: Checking if we have NS in cache for 'inbound.efax.com'
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]
inbound.efax.com: no valid/useful NS in cache for 'inbound.efax.com'
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]
inbound.efax.com: Checking if we have NS in cache for 'efax.com'
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]
inbound.efax.com: NS (with ip, or non-glue) in cache for 'efax.com' ->
'ns1.j2global.com'
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]
inbound.efax.com: within bailiwick: 0, not in cache / did not look at cache
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]
inbound.efax.com: NS (with ip, or non-glue) in cache for 'efax.com' ->
'ns2.j2global.com'
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]
inbound.efax.com: within bailiwick: 0, not in cache / did not look at cache
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]
inbound.efax.com: NS (with ip, or non-glue) in cache for 'efax.com' ->
'ns5.j2global.com'
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]
inbound.efax.com: within bailiwick: 0, not in cache / did not look at cache
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]
inbound.efax.com: We have NS in cache for 'efax.com' (flawedNSSet=0)
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] : got
status Insecure for name inbound.efax.com (from efax.com)
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]
inbound.efax.com: initial validation status for inbound.efax.com is Insecure
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]
inbound.efax.com: Cache consultations done, have 3 NS to contact
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]
inbound.efax.com.: Nameservers: ns1.j2global.com(0.45ms),
ns5.j2global.com(1.39ms), ns2.j2global.com(2.30ms)
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]
inbound.efax.com: Trying to resolve NS 'ns1.j2global.com' (1/3)
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   
ns1.j2global.com: Wants DNSSEC processing, NO auth data in query for A
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   
ns1.j2global.com: Looking for CNAME cache hit of 'ns1.j2global.com|CNAME'
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   
ns1.j2global.com: Looking for DNAME cache hit of 'com|DNAME'
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   
ns1.j2global.com: Looking for DNAME cache hit of 'j2global.com|DNAME'
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   
ns1.j2global.com: No CNAME or DNAME cache hit of 'ns1.j2global.com' found
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   
ns1.j2global.com: Found cache hit for A: 204.11.168.64[ttl=74204]
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   
ns1.j2global.com: updating validation state with cache content for
ns1.j2global.com to Indeterminate
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]
inbound.efax.com: Resolved 'efax.com' NS ns1.j2global.com to: 204.11.168.64
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]
inbound.efax.com: Trying IP 204.11.168.64:53, asking 'inbound.efax.com|MX'
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]
inbound.efax.com: Got 3 answers from ns1.j2global.com (204.11.168.64),
rcode=0 (No Error), aa=0, in 12ms
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Removing
record 'inbound.efax.com|MX|5 bounced.efax.com.' in the answer section
without the AA bit set received from efax.com
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Removing
record 'inbound.efax.com|MX|10 bounced2.efax.com.' in the answer section
without the AA bit set received from efax.com
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]
inbound.efax.com: OPT answer '.' from 'efax.com' nameservers
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]
inbound.efax.com: determining status after receiving this packet
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]
inbound.efax.com: Trying to resolve NS 'ns5.j2global.com' (2/3)
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   
ns5.j2global.com: Wants DNSSEC processing, NO auth data in query for A
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   
ns5.j2global.com: Looking for CNAME cache hit of 'ns5.j2global.com|CNAME'
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   
ns5.j2global.com: Looking for DNAME cache hit of 'com|DNAME'
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   
ns5.j2global.com: Looking for DNAME cache hit of 'j2global.com|DNAME'
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   
ns5.j2global.com: No CNAME or DNAME cache hit of 'ns5.j2global.com' found
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   
ns5.j2global.com: Found cache hit for A: 204.11.169.11[ttl=74204]
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   
ns5.j2global.com: updating validation state with cache content for
ns5.j2global.com to Indeterminate
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]
inbound.efax.com: Resolved 'efax.com' NS ns5.j2global.com to: 204.11.169.11
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]
inbound.efax.com: Trying IP 204.11.169.11:53, asking 'inbound.efax.com|MX'
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]
inbound.efax.com: Got 3 answers from ns5.j2global.com (204.11.169.11),
rcode=0 (No Error), aa=0, in 38ms
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Removing
record 'inbound.efax.com|MX|10 bounced2.efax.com.' in the answer section
without the AA bit set received from efax.com
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Removing
record 'inbound.efax.com|MX|5 bounced.efax.com.' in the answer section
without the AA bit set received from efax.com
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]
inbound.efax.com: OPT answer '.' from 'efax.com' nameservers
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]
inbound.efax.com: determining status after receiving this packet
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]
inbound.efax.com: Trying to resolve NS 'ns2.j2global.com' (3/3)
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   
ns2.j2global.com: Wants DNSSEC processing, NO auth data in query for A
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   
ns2.j2global.com: Looking for CNAME cache hit of 'ns2.j2global.com|CNAME'
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   
ns2.j2global.com: Looking for DNAME cache hit of 'com|DNAME'
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   
ns2.j2global.com: Looking for DNAME cache hit of 'j2global.com|DNAME'
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   
ns2.j2global.com: No CNAME or DNAME cache hit of 'ns2.j2global.com' found
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   
ns2.j2global.com: Found cache hit for A: 52.21.247.224[ttl=74204]
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   
ns2.j2global.com: updating validation state with cache content for
ns2.j2global.com to Indeterminate
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]
inbound.efax.com: Resolved 'efax.com' NS ns2.j2global.com to: 52.21.247.224
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]
inbound.efax.com: Trying IP 52.21.247.224:53, asking 'inbound.efax.com|MX'
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]
inbound.efax.com: Got 3 answers from ns2.j2global.com (52.21.247.224),
rcode=0 (No Error), aa=0, in 63ms
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Removing
record 'inbound.efax.com|MX|5 bounced.efax.com.' in the answer section
without the AA bit set received from efax.com
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Removing
record 'inbound.efax.com|MX|10 bounced2.efax.com.' in the answer section
without the AA bit set received from efax.com
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]
inbound.efax.com: OPT answer '.' from 'efax.com' nameservers
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]
inbound.efax.com: determining status after receiving this packet
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]
inbound.efax.com: Failed to resolve via any of the 3 offered NS at level
'efax.com'
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]
inbound.efax.com: failed (res=-1)
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: Starting validation
of answer to inbound.efax.com|MX for w.x.y.z:58108
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: Answer to
inbound.efax.com|MX for w.x.y.z:58108 validates as Insecure
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: 2 [3546702/3]
question for 'inbound.efax.com|A' from w.x.y.z:56469
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]
inbound.efax.com: Wants DNSSEC processing, auth data in query for A
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]
inbound.efax.com: Looking for CNAME cache hit of 'inbound.efax.com|CNAME'
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]
inbound.efax.com: Looking for DNAME cache hit of 'com|DNAME'
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]
inbound.efax.com: Looking for DNAME cache hit of 'efax.com|DNAME'
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]
inbound.efax.com: No CNAME or DNAME cache hit of 'inbound.efax.com' found
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]
inbound.efax.com: No cache hit for 'inbound.efax.com|A', trying to find
an appropriate NS record
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] : got TA
for '.'
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] : setting
cut state for . to Secure
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] : -
Looking for a cut at com
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] : no TA
found for 'com' among 1
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]   com:
Wants DNSSEC processing, auth data in query for DS
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]   com:
Found cache hit for DS: 30909 8 2
e2d3c916f6deeac73294e8268fb5885044a833fc5459588f4a9184cfc41a5766[ttl=60704]
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]   com:
updating validation state with cache content for com to Secure
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] : - Found
cut at com
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] : New
state for com is Secure
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] : -
Looking for a cut at efax.com
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] : no TA
found for 'efax.com' among 1
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]  
efax.com: Wants DNSSEC processing, auth data in query for DS
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]  
efax.com: DS is negatively cached via 'com' for another 300 seconds
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]  
efax.com: updating validation state with negative cache content for
efax.com to Secure
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] : - Found
cut at efax.com
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] : New
state for efax.com is Insecure
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] : -
Looking for a cut at inbound.efax.com
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] : no TA
found for 'inbound.efax.com' among 1
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] : list of
cuts from inbound.efax.com to .
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]:  - .: Secure
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]:  - com: Secure
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]:  - efax.com: Insecure
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]
inbound.efax.com: Checking if we have NS in cache for 'inbound.efax.com'
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]
inbound.efax.com: no valid/useful NS in cache for 'inbound.efax.com'
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]
inbound.efax.com: Checking if we have NS in cache for 'efax.com'
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]
inbound.efax.com: NS (with ip, or non-glue) in cache for 'efax.com' ->
'ns1.j2global.com'
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]
inbound.efax.com: within bailiwick: 0, not in cache / did not look at cache
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]
inbound.efax.com: NS (with ip, or non-glue) in cache for 'efax.com' ->
'ns2.j2global.com'
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]
inbound.efax.com: within bailiwick: 0, not in cache / did not look at cache
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]
inbound.efax.com: NS (with ip, or non-glue) in cache for 'efax.com' ->
'ns5.j2global.com'
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]
inbound.efax.com: within bailiwick: 0, not in cache / did not look at cache
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]
inbound.efax.com: We have NS in cache for 'efax.com' (flawedNSSet=0)
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] : got
status Insecure for name inbound.efax.com (from efax.com)
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]
inbound.efax.com: initial validation status for inbound.efax.com is Insecure
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]
inbound.efax.com: Cache consultations done, have 3 NS to contact
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]
inbound.efax.com.: Nameservers: ns1.j2global.com(12.67ms),
ns5.j2global.com(38.17ms), ns2.j2global.com(63.91ms)
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]
inbound.efax.com: Trying to resolve NS 'ns1.j2global.com' (1/3)
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]   
ns1.j2global.com: Wants DNSSEC processing, NO auth data in query for A
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]   
ns1.j2global.com: Looking for CNAME cache hit of 'ns1.j2global.com|CNAME'
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]   
ns1.j2global.com: Looking for DNAME cache hit of 'com|DNAME'
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]   
ns1.j2global.com: Looking for DNAME cache hit of 'j2global.com|DNAME'
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]   
ns1.j2global.com: No CNAME or DNAME cache hit of 'ns1.j2global.com' found
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]   
ns1.j2global.com: Found cache hit for A: 204.11.168.64[ttl=74204]
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]   
ns1.j2global.com: updating validation state with cache content for
ns1.j2global.com to Indeterminate
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]
inbound.efax.com: Resolved 'efax.com' NS ns1.j2global.com to: 204.11.168.64
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]
inbound.efax.com: Trying IP 204.11.168.64:53, asking 'inbound.efax.com|A'
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]
inbound.efax.com: Got 2 answers from ns1.j2global.com (204.11.168.64),
rcode=0 (No Error), aa=0, in 12ms
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] Removing
record 'inbound.efax.com|A|204.11.168.109' in the answer section without
the AA bit set received from efax.com
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]
inbound.efax.com: OPT answer '.' from 'efax.com' nameservers
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]
inbound.efax.com: determining status after receiving this packet
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]
inbound.efax.com: Trying to resolve NS 'ns5.j2global.com' (2/3)
Jun 19 22:1Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: 2
[3546701/3] question for 'inbound.efax.com|MX' from w.x.y.z:58108
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]
inbound.efax.com: Wants DNSSEC processing, auth data in query for MX
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]
inbound.efax.com: Looking for CNAME cache hit of 'inbound.efax.com|CNAME'
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]
inbound.efax.com: Looking for DNAME cache hit of 'com|DNAME'
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]
inbound.efax.com: Looking for DNAME cache hit of 'efax.com|DNAME'
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]
inbound.efax.com: No CNAME or DNAME cache hit of 'inbound.efax.com' found
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]
inbound.efax.com: No cache hit for 'inbound.efax.com|MX', trying to find
an appropriate NS record
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] : got TA
for '.'
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] : setting
cut state for . to Secure
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] : -
Looking for a cut at com
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] : no TA
found for 'com' among 1
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   com:
Wants DNSSEC processing, auth data in query for DS
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   com:
Found cache hit for DS: 30909 8 2
e2d3c916f6deeac73294e8268fb5885044a833fc5459588f4a9184cfc41a5766[ttl=60704]
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   com:
updating validation state with cache content for com to Secure
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] : - Found
cut at com
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] : New
state for com is Secure
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] : -
Looking for a cut at efax.com
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] : no TA
found for 'efax.com' among 1
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]  
efax.com: Wants DNSSEC processing, auth data in query for DS
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]  
efax.com: No cache hit for 'efax.com|DS', trying to find an appropriate
NS record
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   com:
Checking if we have NS in cache for 'com'
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   com: NS
(with ip, or non-glue) in cache for 'com' -> 'a.gtld-servers.net'
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   com:
within bailiwick: 0, not in cache / did not look at cache
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   com: NS
(with ip, or non-glue) in cache for 'com' -> 'g.gtld-servers.net'
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   com:
within bailiwick: 0, not in cache / did not look at cache
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   com: NS
(with ip, or non-glue) in cache for 'com' -> 'm.gtld-servers.net'
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   com:
within bailiwick: 0, not in cache / did not look at cache
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   com: NS
(with ip, or non-glue) in cache for 'com' -> 'h.gtld-servers.net'
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   com:
within bailiwick: 0, not in cache / did not look at cache
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   com: NS
(with ip, or non-glue) in cache for 'com' -> 'b.gtld-servers.net'
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   com:
within bailiwick: 0, not in cache / did not look at cache
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   com: NS
(with ip, or non-glue) in cache for 'com' -> 'c.gtld-servers.net'
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   com:
within bailiwick: 0, not in cache / did not look at cache
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   com: NS
(with ip, or non-glue) in cache for 'com' -> 'd.gtld-servers.net'
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   com:
within bailiwick: 0, not in cache / did not look at cache
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   com: NS
(with ip, or non-glue) in cache for 'com' -> 'f.gtld-servers.net'
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   com:
within bailiwick: 0, not in cache / did not look at cache
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   com: NS
(with ip, or non-glue) in cache for 'com' -> 'l.gtld-servers.net'
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   com:
within bailiwick: 0, not in cache / did not look at cache
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   com: NS
(with ip, or non-glue) in cache for 'com' -> 'k.gtld-servers.net'
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   com:
within bailiwick: 0, not in cache / did not look at cache
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   com: NS
(with ip, or non-glue) in cache for 'com' -> 'e.gtld-servers.net'
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   com:
within bailiwick: 0, not in cache / did not look at cache
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   com: NS
(with ip, or non-glue) in cache for 'com' -> 'i.gtld-servers.net'
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   com:
within bailiwick: 0, not in cache / did not look at cache
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   com: NS
(with ip, or non-glue) in cache for 'com' -> 'j.gtld-servers.net'
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   com:
within bailiwick: 0, not in cache / did not look at cache
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   com: We
have NS in cache for 'com' (flawedNSSet=0)
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] : got
status Secure for name efax.com (from com)
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]  
efax.com: initial validation status for efax.com is Secure
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]  
efax.com: Cache consultations done, have 13 NS to contact
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]  
efax.com.: Nameservers: d.gtld-servers.net(2.89ms),
m.gtld-servers.net(2.92ms), l.gtld-servers.net(2.95ms),
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]  
efax.com.:              k.gtld-servers.net(3.01ms),
b.gtld-servers.net(3.89ms), h.gtld-servers.net(4.09ms),
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]  
efax.com.:              j.gtld-servers.net(5.01ms),
i.gtld-servers.net(5.88ms), g.gtld-servers.net(7.57ms),
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]  
efax.com.:              f.gtld-servers.net(7.68ms),
c.gtld-servers.net(7.94ms), e.gtld-servers.net(9.86ms),
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]  
efax.com.:              a.gtld-servers.net(11.15ms)
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]  
efax.com: Trying to resolve NS 'd.gtld-servers.net' (1/13)
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]     
d.gtld-servers.net: Wants DNSSEC processing, NO auth data in query for A
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]     
d.gtld-servers.net: Found cache hit for A: 192.31.80.30[ttl=34195]
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]     
d.gtld-servers.net: updating validation state with cache content for
d.gtld-servers.net to Insecure
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]    
Nameserver d.gtld-servers.net IPs: 2001:500:856e::30(2.89ms),
192.31.80.30(12.81ms)
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]  
efax.com: Resolved 'com' NS d.gtld-servers.net to: 2001:500:856e::30,
192.31.80.30
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]  
efax.com: Trying IP [2001:500:856e::30]:53, asking 'efax.com|DS'
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]  
efax.com: Got 7 answers from d.gtld-servers.net (2001:500:856e::30),
rcode=0 (No Error), aa=1, in 60ms
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]  
efax.com: accept answer 'CK0POJMG874LJREF7EFN8430QVIT8BSM.com|NSEC3|1 1
0 - CK0Q1GIN43N1ARRC9OSM6QPQR81H5M9A NS SOA RRSIG DNSKEY NSEC3PARAM'
from 'com' nameservers? ttl=86400, place=2 YES!
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]  
efax.com: accept answer
'CK0POJMG874LJREF7EFN8430QVIT8BSM.com|RRSIG|NSEC3 8 2 86400
20190624044534 20190617033534 3800 com.
CXkmAw0Yj+e3boQ92LrOOdoyYyXpX3KIWBytEn0RQtae+a5yww4+SnUimpdagv57ZOUS5TLNl1Bgr5Z9s1vKEZhipRWe1qERl8HiNjL8uwkcNqFfEs3pkOxuwZJJEwTuG5clELIs83v+6najjEIJw56q/eu4VT/vw21pEk9mtYI='
from 'com' nameservers? ttl=86400, place=2 RRSIG - separate
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]  
efax.com: accept answer 'com|SOA|a.gtld-servers.net.
nstld.verisign-grs.com. 1561007656 1800 900 604800 86400' from 'com'
nameservers? ttl=900, place=2 YES!
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]  
efax.com: accept answer 'com|RRSIG|SOA 8 1 900 20190627051416
20190620040416 3800 com.
Fqugfk6Qm+m2fZymHEuSbWkwwYh+bpq8B2BRpXwO28mvlPsYhB0rMtuyS1eyhbHB51CcQQEjFk+Vesr6YcUqag3lu06T+Lc0zJXM+fmM6jXe4dAC3N7+Xg2mhpv87FdNuNeyjxVh2BzXBXC3cCR273VaYHkDLDjbiQft9AsF45U='
from 'com' nameservers? ttl=900, place=2 RRSIG - separate
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]  
efax.com: accept answer 'UE91PO6QM9K9CRKPCPBU5GE4S5QNJS4C.com|NSEC3|1 1
0 - UE93IVHH5QPHRO2CKETFIHCN58H1576G NS DS RRSIG' from 'com'
nameservers? ttl=86400, place=2 YES!
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]  
efax.com: accept answer
'UE91PO6QM9K9CRKPCPBU5GE4S5QNJS4C.com|RRSIG|NSEC3 8 2 86400
20190626042101 20190619031101 3800 com.
N96N6Qy5K0E+O0MXCPaFAwJGTLRayYXI70TUb2cCsDKs7aYl/SrT5pKoutY3fUG2Fk13JYdqzZ46UjEN1BGE5ttF40m+L7W0wNQbUIr0xhF4AaXveFc2bR6jQZbry9AiZlBbewbdw5vOU7lAyXP/lPsC9rZFNui8froFwnxkMP4='
from 'com' nameservers? ttl=86400, place=2 RRSIG - separate
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]  
efax.com: OPT answer '.' from 'com' nameservers
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] : got
status Secure for name com (from com)
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] : got
initial zone status Secure for record com|SOA
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Validating
non-additional record for com
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Retrieving
DNSKeys for com
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]    com:
Wants DNSSEC processing, auth data in query for DNSKEY
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]    com:
Found cache hit for DNSKEY: 256 3 8
AQOcWJruwENIaapq3h3lKJlflLx6rWJz2aKRBV6CBJRTxZu4ge2iDX164dQ7Hpc9b8C9z2gqWyx1XyjvbQisgSid24voeUHQgD0weedVDQjD6B9By7zMI6Yz+cM/w6H8zB8ZRn6qZuWZAxFOjKvzoz+3vf32tyZE7QmLFnXDgQpFxw==[ttl=55271]
257 3 8
AQPDzldNmMvZFX4NcNJ0uEnKDg7tmv/F3MyQR0lpBmVcNcsIszxNFxsBfKNW9JYCYqpik8366LE7VbIcNRzfp2h9OO8HRl+H+E08zauK8k7evWEmu/6od+2boggPoiEfGNyvNPaSI7FOIroDsnw/taggzHRX1Z7SOiOiPWPNIwSUyWOZ79VmcQ1GLkC6NlYvG3HwYmynQv6oFwGv/KELSw7ZSdrbTQ0HXvZbqMUI7BaMskmvgm1G7oKZ1YiF7O9ioVNc0+7ASbqmZN7Z98EGU/Qh2K/BgUe8Hs0XVcdPKrtyYnoQHd2ynKPcMMlTEih2/2HDHjRPJ2aywIpKNnv4oPo/[ttl=55271]
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]    com:
updating validation state with cache content for com to Secure
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Retrieved
2 DNSKeys for com, state is Secure
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Going to
validate 1 record contents with 1 sigs and 2 keys for com
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Secure!
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] : got
status Secure for name UE91PO6QM9K9CRKPCPBU5GE4S5QNJS4C.com (from com)
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] : got
initial zone status Secure for record
UE91PO6QM9K9CRKPCPBU5GE4S5QNJS4C.com|NSEC3
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Validating
non-additional record for UE91PO6QM9K9CRKPCPBU5GE4S5QNJS4C.com
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Retrieving
DNSKeys for com
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]    com:
Wants DNSSEC processing, auth data in query for DNSKEY
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]    com:
Found cache hit for DNSKEY: 256 3 8
AQOcWJruwENIaapq3h3lKJlflLx6rWJz2aKRBV6CBJRTxZu4ge2iDX164dQ7Hpc9b8C9z2gqWyx1XyjvbQisgSid24voeUHQgD0weedVDQjD6B9By7zMI6Yz+cM/w6H8zB8ZRn6qZuWZAxFOjKvzoz+3vf32tyZE7QmLFnXDgQpFxw==[ttl=55271]
257 3 8
AQPDzldNmMvZFX4NcNJ0uEnKDg7tmv/F3MyQR0lpBmVcNcsIszxNFxsBfKNW9JYCYqpik8366LE7VbIcNRzfp2h9OO8HRl+H+E08zauK8k7evWEmu/6od+2boggPoiEfGNyvNPaSI7FOIroDsnw/taggzHRX1Z7SOiOiPWPNIwSUyWOZ79VmcQ1GLkC6NlYvG3HwYmynQv6oFwGv/KELSw7ZSdrbTQ0HXvZbqMUI7BaMskmvgm1G7oKZ1YiF7O9ioVNc0+7ASbqmZN7Z98EGU/Qh2K/BgUe8Hs0XVcdPKrtyYnoQHd2ynKPcMMlTEih2/2HDHjRPJ2aywIpKNnv4oPo/[ttl=55271]
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]    com:
updating validation state with cache content for com to Secure
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Retrieved
2 DNSKeys for com, state is Secure
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Going to
validate 1 record contents with 1 sigs and 2 keys for
UE91PO6QM9K9CRKPCPBU5GE4S5QNJS4C.com
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Secure!
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] : got
status Secure for name CK0POJMG874LJREF7EFN8430QVIT8BSM.com (from com)
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] : got
initial zone status Secure for record
CK0POJMG874LJREF7EFN8430QVIT8BSM.com|NSEC3
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Validating
non-additional record for CK0POJMG874LJREF7EFN8430QVIT8BSM.com
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Retrieving
DNSKeys for com
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]    com:
Wants DNSSEC processing, auth data in query for DNSKEY
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]    com:
Found cache hit for DNSKEY: 256 3 8
AQOcWJruwENIaapq3h3lKJlflLx6rWJz2aKRBV6CBJRTxZu4ge2iDX164dQ7Hpc9b8C9z2gqWyx1XyjvbQisgSid24voeUHQgD0weedVDQjD6B9By7zMI6Yz+cM/w6H8zB8ZRn6qZuWZAxFOjKvzoz+3vf32tyZE7QmLFnXDgQpFxw==[ttl=55271]
257 3 8
AQPDzldNmMvZFX4NcNJ0uEnKDg7tmv/F3MyQR0lpBmVcNcsIszxNFxsBfKNW9JYCYqpik8366LE7VbIcNRzfp2h9OO8HRl+H+E08zauK8k7evWEmu/6od+2boggPoiEfGNyvNPaSI7FOIroDsnw/taggzHRX1Z7SOiOiPWPNIwSUyWOZ79VmcQ1GLkC6NlYvG3HwYmynQv6oFwGv/KELSw7ZSdrbTQ0HXvZbqMUI7BaMskmvgm1G7oKZ1YiF7O9ioVNc0+7ASbqmZN7Z98EGU/Qh2K/BgUe8Hs0XVcdPKrtyYnoQHd2ynKPcMMlTEih2/2HDHjRPJ2aywIpKNnv4oPo/[ttl=55271]
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]    com:
updating validation state with cache content for com to Secure
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Retrieved
2 DNSKeys for com, state is Secure
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Going to
validate 1 record contents with 1 sigs and 2 keys for
CK0POJMG874LJREF7EFN8430QVIT8BSM.com
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Secure!
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]  
efax.com: determining status after receiving this packet
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]  
efax.com: got negative caching indication for 'efax.com|DS'
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] OPT-out
denial found for efax.com
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]  
efax.com: status=noerror, other types may exist, but we are done (have
negative SOA) (have aa bit)
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] : - Found
cut at efax.com
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] : New
state for efax.com is Insecure
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] : -
Looking for a cut at inbound.efax.com
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] : no TA
found for 'inbound.efax.com' among 1
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] : list of
cuts from inbound.efax.com to .
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]:  - .: Secure
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]:  - com: Secure
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]:  - efax.com: Insecure
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]
inbound.efax.com: Checking if we have NS in cache for 'inbound.efax.com'
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]
inbound.efax.com: no valid/useful NS in cache for 'inbound.efax.com'
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]
inbound.efax.com: Checking if we have NS in cache for 'efax.com'
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]
inbound.efax.com: NS (with ip, or non-glue) in cache for 'efax.com' ->
'ns1.j2global.com'
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]
inbound.efax.com: within bailiwick: 0, not in cache / did not look at cache
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]
inbound.efax.com: NS (with ip, or non-glue) in cache for 'efax.com' ->
'ns2.j2global.com'
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]
inbound.efax.com: within bailiwick: 0, not in cache / did not look at cache
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]
inbound.efax.com: NS (with ip, or non-glue) in cache for 'efax.com' ->
'ns5.j2global.com'
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]
inbound.efax.com: within bailiwick: 0, not in cache / did not look at cache
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]
inbound.efax.com: We have NS in cache for 'efax.com' (flawedNSSet=0)
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] : got
status Insecure for name inbound.efax.com (from efax.com)
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]
inbound.efax.com: initial validation status for inbound.efax.com is Insecure
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]
inbound.efax.com: Cache consultations done, have 3 NS to contact
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]
inbound.efax.com.: Nameservers: ns1.j2global.com(0.45ms),
ns5.j2global.com(1.39ms), ns2.j2global.com(2.30ms)
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]
inbound.efax.com: Trying to resolve NS 'ns1.j2global.com' (1/3)
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   
ns1.j2global.com: Wants DNSSEC processing, NO auth data in query for A
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   
ns1.j2global.com: Looking for CNAME cache hit of 'ns1.j2global.com|CNAME'
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   
ns1.j2global.com: Looking for DNAME cache hit of 'com|DNAME'
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   
ns1.j2global.com: Looking for DNAME cache hit of 'j2global.com|DNAME'
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   
ns1.j2global.com: No CNAME or DNAME cache hit of 'ns1.j2global.com' found
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   
ns1.j2global.com: Found cache hit for A: 204.11.168.64[ttl=74204]
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   
ns1.j2global.com: updating validation state with cache content for
ns1.j2global.com to Indeterminate
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]
inbound.efax.com: Resolved 'efax.com' NS ns1.j2global.com to: 204.11.168.64
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]
inbound.efax.com: Trying IP 204.11.168.64:53, asking 'inbound.efax.com|MX'
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]
inbound.efax.com: Got 3 answers from ns1.j2global.com (204.11.168.64),
rcode=0 (No Error), aa=0, in 12ms
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Removing
record 'inbound.efax.com|MX|5 bounced.efax.com.' in the answer section
without the AA bit set received from efax.com
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Removing
record 'inbound.efax.com|MX|10 bounced2.efax.com.' in the answer section
without the AA bit set received from efax.com
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]
inbound.efax.com: OPT answer '.' from 'efax.com' nameservers
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]
inbound.efax.com: determining status after receiving this packet
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]
inbound.efax.com: Trying to resolve NS 'ns5.j2global.com' (2/3)
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   
ns5.j2global.com: Wants DNSSEC processing, NO auth data in query for A
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   
ns5.j2global.com: Looking for CNAME cache hit of 'ns5.j2global.com|CNAME'
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   
ns5.j2global.com: Looking for DNAME cache hit of 'com|DNAME'
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   
ns5.j2global.com: Looking for DNAME cache hit of 'j2global.com|DNAME'
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   
ns5.j2global.com: No CNAME or DNAME cache hit of 'ns5.j2global.com' found
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   
ns5.j2global.com: Found cache hit for A: 204.11.169.11[ttl=74204]
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   
ns5.j2global.com: updating validation state with cache content for
ns5.j2global.com to Indeterminate
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]
inbound.efax.com: Resolved 'efax.com' NS ns5.j2global.com to: 204.11.169.11
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]
inbound.efax.com: Trying IP 204.11.169.11:53, asking 'inbound.efax.com|MX'
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]
inbound.efax.com: Got 3 answers from ns5.j2global.com (204.11.169.11),
rcode=0 (No Error), aa=0, in 38ms
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Removing
record 'inbound.efax.com|MX|10 bounced2.efax.com.' in the answer section
without the AA bit set received from efax.com
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Removing
record 'inbound.efax.com|MX|5 bounced.efax.com.' in the answer section
without the AA bit set received from efax.com
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]
inbound.efax.com: OPT answer '.' from 'efax.com' nameservers
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]
inbound.efax.com: determining status after receiving this packet
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]
inbound.efax.com: Trying to resolve NS 'ns2.j2global.com' (3/3)
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   
ns2.j2global.com: Wants DNSSEC processing, NO auth data in query for A
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   
ns2.j2global.com: Looking for CNAME cache hit of 'ns2.j2global.com|CNAME'
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   
ns2.j2global.com: Looking for DNAME cache hit of 'com|DNAME'
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   
ns2.j2global.com: Looking for DNAME cache hit of 'j2global.com|DNAME'
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   
ns2.j2global.com: No CNAME or DNAME cache hit of 'ns2.j2global.com' found
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   
ns2.j2global.com: Found cache hit for A: 52.21.247.224[ttl=74204]
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]   
ns2.j2global.com: updating validation state with cache content for
ns2.j2global.com to Indeterminate
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]
inbound.efax.com: Resolved 'efax.com' NS ns2.j2global.com to: 52.21.247.224
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]
inbound.efax.com: Trying IP 52.21.247.224:53, asking 'inbound.efax.com|MX'
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]
inbound.efax.com: Got 3 answers from ns2.j2global.com (52.21.247.224),
rcode=0 (No Error), aa=0, in 63ms
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Removing
record 'inbound.efax.com|MX|5 bounced.efax.com.' in the answer section
without the AA bit set received from efax.com
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701] Removing
record 'inbound.efax.com|MX|10 bounced2.efax.com.' in the answer section
without the AA bit set received from efax.com
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]
inbound.efax.com: OPT answer '.' from 'efax.com' nameservers
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]
inbound.efax.com: determining status after receiving this packet
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]
inbound.efax.com: Failed to resolve via any of the 3 offered NS at level
'efax.com'
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: [3546701]
inbound.efax.com: failed (res=-1)
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: Starting validation
of answer to inbound.efax.com|MX for w.x.y.z:58108
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: Answer to
inbound.efax.com|MX for w.x.y.z:58108 validates as Insecure
Jun 19 22:14:39 rslvall-sub-a pdns_recursor[23530]: 2 [3546702/3]
question for 'inbound.efax.com|A' from w.x.y.z:56469
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]
inbound.efax.com: Wants DNSSEC processing, auth data in query for A
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]
inbound.efax.com: Looking for CNAME cache hit of 'inbound.efax.com|CNAME'
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]
inbound.efax.com: Looking for DNAME cache hit of 'com|DNAME'
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]
inbound.efax.com: Looking for DNAME cache hit of 'efax.com|DNAME'
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]
inbound.efax.com: No CNAME or DNAME cache hit of 'inbound.efax.com' found
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]
inbound.efax.com: No cache hit for 'inbound.efax.com|A', trying to find
an appropriate NS record
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] : got TA
for '.'
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] : setting
cut state for . to Secure
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] : -
Looking for a cut at com
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] : no TA
found for 'com' among 1
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]   com:
Wants DNSSEC processing, auth data in query for DS
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]   com:
Found cache hit for DS: 30909 8 2
e2d3c916f6deeac73294e8268fb5885044a833fc5459588f4a9184cfc41a5766[ttl=60704]
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]   com:
updating validation state with cache content for com to Secure
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] : - Found
cut at com
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] : New
state for com is Secure
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] : -
Looking for a cut at efax.com
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] : no TA
found for 'efax.com' among 1
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]  
efax.com: Wants DNSSEC processing, auth data in query for DS
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]  
efax.com: DS is negatively cached via 'com' for another 300 seconds
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]  
efax.com: updating validation state with negative cache content for
efax.com to Secure
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] : - Found
cut at efax.com
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] : New
state for efax.com is Insecure
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] : -
Looking for a cut at inbound.efax.com
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] : no TA
found for 'inbound.efax.com' among 1
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] : list of
cuts from inbound.efax.com to .
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]:  - .: Secure
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]:  - com: Secure
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]:  - efax.com: Insecure
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]
inbound.efax.com: Checking if we have NS in cache for 'inbound.efax.com'
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]
inbound.efax.com: no valid/useful NS in cache for 'inbound.efax.com'
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]
inbound.efax.com: Checking if we have NS in cache for 'efax.com'
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]
inbound.efax.com: NS (with ip, or non-glue) in cache for 'efax.com' ->
'ns1.j2global.com'
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]
inbound.efax.com: within bailiwick: 0, not in cache / did not look at cache
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]
inbound.efax.com: NS (with ip, or non-glue) in cache for 'efax.com' ->
'ns2.j2global.com'
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]
inbound.efax.com: within bailiwick: 0, not in cache / did not look at cache
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]
inbound.efax.com: NS (with ip, or non-glue) in cache for 'efax.com' ->
'ns5.j2global.com'
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]
inbound.efax.com: within bailiwick: 0, not in cache / did not look at cache
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]
inbound.efax.com: We have NS in cache for 'efax.com' (flawedNSSet=0)
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] : got
status Insecure for name inbound.efax.com (from efax.com)
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]
inbound.efax.com: initial validation status for inbound.efax.com is Insecure
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]
inbound.efax.com: Cache consultations done, have 3 NS to contact
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]
inbound.efax.com.: Nameservers: ns1.j2global.com(12.67ms),
ns5.j2global.com(38.17ms), ns2.j2global.com(63.91ms)
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]
inbound.efax.com: Trying to resolve NS 'ns1.j2global.com' (1/3)
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]   
ns1.j2global.com: Wants DNSSEC processing, NO auth data in query for A
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]   
ns1.j2global.com: Looking for CNAME cache hit of 'ns1.j2global.com|CNAME'
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]   
ns1.j2global.com: Looking for DNAME cache hit of 'com|DNAME'
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]   
ns1.j2global.com: Looking for DNAME cache hit of 'j2global.com|DNAME'
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]   
ns1.j2global.com: No CNAME or DNAME cache hit of 'ns1.j2global.com' found
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]   
ns1.j2global.com: Found cache hit for A: 204.11.168.64[ttl=74204]
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]   
ns1.j2global.com: updating validation state with cache content for
ns1.j2global.com to Indeterminate
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]
inbound.efax.com: Resolved 'efax.com' NS ns1.j2global.com to: 204.11.168.64
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]
inbound.efax.com: Trying IP 204.11.168.64:53, asking 'inbound.efax.com|A'
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]
inbound.efax.com: Got 2 answers from ns1.j2global.com (204.11.168.64),
rcode=0 (No Error), aa=0, in 12ms
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] Removing
record 'inbound.efax.com|A|204.11.168.109' in the answer section without
the AA bit set received from efax.com
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]
inbound.efax.com: OPT answer '.' from 'efax.com' nameservers
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]
inbound.efax.com: determining status after receiving this packet
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]
inbound.efax.com: Trying to resolve NS 'ns5.j2global.com' (2/3)
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]   
ns5.j2global.com: Wants DNSSEC processing, NO auth data in query for A
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]   
ns5.j2global.com: Looking for CNAME cache hit of 'ns5.j2global.com|CNAME'
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]   
ns5.j2global.com: Looking for DNAME cache hit of 'com|DNAME'
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]   
ns5.j2global.com: Looking for DNAME cache hit of 'j2global.com|DNAME'
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]   
ns5.j2global.com: No CNAME or DNAME cache hit of 'ns5.j2global.com' found
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]   
ns5.j2global.com: Found cache hit for A: 204.11.169.11[ttl=74204]
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]   
ns5.j2global.com: updating validation state with cache content for
ns5.j2global.com to Indeterminate
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]
inbound.efax.com: Resolved 'efax.com' NS ns5.j2global.com to: 204.11.169.11
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]
inbound.efax.com: Trying IP 204.11.169.11:53, asking 'inbound.efax.com|A'
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]
inbound.efax.com: Got 2 answers from ns5.j2global.com (204.11.169.11),
rcode=0 (No Error), aa=0, in 38ms
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] Removing
record 'inbound.efax.com|A|204.11.168.109' in the answer section without
the AA bit set received from efax.com
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]
inbound.efax.com: OPT answer '.' from 'efax.com' nameservers
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]
inbound.efax.com: determining status after receiving this packet
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]
inbound.efax.com: Trying to resolve NS 'ns2.j2global.com' (3/3)
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]   
ns2.j2global.com: Wants DNSSEC processing, NO auth data in query for A
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]   
ns2.j2global.com: Looking for CNAME cache hit of 'ns2.j2global.com|CNAME'
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]   
ns2.j2global.com: Looking for DNAME cache hit of 'com|DNAME'
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]   
ns2.j2global.com: Looking for DNAME cache hit of 'j2global.com|DNAME'
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]   
ns2.j2global.com: No CNAME or DNAME cache hit of 'ns2.j2global.com' found
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]   
ns2.j2global.com: Found cache hit for A: 52.21.247.224[ttl=74204]
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]   
ns2.j2global.com: updating validation state with cache content for
ns2.j2global.com to Indeterminate
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]
inbound.efax.com: Resolved 'efax.com' NS ns2.j2global.com to: 52.21.247.224
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]
inbound.efax.com: Trying IP 52.21.247.224:53, asking 'inbound.efax.com|A'
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]
inbound.efax.com: Got 2 answers from ns2.j2global.com (52.21.247.224),
rcode=0 (No Error), aa=0, in 63ms
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] Removing
record 'inbound.efax.com|A|204.11.168.109' in the answer section without
the AA bit set received from efax.com
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]
inbound.efax.com: OPT answer '.' from 'efax.com' nameservers
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]
inbound.efax.com: determining status after receiving this packet
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]
inbound.efax.com: Failed to resolve via any of the 3 offered NS at level
'efax.com'
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]
inbound.efax.com: failed (res=-1)
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: Starting validation
of answer to inbound.efax.com|A for w.x.y.z:56469
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: Answer to
inbound.efax.com|A for w.x.y.z:56469 validates as Insecure

4:40 rslvall-sub-a pdns_recursor[23530]: [3546702]    ns5.j2global.com:
Wants DNSSEC processing, NO auth data in query for A
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]   
ns5.j2global.com: Looking for CNAME cache hit of 'ns5.j2global.com|CNAME'
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]   
ns5.j2global.com: Looking for DNAME cache hit of 'com|DNAME'
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]   
ns5.j2global.com: Looking for DNAME cache hit of 'j2global.com|DNAME'
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]   
ns5.j2global.com: No CNAME or DNAME cache hit of 'ns5.j2global.com' found
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]   
ns5.j2global.com: Found cache hit for A: 204.11.169.11[ttl=74204]
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]   
ns5.j2global.com: updating validation state with cache content for
ns5.j2global.com to Indeterminate
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]
inbound.efax.com: Resolved 'efax.com' NS ns5.j2global.com to: 204.11.169.11
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]
inbound.efax.com: Trying IP 204.11.169.11:53, asking 'inbound.efax.com|A'
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]
inbound.efax.com: Got 2 answers from ns5.j2global.com (204.11.169.11),
rcode=0 (No Error), aa=0, in 38ms
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] Removing
record 'inbound.efax.com|A|204.11.168.109' in the answer section without
the AA bit set received from efax.com
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]
inbound.efax.com: OPT answer '.' from 'efax.com' nameservers
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]
inbound.efax.com: determining status after receiving this packet
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]
inbound.efax.com: Trying to resolve NS 'ns2.j2global.com' (3/3)
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]   
ns2.j2global.com: Wants DNSSEC processing, NO auth data in query for A
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]   
ns2.j2global.com: Looking for CNAME cache hit of 'ns2.j2global.com|CNAME'
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]   
ns2.j2global.com: Looking for DNAME cache hit of 'com|DNAME'
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]   
ns2.j2global.com: Looking for DNAME cache hit of 'j2global.com|DNAME'
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]   
ns2.j2global.com: No CNAME or DNAME cache hit of 'ns2.j2global.com' found
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]   
ns2.j2global.com: Found cache hit for A: 52.21.247.224[ttl=74204]
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]   
ns2.j2global.com: updating validation state with cache content for
ns2.j2global.com to Indeterminate
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]
inbound.efax.com: Resolved 'efax.com' NS ns2.j2global.com to: 52.21.247.224
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]
inbound.efax.com: Trying IP 52.21.247.224:53, asking 'inbound.efax.com|A'
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]
inbound.efax.com: Got 2 answers from ns2.j2global.com (52.21.247.224),
rcode=0 (No Error), aa=0, in 63ms
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702] Removing
record 'inbound.efax.com|A|204.11.168.109' in the answer section without
the AA bit set received from efax.com
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]
inbound.efax.com: OPT answer '.' from 'efax.com' nameservers
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]
inbound.efax.com: determining status after receiving this packet
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]
inbound.efax.com: Failed to resolve via any of the 3 offered NS at level
'efax.com'
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: [3546702]
inbound.efax.com: failed (res=-1)
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: Starting validation
of answer to inbound.efax.com|A for w.x.y.z:56469
Jun 19 22:14:40 rslvall-sub-a pdns_recursor[23530]: Answer to
inbound.efax.com|A for w.x.y.z:56469 validates as Insecure





More information about the Pdns-users mailing list