[Unbound-users] Increase of requestlist entries/connection timeout due to groupinfra.com domain

[Slingerland, Michael van]

Hi,

I've been scratching my head for a few days now, trying to figure out what is happening here.
1) I noticed that the requestlist dump contains about 200 subdomains for groupinfra.com, some of them are there for up to 85000 seconds.

2) 1 entry in the requestlist is:
215    A IN xjdjtallrd.groupinfra.com. 25205.720826 iterator wants A IN de-dc002.groupinfra.com. A IN in-dc007.groupinfra.com. A IN uk-dc015.groupinfra.com.

Resolving this domain with dig returns:

# dig @localhost xjdjtallrd.groupinfra.com

; <<>> DiG 9.4.2-P2 <<>> @localhost xjdjtallrd.groupinfra.com
; (1 server found)
;; global options:  printcmd
;; connection timed out; no servers could be reached
#

3) flushing the requestlist and name from the cache

#  dig @localhost xjdjtallrd.groupinfra.com

; <<>> DiG 9.4.2-P2 <<>> @localhost xjdjtallrd.groupinfra.com
; (2 servers found)
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 65121
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;xjdjtallrd.groupinfra.com.     IN      A

;; AUTHORITY SECTION:
groupinfra.com.         3107    IN      SOA     uk-dc001.groupinfra.com. hostmaster. 15046308 900 600 86400 900

;; Query time: 0 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Mon Feb 21 14:38:14 2011
;; MSG SIZE  rcvd: 98

#

After a few hours the domain is again not resolvable as in point 2.

Flushing the requestlist and domain groupinfra.com from cache fixes again this issue.

I am using unbound 1.4.7 on OpenBSD 4.5.

Compile options:
./configure --prefix=/opt/unbound-1.4.7 \
--with-ssl=/usr \
--with-libevent=/usr \
--without-pthreads \
--with-chroot-dir=/var/unbound \
--with-pidfile=/var/run/unbound.pid \
--with-conf-file=/var/unbound/etc/unbound.conf \
--with-username=named \
--disable-gost \
 --with-ldns-builtin

I'm trying to understand why this domain is only temporaribly resolvable and after it fails, it is resolvable again after a flush of requestlist and domain groupinfra.com.

Thanks,
Michael


******************************************************************************** 
 
N.B.: op (de inhoud van) deze e-mail is een DISCLAIMER met belangrijke VOORBEHOUDEN van toepassing: zie http://www.t-mobile.nl/disclaimer 
 
This e-mail and its contents are subject to a DISCLAIMER with important RESERVATIONS: see http://www.t-mobile.nl/disclaimer 
  
 
******************************************************************************** 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nlnetlabs.nl/pipermail/unbound-users/attachments/20110221/40753f46/attachment.htm>