Maintained by: NLnet Labs

[Unbound-users] failing to stub an in-addr.arpa zone

martin f krafft
Tue Oct 21 16:21:42 CEST 2008


Hi folks,

I have nsd3 serving on ::1 and unbound stubbing three zones to it.
Two of those zones work just fine, but the in-addr.arpa zone
I cannot get to work. Here is the configuration and the zone:

  stub-zone:
        name: "14.168.192.in-addr.arpa"
        stub-addr: ::1

  * * *

  $ORIGIN @
          86400   IN      SOA     ns hostmaster 155299844 7200 3600 604800 3600
          86400   IN      NS      ns
  ns      86400   IN      A       127.0.0.1
  ns      86400   IN      AAAA    ::1
  [...]

I can query nsd3 fine with dig @::1.

When unbound forwards queries to the zone, however, it fails to send
them to nsd3, even though it seems like it found the delegation.
Upon startup, unbound seems to determine the delegation point just
fine:

  info: DelegationPoint<14.168.192.in-addr.arpa.>: 0 names (0 missing), 1 addrs (0 result, 1 avail)
  info:    ip6 ::1 port 53 (len 28)

But when I ask it for data from that zone, I just keep getting
NXDOMAIN without any entries in the unbound log @verbosity 9.

piper:~|master|% dig @2001:41e0:ff12::1 a ns.14.168.192.in-addr.arpa
[...]
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 7517
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
[...]

I see the same problem using 127.0.0.1 instead of ::1. Any idea
what's going on?

-- 
martin | http://madduck.net/ | http://two.sentenc.es/
 
"durch frauen werden die höhepunkte des lebens bereichert
 und die tiefpunkte vermehrt."
                                                 - friedrich nietzsche
 
spamtraps: madduck.bogus at madduck.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 197 bytes
Desc: Digital signature (see http://martin-krafft.net/gpg/)
URL: <http://unbound.nlnetlabs.nl/pipermail/unbound-users/attachments/20081021/a6ae5b06/attachment.pgp>