[Pkg-dns-devel] Bug#808204: [regression] unbound returns failures and IPv6 addresses on initial boot and after network outages

[Paul Wise]

Package: unbound
Version: 1.5.7-1
Severity: important
X-Debbugs-CC: Tollef Fog Heen <tfheen at debian.org>

After booting my system and after my wireless router is rebooted,
unbound starts returning failures and IPv6 addresses. Neither are
useful since I like to resolve addresses and don't have an IPv6 default
route. I get the impression that it started from the upgrade from
1.4.22-3+b1 to 1.5.6-1. I'm using NetworkManager with dns=unbound and
dnssec-trigger installed. Tollef mentioned seeing similar things.

Any thoughts about how to debug this?

pabs at chianamo ~ $ sudo /usr/sbin/unbound-control list_forwards
pabs at chianamo ~ $ sudo dnssec-trigger-control status
at 2015-12-17 17:24:06
authority 192.58.128.30: OK 
no cache: no DNS servers have been supplied via DHCP
state: auth secure
pabs at chianamo ~ $ ip -6 r
fe80::/64 dev wlan0  proto kernel  metric 256  pref medium
pabs at chianamo ~ $ ip -6 a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 state UNKNOWN 
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
3: wlan0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 state UP qlen 1000
    inet6 fe80::224:d7ff:fe80:a068/64 scope link 
       valid_lft forever preferred_lft forever

-- System Information:
Debian Release: stretch/sid
  APT prefers testing
  APT policy: (900, 'testing'), (860, 'testing-proposed-updates'), (850, 'buildd-testing-proposed-updates'), (800, 'unstable'), (790, 'buildd-unstable'), (700, 'experimental'), (690, 'buildd-experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 4.3.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_AU.utf8, LC_CTYPE=en_AU.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages unbound depends on:
ii  adduser         3.113+nmu3
ii  libc6           2.21-4
ii  libevent-2.0-5  2.0.21-stable-2+b1
ii  libfstrm0       0.2.0-1
ii  libprotobuf-c1  1.1.1-1
ii  libpython2.7    2.7.11-2
ii  libssl1.0.2     1.0.2e-1
ii  openssl         1.0.2e-1
ii  unbound-anchor  1.5.7-1

unbound recommends no packages.

unbound suggests no packages.

-- no debconf information

-- 
bye,
pabs

https://wiki.debian.org/PaulWise

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 801 bytes
Desc: This is a digitally signed message part
URL: <http://lists.alioth.debian.org/pipermail/pkg-dns-devel/attachments/20151217/ecc0caec/attachment.sig>