[Pkg-dns-devel] Bug#808204: Bug#808204: [regression] unbound returns failures and IPv6 addresses on initial boot and after network outages

[Paul Wise]

On Thu, 2015-12-17 at 22:54 -0500, Robert Edmonds wrote:

> Ah, OK.  How do you bring up the wireless connection on your laptop?
> NetworkManager, etc.?

NetworkManager automatically (re-)connects to the wireless network.

> Any difference if you try a wired connection instead?  (If your laptop
> has a wired Ethernet port.)

It has an Ethernet port but isn't usually near the router, I'll try
this when I get time.


> That's odd, but I guess wget doesn't display an IP address at all when a
> DNS query SERVFAILs, and I could easily see how an AAAA could be cached
> while the A isn't.

It is especially silly since I don't have an IPv6 default route.


> Can you try downgrading to 1.4.22-3 and see if it reliably behaves as
> expected when you reboot your laptop and router?  If you can make 1.4.22
> fail, then I suspect #791659 and this bug are the same, but if not, it
> might be an upstream bug.

I don't think I saw it with that version, will try when I get time.

> Yes, of course, but the parameter is specified in seconds, not minutes,
> so "infra-host-ttl: 5" should cause the entries in the infra cache to
> expire after 5 seconds :-)

Ahh!

> I'm not that familiar with dnssec-trigger, but it might be because
> dnssec-trigger feeds DNS nameserver information to unbound dynamically
> with "unbound-control forward ...", and if you restarted Unbound since
> the last time dnssec-trigger did that, Unbound would start up without a
> list of forwarders?

Makes sense.

-- 
bye,
pabs

https://wiki.debian.org/PaulWise


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 801 bytes
Desc: This is a digitally signed message part
URL: <http://lists.alioth.debian.org/pipermail/pkg-dns-devel/attachments/20151218/9b13d871/attachment.sig>