Dear Tomas,
On 18/10/21 11:56, Tomas Krizek wrote:
On 16/10/2021 19.50, Matthew Richardson wrote:
Whilst setting up Knot Resolver (version 5.4.1 on
Rocky 8), it fails to
resolve
213-133-203-34.newtel.in-addr.itconsult.net with a cold cache, but
succeeds if the cache has been specifically warmed. With the cold cache
SERVFAIL is returned and it logs:-
> Oct 16 18:40:52 dt05 kresd[36140]: [dnssec] validation failure:
213-133-203-34.newtel.in-addr.itconsult.net. PTR
Hi,
I can't reproduce this behaviour. I get NOERROR even with cold cache.
What does your configuration look like? Is the issue reproducible in
your environment?
Yes, I can reproduce the issue every time with this procedure:-
Having seen the post about 5.4.2-1.el8 being available from epel-testing, I
tried upgrading to it. The results remain a reproducible SERVFAIL using
the same procedure.
Best wishes,
Matthew