Red Hat Bugzilla – Bug 1470637
nslookup and dig return SERVFAIL error for FQDN after multiple queries
Last modified: 2018-04-10 07:57:48 EDT
Fix acknowledged but modified.
Created attachment 1316676 [details]
Keep origin on new TCP connection patch
Found out part of this problem is made by RHEL specific path, created by commit http://pkgs.devel.redhat.com/cgit/rpms/bind/commit/?id=61b073aa6a5fcf448ffd3a18970c38e4eaef1284
I could not find a bug that it solved. It will try next search domain or root if no reply arrives. Because stock dig does not have such feature and it would receive SERVFAILs again, removing this feature. Only then it will pass upstream tests.
Correct lookup for any name can be done by appending dot after relative name, making it absolute.
Created attachment 1337400 [details]
tests for dig
Created attachment 1337404 [details]
Retry again with origin after TCP timeout.
Do not change origin without reply from a server.
Mentioned patch nslookup-norec.patch were dropped also from Fedora 2 years ago by commit https://src.fedoraproject.org/rpms/bind/c/e001c1a0663326dffac1ee7d65598550e4b2f70a?branch=master
Part of patch were already reverted, the rest will be dropped as well.
Remaining part from comment #13 returned back, because it caused regression - bug #1520958. Remaining patch renamed to reflect it fixed bug #726120. In next major release support for this bug would be discontinued.
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.
For information on the advisory, and where to find the updated
files, follow the link below.
If the solution does not work for you, open a new bug report.