RHEL Engineering is moving the tracking of its product development work on RHEL 6 through RHEL 9 to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "RHEL project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs in the statuses "NEW", "ASSIGNED", and "POST" are being migrated throughout September 2023. Bugs of Red Hat partners with an assigned Engineering Partner Manager (EPM) are migrated in late September as per pre-agreed dates. Bugs against components "kernel", "kernel-rt", and "kpatch" are only migrated if still in "NEW" or "ASSIGNED". If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "RHEL project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/RHEL-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.
Bug 1739689 - systemd-resolved prefers LLMNR over DNS when reverse resolving its own IP address
Summary: systemd-resolved prefers LLMNR over DNS when reverse resolving its own IP add...
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Enterprise Linux 8
Classification: Red Hat
Component: systemd
Version: 8.0
Hardware: Unspecified
OS: Linux
high
medium
Target Milestone: rc
: 8.0
Assignee: Jacek Migacz
QA Contact: Frantisek Sumsal
URL:
Whiteboard:
: 1980395 1992515 (view as bug list)
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2019-08-09 18:53 UTC by Lucas Caparelli
Modified: 2022-11-08 12:35 UTC (History)
9 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2022-11-08 10:49:17 UTC
Type: Bug
Target Upstream Version:
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Github redhat-plumbers systemd-rhel8 pull 275 0 None open (#1739689 ) resolved: prefer DNS over LLMNR when reverse resolving its own IP address 2022-05-11 09:22:25 UTC
Github systemd systemd pull 18613 0 None closed resolved: let's preferably route reverse lookups for local subnets to… 2021-04-15 14:43:20 UTC
Red Hat Product Errata RHBA-2022:7727 0 None None None 2022-11-08 10:49:44 UTC

Description Lucas Caparelli 2019-08-09 18:53:56 UTC 
Description of problem:

systemd-resolved prefers LLMNR over DNS when reverse resolving its own IP address. This does not happen when performing other reverse queries and DNS is available. This leads to issues with resolution when the FQDN is necessary (e.g., GSSAPI Authenticaion) as LLMNR will return the host's short name.


Version-Release number of selected component (if applicable): systemd-239-13.el8_0.5.x86_64


How reproducible: easily


Steps to Reproduce:
1. Determine a valid IP address for the system:

  $ ip address

2. Run:

  $ resolvectl query <the host's own IP address>

Actual results:

[root@rhel80 ~]# hostname 
rhel80.my-lab.com
[root@rhel80 ~]# resolvectl query 192.168.121.127
192.168.121.127%ens5: rhel80

-- Information acquired via protocol LLMNR/IPv4 in 1.1ms.
-- Data is authenticated: yes


Expected results:

The data to be acquired using DNS.


Additional info:

Bug is present on latest systemd package on Fedora 29, but not on Fedora 30, so it has likely been addressed upstream. I could not find more information regarding this on the changelogs or github issues.

This happens even when there is a valid PTR record for the host. I have configured a BIND server to test this out and LLMNR was still preferred.

Please find below the relevant configs and tests:

===================================================================================
[root@rhel80 ~]# grep ^hosts /etc/nsswitch.conf
hosts:      resolve 
[root@rhel80 ~]# grep LLMNR /etc/systemd/resolved.conf
#LLMNR=yes
[root@rhel80 ~]# cat /etc/resolv.conf 
# Generated by NetworkManager
search my-lab.com
nameserver 127.0.0.1
[root@rhel80 ~]# systemctl restart systemd-resolved
[root@rhel80 ~]# systemctl is-active systemd-resolved
active
[root@rhel80 ~]# dig @127.0.0.1 -x 192.168.121.127

; <<>> DiG 9.11.4-P2-RedHat-9.11.4-17.P2.el8_0.1 <<>> @127.0.0.1 -x 192.168.121.127
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 48282
;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 1
;; WARNING: recursion requested but not available

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
; COOKIE: 5d000dc9b3773bbb6a89ebcf5d4dad524931d5608daa3bfe (good)
;; QUESTION SECTION:
;127.121.168.192.in-addr.arpa.	IN	PTR

;; ANSWER SECTION:
127.121.168.192.in-addr.arpa. 86400 IN	PTR	rhel80.my-lab.com.

;; AUTHORITY SECTION:
121.168.192.in-addr.arpa. 86400	IN	NS	rhel80.my-lab.com.

;; Query time: 0 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Fri Aug 09 13:28:50 EDT 2019
;; MSG SIZE  rcvd: 130

[root@rhel80 ~]# resolvectl query 192.168.121.127
192.168.121.127%ens5: rhel80

-- Information acquired via protocol LLMNR/IPv4 in 3.1ms.
-- Data is authenticated: yes
[root@rhel80 ~]# getent hosts 192.168.121.127
192.168.121.127 rhel80
===================================================================================

On Fedora 30:
===================================================================================================
[root@feddy30 ~]# hostname
feddy30.my-lab.com
[root@feddy30 ~]# cat /etc/redhat-release 
Fedora release 30 (Thirty)
[root@feddy30 ~]# rpm -q systemd
systemd-241-7.gita2eaa1c.fc30.x86_64
[root@feddy30 ~]# ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
    link/ether 52:54:00:e1:f0:af brd ff:ff:ff:ff:ff:ff
    inet 192.168.121.177/24 brd 192.168.121.255 scope global dynamic noprefixroute eth0
       valid_lft 3101sec preferred_lft 3101sec
    inet6 fe80::5054:ff:fee1:f0af/64 scope link 
       valid_lft forever preferred_lft forever
[root@feddy30 ~]# resolvectl query 192.168.121.177
192.168.121.177: feddy30.my-lab.com            -- link: eth0
                 feddy30                       -- link: eth0
                 feddy30.local                 -- link: eth0

-- Information acquired via protocol DNS in 1.7ms.
-- Data is authenticated: yes
[root@feddy30 ~]# grep LLMNR /etc/systemd/resolved.conf 
#LLMNR=yes
===================================================================================================

Resolved prefers DNS over LLMNR if DNS is available and resolves the IP address to the FQDN represented by the PTR record.
Comment 1 Michal Sekletar 2019-11-25 17:41:53 UTC 
Can you please include the full output of "resolvectl status" command? Also, please tell the customer to enable debug mode for resolved (add Environment="SYSTEMD_LOG_LEVEL=debug" to [Service] section of the unit file and restart the service), reproduce the issue and attach relevant part of the journal. 

At any rate, the customer should really disable LLMNR if they don't want to use it. resolved will resolve names in parallel (if more than one DNS scope is viable for the name) and it will return results from the query which returns first. I need to double-check this with the team (specifically Lennart) but AFAICT their assumption that we will use DNS first and only if that fails fallback to LLMNR is false (we do fire DNS and LLMNR queries in parallel). If you don't want LLMNR results than don't ask for them (resolvectl query -p dns <address> or disable LLMNR in config).
Comment 2 Michal Sekletar 2019-11-26 11:12:48 UTC 
(In reply to Michal Sekletar from comment #1)
> 
> At any rate, the customer should really disable LLMNR if they don't want to
> use it. resolved will resolve names in parallel (if more than one DNS scope
> is viable for the name) and it will return results from the query which
> returns first. I need to double-check this with the team (specifically
> Lennart) but AFAICT their assumption that we will use DNS first and only if
> that fails fallback to LLMNR is false (we do fire DNS and LLMNR queries in
> parallel). If you don't want LLMNR results than don't ask for them
> (resolvectl query -p dns <address> or disable LLMNR in config).

Now I have a bit more context after talking to Lennart. Basically, we should prefer DNS lookups over LLMNR if both LLMNR and DNS scopes are present on the interface. However, we do a fallback to LLMNR if DNS scope (btw scope is combination of protocol and interface) is not available. Fact, that resolved is asking over LLMNR suggests that resolved didn't setup DNS scope on the interface.

Per interface scopes are included in output of resolvectl status.
Comment 3 Lucas Caparelli 2019-12-04 13:36:15 UTC 
Hello Michael,

It does seem the DNS scope is not set. Please find below the tests and outputs ran from my reproducer system. Near the end I've gathered the output from 'journalctl' and 'resolvectl status'.

===================================================================================================================================
[root@rhel80 ~]# date
Wed Dec  4 08:28:43 EST 2019
[root@rhel80 ~]# systemctl cat --no-pager systemd-resolved.service 
# ]8;;file://rhel80.lab.com/usr/lib/systemd/system/systemd-resolved.service/usr/lib/systemd/system/systemd-resolved.service]8;;
#  SPDX-License-Identifier: LGPL-2.1+
#
#  This file is part of systemd.
#
#  systemd is free software; you can redistribute it and/or modify it
#  under the terms of the GNU Lesser General Public License as published by
#  the Free Software Foundation; either version 2.1 of the License, or
#  (at your option) any later version.

[Unit]
Description=Network Name Resolution
Documentation=man:systemd-resolved.service(8)
Documentation=https://www.freedesktop.org/wiki/Software/systemd/resolved
Documentation=https://www.freedesktop.org/wiki/Software/systemd/writing-network-configuration-managers
Documentation=https://www.freedesktop.org/wiki/Software/systemd/writing-resolver-clients
DefaultDependencies=no
After=systemd-networkd.service
Before=network.target nss-lookup.target shutdown.target
Conflicts=shutdown.target
Wants=nss-lookup.target

[Service]
Type=notify
Restart=always
RestartSec=0
ExecStart=!!/usr/lib/systemd/systemd-resolved
WatchdogSec=3min
User=systemd-resolve
CapabilityBoundingSet=CAP_SETPCAP CAP_NET_RAW CAP_NET_BIND_SERVICE
AmbientCapabilities=CAP_SETPCAP CAP_NET_RAW CAP_NET_BIND_SERVICE
PrivateDevices=yes
ProtectHome=yes
ProtectControlGroups=yes
ProtectKernelTunables=yes
ProtectKernelModules=yes
MemoryDenyWriteExecute=yes
RestrictRealtime=yes
RestrictNamespaces=yes
RestrictAddressFamilies=AF_UNIX AF_NETLINK AF_INET AF_INET6
SystemCallFilter=@system-service
SystemCallErrorNumber=EPERM
SystemCallArchitectures=native
LockPersonality=yes
RuntimeDirectory=systemd/resolve
RuntimeDirectoryPreserve=yes

[Install]
WantedBy=multi-user.target
Alias=dbus-org.freedesktop.resolve1.service

# ]8;;file://rhel80.lab.com/etc/systemd/system/systemd-resolved.service.d/override.conf/etc/systemd/system/systemd-resolved.service.d/override.conf]8;;
[Service]
Environment="SYSTEMD_LOG_LEVEL=debug"

[root@rhel80 ~]# systemctl restart systemd-resolved
[root@rhel80 ~]# resolvectl query rhel80.lab.com
rhel80.lab.com: 192.168.121.85

-- Information acquired via protocol DNS in 9.4ms.
-- Data is authenticated: no
[root@rhel80 ~]# resolvectl query 192.168.121.85
192.168.121.85%ens5: rhel80

-- Information acquired via protocol LLMNR/IPv4 in 8.6ms.
-- Data is authenticated: yes
[root@rhel80 ~]# resolvectl query -p dns 192.168.121.85
192.168.121.85: rhel80.lab.com

-- Information acquired via protocol DNS in 3.8ms.
-- Data is authenticated: no
[root@rhel80 ~]# resolvectl status --no-pager
Global
       LLMNR setting: yes
MulticastDNS setting: yes
  DNSOverTLS setting: no
      DNSSEC setting: no
    DNSSEC supported: no
  Current DNS Server: 192.168.121.83
         DNS Servers: 192.168.121.83
          DNSSEC NTA: 10.in-addr.arpa
                      16.172.in-addr.arpa
                      168.192.in-addr.arpa
                      17.172.in-addr.arpa
                      18.172.in-addr.arpa
                      19.172.in-addr.arpa
                      20.172.in-addr.arpa
                      21.172.in-addr.arpa
                      22.172.in-addr.arpa
                      23.172.in-addr.arpa
                      24.172.in-addr.arpa
                      25.172.in-addr.arpa
                      26.172.in-addr.arpa
                      27.172.in-addr.arpa
                      28.172.in-addr.arpa
                      29.172.in-addr.arpa
                      30.172.in-addr.arpa
                      31.172.in-addr.arpa
                      corp
                      d.f.ip6.arpa
                      home
                      internal
                      intranet
                      lan
                      local
                      private
                      test

Link 2 (ens5)
      Current Scopes: LLMNR/IPv4 LLMNR/IPv6
       LLMNR setting: yes
MulticastDNS setting: no
  DNSOverTLS setting: no
      DNSSEC setting: no
    DNSSEC supported: no

[root@rhel80 ~]# journalctl --unit=systemd-resolved --no-pager --since="2019-12-04 08:28:43"
-- Logs begin at Wed 2019-12-04 07:54:45 EST, end at Wed 2019-12-04 08:29:07 EST. --
Dec 04 08:28:51 rhel80.lab.com systemd[1]: Stopping Network Name Resolution...
Dec 04 08:28:51 rhel80.lab.com systemd[1]: Stopped Network Name Resolution.
Dec 04 08:28:51 rhel80.lab.com systemd[1]: Starting Network Name Resolution...
Dec 04 08:28:51 rhel80.lab.com systemd-resolved[3410]: Successfully loaded SELinux database in 3.514ms, size on heap is 716K.
Dec 04 08:28:51 rhel80.lab.com systemd-resolved[3410]: Positive Trust Anchors:
Dec 04 08:28:51 rhel80.lab.com systemd-resolved[3410]: . IN DS 19036 8 2 49aac11d7b6f6446702e54a1607371607a1a41855200fd2ce1cdde32f24e8fb5
Dec 04 08:28:51 rhel80.lab.com systemd-resolved[3410]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d
Dec 04 08:28:51 rhel80.lab.com systemd-resolved[3410]: Negative trust anchors: 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test
Dec 04 08:28:51 rhel80.lab.com systemd-resolved[3410]: Using system hostname 'rhel80.lab.com'.
Dec 04 08:28:51 rhel80.lab.com systemd-resolved[3410]: New scope on link *, protocol dns, family *
Dec 04 08:28:51 rhel80.lab.com systemd-resolved[3410]: Found new link 2/ens5
Dec 04 08:28:51 rhel80.lab.com systemd-resolved[3410]: Found new link 1/lo
Dec 04 08:28:51 rhel80.lab.com systemd-resolved[3410]: New scope on link ens5, protocol llmnr, family AF_INET6
Dec 04 08:28:51 rhel80.lab.com systemd-resolved[3410]: Transaction 548 for <rhel80 IN ANY> scope llmnr on ens5/INET6.
Dec 04 08:28:51 rhel80.lab.com systemd-resolved[3410]: Delaying llmnr transaction for 5633us.
Dec 04 08:28:51 rhel80.lab.com systemd-resolved[3410]: New scope on link ens5, protocol llmnr, family AF_INET
Dec 04 08:28:51 rhel80.lab.com systemd-resolved[3410]: Transaction 43410 for <rhel80 IN ANY> scope llmnr on ens5/INET.
Dec 04 08:28:51 rhel80.lab.com systemd-resolved[3410]: Delaying llmnr transaction for 7599us.
Dec 04 08:28:51 rhel80.lab.com systemd-resolved[3410]: Bus bus-api-resolve: changing state UNSET → OPENING
Dec 04 08:28:51 rhel80.lab.com systemd-resolved[3410]: Bus bus-api-resolve: changing state OPENING → AUTHENTICATING
Dec 04 08:28:51 rhel80.lab.com systemd-resolved[3410]: Creating stub listener using UDP.
Dec 04 08:28:51 rhel80.lab.com systemd-resolved[3410]: Bus bus-api-resolve: changing state AUTHENTICATING → HELLO
Dec 04 08:28:51 rhel80.lab.com systemd-resolved[3410]: Sent message type=method_call sender=n/a destination=org.freedesktop.DBus path=/org/freedesktop/DBus interface=org.freedesktop.DBus member=Hello cookie=1 reply_cookie=0 signature=n/a error-name=n/a error-message=n/a
Dec 04 08:28:51 rhel80.lab.com systemd-resolved[3410]: Sent message type=method_call sender=n/a destination=org.freedesktop.DBus path=/org/freedesktop/DBus interface=org.freedesktop.DBus member=RequestName cookie=2 reply_cookie=0 signature=su error-name=n/a error-message=n/a
Dec 04 08:28:51 rhel80.lab.com systemd-resolved[3410]: Sent message type=method_call sender=n/a destination=org.freedesktop.DBus path=/org/freedesktop/DBus interface=org.freedesktop.DBus member=AddMatch cookie=3 reply_cookie=0 signature=s error-name=n/a error-message=n/a
Dec 04 08:28:51 rhel80.lab.com systemd[1]: Started Network Name Resolution.
Dec 04 08:28:51 rhel80.lab.com systemd-resolved[3410]: Got message type=method_return sender=org.freedesktop.DBus destination=:1.75 path=n/a interface=n/a member=n/a cookie=1 reply_cookie=1 signature=s error-name=n/a error-message=n/a
Dec 04 08:28:51 rhel80.lab.com systemd-resolved[3410]: Bus bus-api-resolve: changing state HELLO → RUNNING
Dec 04 08:28:51 rhel80.lab.com systemd-resolved[3410]: Got message type=signal sender=org.freedesktop.DBus.Local destination=n/a path=/org/freedesktop/DBus/Local interface=org.freedesktop.DBus.Local member=Connected cookie=4294967295 reply_cookie=0 signature=n/a error-name=n/a error-message=n/a
Dec 04 08:28:51 rhel80.lab.com systemd-resolved[3410]: Got message type=signal sender=org.freedesktop.DBus destination=:1.75 path=/org/freedesktop/DBus interface=org.freedesktop.DBus member=NameAcquired cookie=2 reply_cookie=0 signature=s error-name=n/a error-message=n/a
Dec 04 08:28:51 rhel80.lab.com systemd-resolved[3410]: Got message type=signal sender=org.freedesktop.DBus destination=:1.75 path=/org/freedesktop/DBus interface=org.freedesktop.DBus member=NameAcquired cookie=3 reply_cookie=0 signature=s error-name=n/a error-message=n/a
Dec 04 08:28:51 rhel80.lab.com systemd-resolved[3410]: Got message type=method_return sender=org.freedesktop.DBus destination=:1.75 path=n/a interface=n/a member=n/a cookie=4 reply_cookie=2 signature=u error-name=n/a error-message=n/a
Dec 04 08:28:51 rhel80.lab.com systemd-resolved[3410]: Successfully acquired requested service name.
Dec 04 08:28:51 rhel80.lab.com systemd-resolved[3410]: request_name_destroy_callback n_ref=1
Dec 04 08:28:51 rhel80.lab.com systemd-resolved[3410]: Got message type=method_return sender=org.freedesktop.DBus destination=:1.75 path=n/a interface=n/a member=n/a cookie=5 reply_cookie=3 signature=n/a error-name=n/a error-message=n/a
Dec 04 08:28:51 rhel80.lab.com systemd-resolved[3410]: Match type='signal',sender='org.freedesktop.login1',path='/org/freedesktop/login1',interface='org.freedesktop.login1.Manager',member='PrepareForSleep' successfully installed.
Dec 04 08:28:51 rhel80.lab.com systemd-resolved[3410]: Timeout reached on transaction 548.
Dec 04 08:28:51 rhel80.lab.com systemd-resolved[3410]: Retrying transaction 548.
Dec 04 08:28:51 rhel80.lab.com systemd-resolved[3410]: Transaction 548 for <rhel80 IN ANY> scope llmnr on ens5/INET6.
Dec 04 08:28:51 rhel80.lab.com systemd-resolved[3410]: Sending query packet with id 548 on interface 2/AF_INET6.
Dec 04 08:28:51 rhel80.lab.com systemd-resolved[3410]: Timeout reached on transaction 43410.
Dec 04 08:28:51 rhel80.lab.com systemd-resolved[3410]: Retrying transaction 43410.
Dec 04 08:28:51 rhel80.lab.com systemd-resolved[3410]: Transaction 43410 for <rhel80 IN ANY> scope llmnr on ens5/INET.
Dec 04 08:28:51 rhel80.lab.com systemd-resolved[3410]: Sending query packet with id 43410 on interface 2/AF_INET.
Dec 04 08:28:52 rhel80.lab.com systemd-resolved[3410]: Timeout reached on transaction 548.
Dec 04 08:28:52 rhel80.lab.com systemd-resolved[3410]: Retrying transaction 548.
Dec 04 08:28:52 rhel80.lab.com systemd-resolved[3410]: Transaction 548 for <rhel80 IN ANY> scope llmnr on ens5/INET6.
Dec 04 08:28:52 rhel80.lab.com systemd-resolved[3410]: Sending query packet with id 548 on interface 2/AF_INET6.
Dec 04 08:28:52 rhel80.lab.com systemd-resolved[3410]: Timeout reached on transaction 43410.
Dec 04 08:28:52 rhel80.lab.com systemd-resolved[3410]: Retrying transaction 43410.
Dec 04 08:28:52 rhel80.lab.com systemd-resolved[3410]: Transaction 43410 for <rhel80 IN ANY> scope llmnr on ens5/INET.
Dec 04 08:28:52 rhel80.lab.com systemd-resolved[3410]: Sending query packet with id 43410 on interface 2/AF_INET.
Dec 04 08:28:52 rhel80.lab.com systemd-resolved[3410]: Timeout reached on transaction 548.
Dec 04 08:28:52 rhel80.lab.com systemd-resolved[3410]: Retrying transaction 548.
Dec 04 08:28:52 rhel80.lab.com systemd-resolved[3410]: Transaction 548 for <rhel80 IN ANY> scope llmnr on ens5/INET6.
Dec 04 08:28:52 rhel80.lab.com systemd-resolved[3410]: Sending query packet with id 548 on interface 2/AF_INET6.
Dec 04 08:28:52 rhel80.lab.com systemd-resolved[3410]: Timeout reached on transaction 43410.
Dec 04 08:28:52 rhel80.lab.com systemd-resolved[3410]: Retrying transaction 43410.
Dec 04 08:28:52 rhel80.lab.com systemd-resolved[3410]: Transaction 43410 for <rhel80 IN ANY> scope llmnr on ens5/INET.
Dec 04 08:28:52 rhel80.lab.com systemd-resolved[3410]: Sending query packet with id 43410 on interface 2/AF_INET.
Dec 04 08:28:52 rhel80.lab.com systemd-resolved[3410]: Timeout reached on transaction 548.
Dec 04 08:28:52 rhel80.lab.com systemd-resolved[3410]: Retrying transaction 548.
Dec 04 08:28:52 rhel80.lab.com systemd-resolved[3410]: Transaction 548 for <rhel80 IN ANY> on scope llmnr on ens5/INET6 now complete with <attempts-max-reached> from none (unsigned).
Dec 04 08:28:52 rhel80.lab.com systemd-resolved[3410]: Record rhel80 IN AAAA fe80::c949:8e73:36c4:1dfe successfully probed.
Dec 04 08:28:52 rhel80.lab.com systemd-resolved[3410]: Freeing transaction 548.
Dec 04 08:28:52 rhel80.lab.com systemd-resolved[3410]: Timeout reached on transaction 43410.
Dec 04 08:28:52 rhel80.lab.com systemd-resolved[3410]: Retrying transaction 43410.
Dec 04 08:28:52 rhel80.lab.com systemd-resolved[3410]: Transaction 43410 for <rhel80 IN ANY> on scope llmnr on ens5/INET now complete with <attempts-max-reached> from none (unsigned).
Dec 04 08:28:52 rhel80.lab.com systemd-resolved[3410]: Record rhel80 IN A 192.168.121.85 successfully probed.
Dec 04 08:28:52 rhel80.lab.com systemd-resolved[3410]: Freeing transaction 43410.
Dec 04 08:28:57 rhel80.lab.com systemd-resolved[3410]: Got message type=method_call sender=:1.76 destination=org.freedesktop.resolve1 path=/org/freedesktop/resolve1 interface=org.freedesktop.resolve1.Manager member=ResolveHostname cookie=2 reply_cookie=0 signature=isit error-name=n/a error-message=n/a
Dec 04 08:28:57 rhel80.lab.com systemd-resolved[3410]: idn2_lookup_u8: rhel80.lab.com → rhel80.lab.com
Dec 04 08:28:57 rhel80.lab.com systemd-resolved[3410]: Looking up RR for rhel80.lab.com IN A.
Dec 04 08:28:57 rhel80.lab.com systemd-resolved[3410]: Looking up RR for rhel80.lab.com IN AAAA.
Dec 04 08:28:57 rhel80.lab.com systemd-resolved[3410]: Sent message type=method_call sender=n/a destination=org.freedesktop.DBus path=/org/freedesktop/DBus interface=org.freedesktop.DBus member=AddMatch cookie=4 reply_cookie=0 signature=s error-name=n/a error-message=n/a
Dec 04 08:28:57 rhel80.lab.com systemd-resolved[3410]: Sent message type=method_call sender=n/a destination=org.freedesktop.DBus path=/org/freedesktop/DBus interface=org.freedesktop.DBus member=GetNameOwner cookie=5 reply_cookie=0 signature=s error-name=n/a error-message=n/a
Dec 04 08:28:57 rhel80.lab.com systemd-resolved[3410]: Got message type=method_return sender=org.freedesktop.DBus destination=:1.75 path=n/a interface=n/a member=n/a cookie=7 reply_cookie=5 signature=s error-name=n/a error-message=n/a
Dec 04 08:28:57 rhel80.lab.com systemd-resolved[3410]: Switching to system DNS server 192.168.121.83.
Dec 04 08:28:57 rhel80.lab.com systemd-resolved[3410]: Cache miss for rhel80.lab.com IN A
Dec 04 08:28:57 rhel80.lab.com systemd-resolved[3410]: Transaction 50023 for <rhel80.lab.com IN A> scope dns on */*.
Dec 04 08:28:57 rhel80.lab.com systemd-resolved[3410]: Using feature level UDP+EDNS0 for transaction 50023.
Dec 04 08:28:57 rhel80.lab.com systemd-resolved[3410]: Using DNS server 192.168.121.83 for transaction 50023.
Dec 04 08:28:57 rhel80.lab.com systemd-resolved[3410]: Sending query packet with id 50023.
Dec 04 08:28:57 rhel80.lab.com systemd-resolved[3410]: Got message type=method_return sender=org.freedesktop.DBus destination=:1.75 path=n/a interface=n/a member=n/a cookie=6 reply_cookie=4 signature=n/a error-name=n/a error-message=n/a
Dec 04 08:28:57 rhel80.lab.com systemd-resolved[3410]: Match type='signal',sender='org.freedesktop.DBus',path='/org/freedesktop/DBus',interface='org.freedesktop.DBus',member='NameOwnerChanged',arg0=':1.76' successfully installed.
Dec 04 08:28:57 rhel80.lab.com systemd-resolved[3410]: Processing incoming packet on transaction 50023 (rcode=SUCCESS).
Dec 04 08:28:57 rhel80.lab.com systemd-resolved[3410]: Verified we get a response at feature level UDP+EDNS0 from DNS server 192.168.121.83.
Dec 04 08:28:57 rhel80.lab.com systemd-resolved[3410]: Added positive unauthenticated cache entry for rhel80.lab.com IN A 7200s on */INET/192.168.121.83
Dec 04 08:28:57 rhel80.lab.com systemd-resolved[3410]: Transaction 50023 for <rhel80.lab.com IN A> on scope dns on */* now complete with <success> from network (unsigned).
Dec 04 08:28:57 rhel80.lab.com systemd-resolved[3410]: Sent message type=method_return sender=n/a destination=:1.76 path=n/a interface=n/a member=n/a cookie=6 reply_cookie=2 signature=a(iiay)st error-name=n/a error-message=n/a
Dec 04 08:28:57 rhel80.lab.com systemd-resolved[3410]: Sent message type=method_call sender=n/a destination=org.freedesktop.DBus path=/org/freedesktop/DBus interface=org.freedesktop.DBus member=RemoveMatch cookie=7 reply_cookie=0 signature=s error-name=n/a error-message=n/a
Dec 04 08:28:57 rhel80.lab.com systemd-resolved[3410]: Freeing transaction 50023.
Dec 04 08:29:02 rhel80.lab.com systemd-resolved[3410]: Got message type=method_call sender=:1.77 destination=org.freedesktop.resolve1 path=/org/freedesktop/resolve1 interface=org.freedesktop.resolve1.Manager member=ResolveHostname cookie=2 reply_cookie=0 signature=isit error-name=n/a error-message=n/a
Dec 04 08:29:02 rhel80.lab.com systemd-resolved[3410]: idn2_lookup_u8: localhost → localhost
Dec 04 08:29:02 rhel80.lab.com systemd-resolved[3410]: Looking up RR for localhost IN A.
Dec 04 08:29:02 rhel80.lab.com systemd-resolved[3410]: Sent message type=method_call sender=n/a destination=org.freedesktop.DBus path=/org/freedesktop/DBus interface=org.freedesktop.DBus member=AddMatch cookie=8 reply_cookie=0 signature=s error-name=n/a error-message=n/a
Dec 04 08:29:02 rhel80.lab.com systemd-resolved[3410]: Sent message type=method_call sender=n/a destination=org.freedesktop.DBus path=/org/freedesktop/DBus interface=org.freedesktop.DBus member=GetNameOwner cookie=9 reply_cookie=0 signature=s error-name=n/a error-message=n/a
Dec 04 08:29:02 rhel80.lab.com systemd-resolved[3410]: Got message type=method_return sender=org.freedesktop.DBus destination=:1.75 path=n/a interface=n/a member=n/a cookie=9 reply_cookie=9 signature=s error-name=n/a error-message=n/a
Dec 04 08:29:02 rhel80.lab.com systemd-resolved[3410]: Sent message type=method_return sender=n/a destination=:1.77 path=n/a interface=n/a member=n/a cookie=10 reply_cookie=2 signature=a(iiay)st error-name=n/a error-message=n/a
Dec 04 08:29:02 rhel80.lab.com systemd-resolved[3410]: Sent message type=method_call sender=n/a destination=org.freedesktop.DBus path=/org/freedesktop/DBus interface=org.freedesktop.DBus member=RemoveMatch cookie=11 reply_cookie=0 signature=s error-name=n/a error-message=n/a
Dec 04 08:29:02 rhel80.lab.com systemd-resolved[3410]: Got message type=method_return sender=org.freedesktop.DBus destination=:1.75 path=n/a interface=n/a member=n/a cookie=8 reply_cookie=8 signature=n/a error-name=n/a error-message=n/a
Dec 04 08:29:02 rhel80.lab.com systemd-resolved[3410]: Got message type=error sender=org.freedesktop.DBus destination=:1.75 path=n/a interface=n/a member=n/a cookie=10 reply_cookie=10 signature=s error-name=org.freedesktop.DBus.Error.AccessDenied error-message=An SELinux policy prevents this sender from sending this message to this recipient, 0 matched rules; type="method_return", sender=":1.75" (uid=193 pid=3410 comm="/usr/lib/systemd/systemd-resolved " label="system_u:system_r:systemd_resolved_t:s0") interface="(unset)" member="(unset)" error name="(unset)" requested_reply="0" destination=":1.77" (uid=0 pid=3432 comm="/usr/libexec/platform-python /usr/libexec/rhsmd -s" label="system_u:system_r:system_cronjob_t:s0-s0:c0.c1023")
Dec 04 08:29:03 rhel80.lab.com systemd-resolved[3410]: Got message type=method_call sender=:1.78 destination=org.freedesktop.resolve1 path=/org/freedesktop/resolve1 interface=org.freedesktop.resolve1.Manager member=ResolveAddress cookie=2 reply_cookie=0 signature=iiayt error-name=n/a error-message=n/a
Dec 04 08:29:03 rhel80.lab.com systemd-resolved[3410]: Looking up RR for 85.121.168.192.in-addr.arpa IN PTR.
Dec 04 08:29:03 rhel80.lab.com systemd-resolved[3410]: Sent message type=method_call sender=n/a destination=org.freedesktop.DBus path=/org/freedesktop/DBus interface=org.freedesktop.DBus member=AddMatch cookie=12 reply_cookie=0 signature=s error-name=n/a error-message=n/a
Dec 04 08:29:03 rhel80.lab.com systemd-resolved[3410]: Sent message type=method_call sender=n/a destination=org.freedesktop.DBus path=/org/freedesktop/DBus interface=org.freedesktop.DBus member=GetNameOwner cookie=13 reply_cookie=0 signature=s error-name=n/a error-message=n/a
Dec 04 08:29:03 rhel80.lab.com systemd-resolved[3410]: Got message type=method_return sender=org.freedesktop.DBus destination=:1.75 path=n/a interface=n/a member=n/a cookie=12 reply_cookie=13 signature=s error-name=n/a error-message=n/a
Dec 04 08:29:03 rhel80.lab.com systemd-resolved[3410]: Cache miss for 85.121.168.192.in-addr.arpa IN PTR
Dec 04 08:29:03 rhel80.lab.com systemd-resolved[3410]: Transaction 7199 for <85.121.168.192.in-addr.arpa IN PTR> scope dns on */*.
Dec 04 08:29:03 rhel80.lab.com systemd-resolved[3410]: Using feature level UDP+EDNS0 for transaction 7199.
Dec 04 08:29:03 rhel80.lab.com systemd-resolved[3410]: Using DNS server 192.168.121.83 for transaction 7199.
Dec 04 08:29:03 rhel80.lab.com systemd-resolved[3410]: Sending query packet with id 7199.
Dec 04 08:29:03 rhel80.lab.com systemd-resolved[3410]: Transaction 729 for <85.121.168.192.in-addr.arpa IN PTR> on scope llmnr on ens5/INET now complete with <success> from zone (authenticated).
Dec 04 08:29:03 rhel80.lab.com systemd-resolved[3410]: Freeing transaction 7199.
Dec 04 08:29:03 rhel80.lab.com systemd-resolved[3410]: Freeing transaction 729.
Dec 04 08:29:03 rhel80.lab.com systemd-resolved[3410]: Sent message type=method_return sender=n/a destination=:1.78 path=n/a interface=n/a member=n/a cookie=14 reply_cookie=2 signature=a(is)t error-name=n/a error-message=n/a
Dec 04 08:29:03 rhel80.lab.com systemd-resolved[3410]: Sent message type=method_call sender=n/a destination=org.freedesktop.DBus path=/org/freedesktop/DBus interface=org.freedesktop.DBus member=RemoveMatch cookie=15 reply_cookie=0 signature=s error-name=n/a error-message=n/a
Dec 04 08:29:03 rhel80.lab.com systemd-resolved[3410]: Got message type=method_return sender=org.freedesktop.DBus destination=:1.75 path=n/a interface=n/a member=n/a cookie=11 reply_cookie=12 signature=n/a error-name=n/a error-message=n/a
Dec 04 08:29:07 rhel80.lab.com systemd-resolved[3410]: Got message type=method_call sender=:1.79 destination=org.freedesktop.resolve1 path=/org/freedesktop/resolve1 interface=org.freedesktop.resolve1.Manager member=ResolveAddress cookie=2 reply_cookie=0 signature=iiayt error-name=n/a error-message=n/a
Dec 04 08:29:07 rhel80.lab.com systemd-resolved[3410]: Looking up RR for 85.121.168.192.in-addr.arpa IN PTR.
Dec 04 08:29:07 rhel80.lab.com systemd-resolved[3410]: Sent message type=method_call sender=n/a destination=org.freedesktop.DBus path=/org/freedesktop/DBus interface=org.freedesktop.DBus member=AddMatch cookie=16 reply_cookie=0 signature=s error-name=n/a error-message=n/a
Dec 04 08:29:07 rhel80.lab.com systemd-resolved[3410]: Sent message type=method_call sender=n/a destination=org.freedesktop.DBus path=/org/freedesktop/DBus interface=org.freedesktop.DBus member=GetNameOwner cookie=17 reply_cookie=0 signature=s error-name=n/a error-message=n/a
Dec 04 08:29:07 rhel80.lab.com systemd-resolved[3410]: Got message type=method_return sender=org.freedesktop.DBus destination=:1.75 path=n/a interface=n/a member=n/a cookie=14 reply_cookie=17 signature=s error-name=n/a error-message=n/a
Dec 04 08:29:07 rhel80.lab.com systemd-resolved[3410]: Cache miss for 85.121.168.192.in-addr.arpa IN PTR
Dec 04 08:29:07 rhel80.lab.com systemd-resolved[3410]: Transaction 3462 for <85.121.168.192.in-addr.arpa IN PTR> scope dns on */*.
Dec 04 08:29:07 rhel80.lab.com systemd-resolved[3410]: Using feature level UDP+EDNS0 for transaction 3462.
Dec 04 08:29:07 rhel80.lab.com systemd-resolved[3410]: Using DNS server 192.168.121.83 for transaction 3462.
Dec 04 08:29:07 rhel80.lab.com systemd-resolved[3410]: Sending query packet with id 3462.
Dec 04 08:29:07 rhel80.lab.com systemd-resolved[3410]: Got message type=method_return sender=org.freedesktop.DBus destination=:1.75 path=n/a interface=n/a member=n/a cookie=13 reply_cookie=16 signature=n/a error-name=n/a error-message=n/a
Dec 04 08:29:07 rhel80.lab.com systemd-resolved[3410]: Match type='signal',sender='org.freedesktop.DBus',path='/org/freedesktop/DBus',interface='org.freedesktop.DBus',member='NameOwnerChanged',arg0=':1.79' successfully installed.
Dec 04 08:29:07 rhel80.lab.com systemd-resolved[3410]: Processing incoming packet on transaction 3462 (rcode=SUCCESS).
Dec 04 08:29:07 rhel80.lab.com systemd-resolved[3410]: Added positive unauthenticated cache entry for 85.121.168.192.in-addr.arpa IN PTR 7200s on */INET/192.168.121.83
Dec 04 08:29:07 rhel80.lab.com systemd-resolved[3410]: Transaction 3462 for <85.121.168.192.in-addr.arpa IN PTR> on scope dns on */* now complete with <success> from network (unsigned).
Dec 04 08:29:07 rhel80.lab.com systemd-resolved[3410]: Sent message type=method_return sender=n/a destination=:1.79 path=n/a interface=n/a member=n/a cookie=18 reply_cookie=2 signature=a(is)t error-name=n/a error-message=n/a
Dec 04 08:29:07 rhel80.lab.com systemd-resolved[3410]: Sent message type=method_call sender=n/a destination=org.freedesktop.DBus path=/org/freedesktop/DBus interface=org.freedesktop.DBus member=RemoveMatch cookie=19 reply_cookie=0 signature=s error-name=n/a error-message=n/a
Dec 04 08:29:07 rhel80.lab.com systemd-resolved[3410]: Freeing transaction 3462.
===================================================================================================================================

Please let me know if you require additional information.
Comment 11 David Tardon 2021-10-05 08:17:26 UTC 
*** Bug 1992515 has been marked as a duplicate of this bug. ***
Comment 14 David Tardon 2022-03-17 15:49:58 UTC 
*** Bug 1980395 has been marked as a duplicate of this bug. ***
Comment 22 errata-xmlrpc 2022-11-08 10:49:17 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (systemd bug fix and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2022:7727
Note You need to log in before you can comment on or make changes to this bug.