Re: OpenBSD 7.1 and unbound 1.15.0

On 4/26/22 16:25, Renaud Allard wrote:
>
> Hello,
>
> Since I upgraded my DNS servers to 7.1 with unbound 1.15.0, I have a lot
> of issues with DNS resolution (without changing anything in the config).
> I randomly get SERVFAIL (or somethings NXDOMAIN) for a lot of names, or
> something even stranger like some addresses and SERVFAIL for others (see
> dashlane example).
>
> Examples:
> host dashlane.com
> dashlane.com has address 65.9.82.43
> dashlane.com has address 65.9.82.13
> dashlane.com has address 65.9.82.36
> dashlane.com has address 65.9.82.97
> Host dashlane.com not found: 2(SERVFAIL)
> Host dashlane.com not found: 2(SERVFAIL)
>
>
> host forum.opnsense.org
> Host forum.opnsense.org not found: 2(SERVFAIL)
>

>         use-caps-for-id: yes

After removing the use-caps-for-id, it seems the resolver works fine. I
opened the following bug report
https://github.com/NLnetLabs/unbound/issues/670