• Re: Bind suddenly starts responding clients with servfail

    From Greg Rivers@gcr+bind-users@tharned.org to =?ISO-8859-1?Q?S=F8ren?= Andersen on Thu May 7 21:03:53 2020
    From Newsgroup: comp.protocols.dns.bind

    On Monday, 27 April 2020 03:59:39 CDT Søren Andersen wrote:
    I'm running a few BIND servers, but lately one of my servers suddenly starts responding to clients with servfail for every request from the clients, and BIND doesn't respond to the rndc or statistics interface anymore.

    My logs for client-channel show me this:
    25-Apr-2020 21:52:04.501 client @XX XX.37#2921 (google.dk): no more
    recursive clients (1000/900/1000): quota reached

    I've removed all the dns traffic from the server, and the quota is still reached after 6+ hours?

    Do you guys have some clue what all this is about? - Or any suggestions
    where to look for any further information?

    I'm running BIND 9.16.1 on CentOS 7:

    I've had the very same thing happen twice in the past two weeks on different production recursive servers running BIND 9.16.2 on FreeBSD. I've opened a ticket with ISC, and they are looking into it. Can you share any additional information that might aid troubleshooting?
    If anyone else experiences this, please report it.
    --
    Greg
    --- Synchronet 3.18a-Linux NewsLink 1.113
  • From =?iso-8859-1?Q?S=F8ren_Andersen?=@SOAN@stofa.dk to Greg Rivers on Fri May 8 21:27:35 2020
    From Newsgroup: comp.protocols.dns.bind

    --_000_DBBPR09MB3512C4A03A88C649AF8E43AAA7A20DBBPR09MB3512eurp_
    Content-Type: text/plain; charset="iso-8859-1"
    Content-Transfer-Encoding: quoted-printable

    Hi Greg,

    I'm glad what I'm not the only one having this issue. Currently i've not mo=
    re information that are not already mention in this mail thread.

    But do you have a link to the ticket you have created?

    /S=F8ren
    ________________________________
    From: Greg Rivers <gcr+bind-users@tharned.org>
    Sent: Friday, May 8, 2020 04:03
    To: S=F8ren Andersen <SOAN@stofa.dk>
    Cc: bind-users@lists.isc.org <bind-users@lists.isc.org>
    Subject: Re: Bind suddenly starts responding clients with servfail

    [EXTERNAL MAIL]


    On Monday, 27 April 2020 03:59:39 CDT S=F8ren Andersen wrote:
    I'm running a few BIND servers, but lately one of my servers suddenly sta=
    rts
    responding to clients with servfail for every request from the clients, a=
    nd
    BIND doesn't respond to the rndc or statistics interface anymore.

    My logs for client-channel show me this:
    25-Apr-2020 21:52:04.501 client @XX XX.37#2921 (google.dk): no more
    recursive clients (1000/900/1000): quota reached

    I've removed all the dns traffic from the server, and the quota is still reached after 6+ hours?

    Do you guys have some clue what all this is about? - Or any suggestions
    where to look for any further information?

    I'm running BIND 9.16.1 on CentOS 7:

    I've had the very same thing happen twice in the past two weeks on differen=
    t production recursive servers running BIND 9.16.2 on FreeBSD. I've opened =
    a ticket with ISC, and they are looking into it. Can you share any addition=
    al information that might aid troubleshooting?

    If anyone else experiences this, please report it.

    --
    Greg



    --_000_DBBPR09MB3512C4A03A88C649AF8E43AAA7A20DBBPR09MB3512eurp_
    Content-Type: text/html; charset="iso-8859-1"
    Content-Transfer-Encoding: quoted-printable

    <html>
    <head>
    <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Diso-8859-=

    <style type=3D"text/css" style=3D"display:none;"> P {margin-top:0;margin-bo= ttom:0;} </style>
    </head>
    <body dir=3D"ltr">
    <div style=3D"color:rgb(0,0,0)"><font face=3D"Helvetica"><span style=3D"fon= t-size:14px">Hi Greg,</span></font></div>
    <div style=3D"color:rgb(0,0,0)"><font face=3D"Helvetica"><span style=3D"fon= t-size:14px"><br>
    </span></font></div>
    <div style=3D"color:rgb(0,0,0)"><font face=3D"Helvetica"><span style=3D"fon= t-size:14px">I'm glad what I'm not the only one having this issue. Currentl=
    y i've not more information that are not already mention in this mail threa= d.</span></font></div>
    <div style=3D"color:rgb(0,0,0)"><font face=3D"Helvetica"><span style=3D"fon= t-size:14px"><br>
    </span></font></div>
    <div style=3D"color:rgb(0,0,0)"><font face=3D"Helvetica"><span style=3D"fon= t-size:14px">But do you have a link to the ticket you have created?</span><= /font></div>
    <div style=3D"color:rgb(0,0,0)"><font face=3D"Helvetica"><span style=3D"fon= t-size:14px"><br>
    </span></font></div>
    <div style=3D"color:rgb(0,0,0)"><font face=3D"Helvetica"><span style=3D"fon= t-size:14px">/S=F8ren</span></font></div>
    <div id=3D"appendonsend"></div>
    <hr tabindex=3D"-1" style=3D"display:inline-block; width:98%">
    <div id=3D"divRplyFwdMsg" dir=3D"ltr"><font face=3D"Calibri, sans-serif" co= lor=3D"#000000" style=3D"font-size:11pt"><b>From:</b> Greg Rivers &lt;gcr&#= 43;bind-users@tharned.org&gt;<br>
    <b>Sent:</b> Friday, May 8, 2020 04:03<br>
    <b>To:</b> S=F8ren Andersen &lt;SOAN@stofa.dk&gt;<br>
    <b>Cc:</b> bind-users@lists.isc.org &lt;bind-users@lists.isc.org&gt;<br> <b>Subject:</b> Re: Bind suddenly starts responding clients with servfail</= font>
    <div>&nbsp;</div>
    </div>
    <div class=3D"BodyFragment"><font size=3D"2"><span style=3D"font-size:11pt"=

    <div class=3D"PlainText">[EXTERNAL MAIL]<br>


    On Monday, 27 April 2020 03:59:39 CDT S=F8ren Andersen wrote:<br>
    &gt; I'm running a few BIND servers, but lately one of my servers suddenly = starts<br>
    &gt; responding to clients with servfail for every request from the clients=
    , and<br>
    &gt; BIND doesn't respond to the rndc or statistics interface anymore.<br> &gt;<br>
    &gt; My logs for client-channel show me this:<br>
    &gt; 25-Apr-2020 21:52:04.501 client @XX XX.37#2921 (google.dk): no more<br=

    &gt; recursive clients (1000/900/1000): quota reached<br>
    &gt;<br>
    &gt; I've removed all the dns traffic from the server, and the quota is sti= ll<br>
    &gt; reached after 6&#43; hours?<br>
    &gt;<br>
    &gt; Do you guys have some clue what all this is about? - Or any suggestion= s<br>
    &gt; where to look for any further information?<br>
    &gt;<br>
    &gt; I'm running BIND 9.16.1 on CentOS 7:<br>
    &gt;<br>
    I've had the very same thing happen twice in the past two weeks on differen=
    t production recursive servers running BIND 9.16.2 on FreeBSD. I've opened =
    a ticket with ISC, and they are looking into it. Can you share any addition=
    al information that might aid troubleshooting?<br>

    If anyone else experiences this, please report it.<br>

    --<br>
    Greg<br>


    </div>
    </span></font></div>
    </body>
    </html>

    --_000_DBBPR09MB3512C4A03A88C649AF8E43AAA7A20DBBPR09MB3512eurp_--
    --- Synchronet 3.18a-Linux NewsLink 1.113
  • From Greg Rivers@gcr+bind-users@tharned.org to bind-users on Wed May 20 13:21:47 2020
    From Newsgroup: comp.protocols.dns.bind

    On Friday, 8 May 2020 16:27:35 CDT Søren Andersen wrote:
    I'm glad what I'm not the only one having this issue. Currently i've not
    more information that are not already mention in this mail thread.

    But do you have a link to the ticket you have created?

    <https://gitlab.isc.org/isc-projects/bind9/-/issues/1859>
    --
    Greg
    --- Synchronet 3.18a-Linux NewsLink 1.113