RE: extended dns error

2023-07-12 Thread sami . rahal
Hi Greg, Thank you for your answer I use RPZ as follows : response-policy { zone "rpz"; } break-dnssec yes recursive-only no qname-wait-recurse no; }; Regards Sami De : Greg Choules Envoyé : mercredi 12

Re: extended dns error

2023-07-12 Thread Greg Choules via bind-users
Hi Sami. In the "response-policy" block in your config, what (if anything) is the value of the statement "qname-wait-recurse"? If you do not have that set explicitly, please do "named -C" to list the defaults and see what it is; probably "yes". This parameter controls whether RPZ waits until succe

Re: extended dns error

2023-07-12 Thread sami . rahal
Hello Thank you for your answer yes we will plan a migration to version 9.18. now I have activated "error log" to have the cause of an error servfail is here is the result. 11-Jul-2023 10:36:21.146 query-errors: debug 3: client @0x7f217a2bd250 127.0.0.1#39627 (cadyst.com): view default: rpz QN