To_tss/2014-11-28について、ここに記述してください。
EU Parliament approves motion for Google break-up
1. unbound
キャッシュをクリアしているはずの状態(unbound-control reload後)
- firefox で gs.qmail.jp にアクセスしたときの f.ns.qmail.jp 側には特に検証している形跡はない。
2014-11-28 09:09:32.983012500 db622562:a64e:28c6 + 0001 gs.qmail.jp 2014-11-28 09:09:33.021884500 db622562:e5a1:a811 + 0002 qmail.jp 2014-11-28 09:09:33.025779500 db622562:eec4:45ef + 0001 a.ns.qmail.jp 2014-11-28 09:09:33.112059500 db622562:81cb:c721 + 0001 f.ns.qmail.jp
[qmail.jp 下のzoneにアクセスしてみて、ログを観察してみれば、なにか分かるでしょう。 -- ToshinoriMaeno
unbound 側のlog; qmail.jp NS の受け入れにはjpに問合せなおしをしているようだが、nonce はついていない。
- かなり気を使っていることは分かる。
2014-11-28 00:21:11]
Nov 28 09:08:56 tmaeno unbound: [1066:0] info: resolving gs.qmail.jp. A IN Nov 28 09:08:56 tmaeno unbound: [1066:0] info: response for gs.qmail.jp. A IN Nov 28 09:08:56 tmaeno unbound: [1066:0] info: reply from <jp.> 150.100.6.8#53 Nov 28 09:08:56 tmaeno unbound: [1066:0] info: query response was REFERRAL Nov 28 09:08:56 tmaeno unbound: [1066:0] info: resolving qmail.jp. NS IN Nov 28 09:08:56 tmaeno unbound: [1066:0] info: response for qmail.jp. NS IN Nov 28 09:08:56 tmaeno unbound: [1066:0] info: reply from <jp.> 210.138.175.244#53 Nov 28 09:08:56 tmaeno unbound: [1066:0] info: query response was REFERRAL Nov 28 09:08:56 tmaeno unbound: [1066:0] info: resolving a.ns.qmail.jp. A IN Nov 28 09:08:56 tmaeno unbound: [1066:0] info: response for gs.qmail.jp. A IN Nov 28 09:08:56 tmaeno unbound: [1066:0] info: reply from <qmail.jp.> 14.192.44.5#53 Nov 28 09:08:56 tmaeno unbound: [1066:0] info: query response was CNAME Nov 28 09:08:56 tmaeno unbound: [1066:0] info: resolving gs.qmail.jp. A IN Nov 28 09:08:56 tmaeno unbound: [1066:0] info: response for qmail.jp. NS IN Nov 28 09:08:56 tmaeno unbound: [1066:0] info: reply from <qmail.jp.> 14.192.44.5#53 Nov 28 09:08:56 tmaeno unbound: [1066:0] info: query response was ANSWER Nov 28 09:08:56 tmaeno unbound: [1066:0] info: response for a.ns.qmail.jp. A IN Nov 28 09:08:56 tmaeno unbound: [1066:0] info: reply from <qmail.jp.> 14.192.44.5#53 Nov 28 09:08:56 tmaeno unbound: [1066:0] info: query response was ANSWER Nov 28 09:08:57 tmaeno unbound: [1066:0] info: response for gs.qmail.jp. A IN Nov 28 09:08:57 tmaeno unbound: [1066:0] info: reply from <qmail.jp.> 14.192.44.5#53 Nov 28 09:08:57 tmaeno unbound: [1066:0] info: query response was ANSWER Nov 28 09:10:35 tmaeno AptDaemon: INFO: Quitting due to inactivity Nov 28 09:10:35 tmaeno AptDaemon: INFO: Quitting was requested
2. unbound.conf
# cat /etc/unbound/unbound.conf # Unbound configuration file for Debian. # # See the unbound.conf(5) man page. # # See /usr/share/doc/unbound/examples/unbound.conf for a commented # reference config file. # # The following line includes additional configuration files from the # /etc/unbound/unbound.conf.d directory. ## include: "/etc/unbound/unbound.conf.d/*.conf" server: verbosity: 2 harden-referral-path: yes do-ip6: no do-udp: yes cache-min-ttl: 1800 # tcp-upstream: yes
3. harden-referral-path: no
referral の確認はしていないようです。
Nov 29 10:44:34 tmaeno unbound: [1081:0] info: resolving gs.qmail.jp. A IN Nov 29 10:44:34 tmaeno unbound: [1081:0] info: response for gs.qmail.jp. A IN Nov 29 10:44:34 tmaeno unbound: [1081:0] info: reply from <.> 192.5.5.241#53 Nov 29 10:44:34 tmaeno unbound: [1081:0] info: query response was REFERRAL Nov 29 10:44:34 tmaeno unbound: [1081:0] info: response for gs.qmail.jp. A IN Nov 29 10:44:34 tmaeno unbound: [1081:0] info: reply from <jp.> 203.119.1.1#53 Nov 29 10:44:34 tmaeno unbound: [1081:0] info: query response was REFERRAL Nov 29 10:44:34 tmaeno unbound: [1081:0] info: response for gs.qmail.jp. A IN Nov 29 10:44:34 tmaeno unbound: [1081:0] info: reply from <qmail.jp.> 14.192.44.5#53 Nov 29 10:44:34 tmaeno unbound: [1081:0] info: query response was CNAME Nov 29 10:44:34 tmaeno unbound: [1081:0] info: resolving gs.qmail.jp. A IN Nov 29 10:44:34 tmaeno unbound: [1081:0] info: response for gs.qmail.jp. A IN Nov 29 10:44:34 tmaeno unbound: [1081:0] info: reply from <qmail.jp.> 14.192.44.5#53 Nov 29 10:44:34 tmaeno unbound: [1081:0] info: query response was ANSWER