Dns not resolving correctly

sireangelus

Hi, i have a number of debian containers behind the firewall, but today i discovered that after i set up unbound to be our dns fowarder, my containers cannot connect to the debian repositories for updates because they cannot resolv the address httpredir.debian.org.

Can someone help me on this one? ty.

Derelict

DNS forwarder or DNS resolver?

If forwarder, turn off DNSSEC and test again.

johnpoz

Yeah I show that resolving just fine.. With dnssec valid all the way through.

If your forwarding somewhere and its not working - then they are the issue..

httpredir.debian.org. IN A

;; ANSWER SECTION:
httpredir.debian.org. 3600 IN CNAME static.debian.org.
static.debian.org. 3600 IN A 130.89.148.14
static.debian.org. 3600 IN A 149.20.4.15
static.debian.org. 3600 IN A 5.153.231.4
static.debian.org. 3600 IN A 128.31.0.62

;; AUTHORITY SECTION:
debian.org. 28800 IN NS dnsnode.debian.org.
debian.org. 28800 IN NS sec2.rcode0.net.
debian.org. 28800 IN NS sec1.rcode0.net.

;; ADDITIONAL SECTION:
dnsnode.debian.org. 28800 IN A 194.146.106.126
dnsnode.debian.org. 28800 IN AAAA 2001:67c:1010:32::53

;; Query time: 126 msec
;; SERVER: 192.168.3.10#53(192.168.3.10)
;; WHEN: Mon Oct 16 03:24:08 Central Daylight Time 2017
;; MSG SIZE rcvd: 248

http://dnsviz.net/d/httpredir.debian.org/dnssec/