Unbound Unbound fails to resolve "epaper.ottawacitizen.com" with SERVFAIL

[Don Walker]

Unbound fails to resolve "epaper.ottawacitizen.com". Resolves fine with 1.1.1.1

; <<>> DiG 9.18.4 <<>> epaper.ottawacitizen.com @192.168.1.1
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 33841
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1280
;; QUESTION SECTION:
;epaper.ottawacitizen.com. IN A

;; Query time: 0 msec
;; SERVER: 192.168.1.1#53(192.168.1.1) (UDP)
;; WHEN: Wed Oct 19 18:24:20 EDT 2022
;; MSG SIZE rcvd: 53

Log messages:
Oct 19 15:04:46 unbound[17042:0] error: SERVFAIL <epaper.ottawacitizen.com. A IN>: all servers for this domain failed, at zone ottawacitizen.com. from 192.42.93.30 no server to query nameserver addresses not usable
Oct 19 14:54:15 unbound[17042:0] error: SERVFAIL <epaper.ottawacitizen.com. A IN>: all servers for this domain failed, at zone ottawacitizen.com. upstream server timeout

Any ideas how to fix or workaround?

RT-AC86U (aarch64) FW-386.7_2
unbound version: 1.16.1
amtm up to date

 

[sfx2000]

Unbound fails to resolve "epaper.ottawacitizen.com". Resolves fine with 1.1.1.1

bad unbound cache?

$ dig epaper.ottawacitizen.com @192.42.93.30

; <<>> DiG 9.16.1-Ubuntu <<>> epaper.ottawacitizen.com @192.42.93.30
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 22612
;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 2, ADDITIONAL: 3
;; WARNING: recursion requested but not available

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;epaper.ottawacitizen.com.    IN    A

;; AUTHORITY SECTION:
ottawacitizen.com.    172800    IN    NS    ns1.postmediadns.com.
ottawacitizen.com.    172800    IN    NS    ns2.postmediadns.com.

;; ADDITIONAL SECTION:
ns1.postmediadns.com.    172800    IN    A    204.187.151.135
ns2.postmediadns.com.    172800    IN    A    204.187.151.136

;; Query time: 20 msec
;; SERVER: 192.42.93.30#53(192.42.93.30)
;; WHEN: Wed Oct 19 17:48:52 PDT 2022
;; MSG SIZE  rcvd: 134

 

[Don Walker]

I've tried clearing the unbound cache a couple of times without success.

I've attached a level 5 log file for the experts.

 

[Don Walker]

The Ottawa Citizen appears to have fixed whatever the problem was and the URL is now resolving and working normally. I suspect that something was badly configured for DNS.

I'm still interested to know if there is anything I could have done to fix or work around the problem on my end. However, now that it is working it will be hard to test any solution.