DNS Question...

Hi all,

I was browsing through my logs and I found this entry in /var/log/auth.log

Code:
Feb  7 12:57:14 centiger firefox-bin: gethostby*.getanswer: asked for "simon.nitro.dk IN AAAA", got type "SOA"

Can someone please explain in short terms what this mean?
 
Do you have any special settings in unbound (like local-zone or local-data)?
 
It basically means that a DNS lookup resulted in a reply that differs from the expected one. E.g I use unbound as my resolver, and I have certain DNS zones I do not want any contact with, so I redirected them to a local zone with fake data. Whenever I (or my web browser) tries to resolve a hostname in a zone like that, I get a similar log line, like:

Code:
Feb 14 02:16:12 box firefox-bin: gethostby*.getanswer: asked for "ad.doubleclick.net", got "doubleclick.net"

In your case, you asked for an AAAA record (IPv6 A record) and got a SOA record (Start of Authority) back. This may have been a temporary failure in that zone's ACLs (telling you to look elsewhere).
 
Thanks for the clear explanation. Funny this is I've never seen this before in my logs. Suspicious as I am... I can ignore this?
 
I'm resuming this old thread because I have the same problem.

Starting a couple of weeks ago, I started getting this message many times every day:

Code:
transmission-daemon 99225 - - gethostby*.getanswer: asked for "opentracker.i2p.rocks IN AAAA", got type "SOA"

What's going on? Is there anything I can do to prevent this?
 
Back
Top