[rbldnsd] RBLDNSD not playing nicely with bind

[Alex Lasoriti]

On Mon, Jun 09, 2014 at 05:55:11PM +0100, Ben wrote:
> [...]
> 
> And the logs show :
> 
> Jun  9 17:52:52  named[19719]: error (chase DS servers) resolving
> 'zen.dnsbl/DS/IN': 127.0.0.1#10099
> Jun  9 17:52:52  named[19719]: error (unexpected RCODE REFUSED)
> resolving 'dnsbl/NS/IN': 127.0.0.1#10099
> Jun  9 17:52:52  named[19719]: error (no valid DS) resolving
> '2.0.0.127.zen.dnsbl/A/IN': 127.0.0.1#10099
> 
> 
> My BIND forwarding is as follows :
> 
> zone "dnsbl" {
>       type forward;
>       forward only;
>       forwarders {
>          127.0.0.1 port 10099;
>        };
> };

Hello,

you seem to be a Spamhaus datafeed rsync customer.

In the installation manual, you find two ways of configuring DNS
to use the service: one is the forwarding method that you are currently
using, the second is the delegation method - set up full delegations
for the local domain .dnsbl.

Unfortunately forwarding and DNSSEC do not go together too well..
if you move to the delegation method things should be ok.

I hope this helps - feel free to contact datafeed-support if you need
further help.

Sincerely,

Alex Lasoriti
Spamhaus Technology