MoinQ:

DNS/unbound/harden-referral-path/sample2について、ここに記述してください。

起動直後の ubuntu/unbound での観察です。

$dig -t a a.dns.jp

Dec 18 18:08:57 tmaeno unbound: [1088:0] info: resolving a.dns.jp. A IN
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: response for a.dns.jp. A IN
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: reply from <.> 192.228.79.201#53
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: query response was REFERRAL

Dec 18 18:08:57 tmaeno unbound: [1088:0] info: resolving jp. NS IN
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: response for a.dns.jp. A IN
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: reply from <jp.> 203.119.40.1#53
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: query response was REFERRAL

Dec 18 18:08:57 tmaeno unbound: [1088:0] info: resolving dns.jp. NS IN
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: response for jp. NS IN
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: reply from <.> 192.36.148.17#53
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: query response was REFERRAL

Dec 18 18:08:57 tmaeno unbound: [1088:0] info: resolving a.dns.jp. AAAA IN
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: resolving b.dns.jp. AAAA IN
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: resolving c.dns.jp. AAAA IN
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: resolving e.dns.jp. A IN
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: resolving f.dns.jp. A IN
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: resolving g.dns.jp. A IN
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: resolving d.dns.jp. AAAA IN
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: resolving e.dns.jp. AAAA IN
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: resolving c.dns.jp. A IN
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: resolving d.dns.jp. A IN
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: resolving f.dns.jp. AAAA IN
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: resolving b.dns.jp. A IN
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: response for a.dns.jp. A IN
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: reply from <dns.jp.> 203.119.40.4#53
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: query response was ANSWER

Dec 18 18:08:57 tmaeno unbound: [1088:0] info: response for jp. NS IN
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: reply from <jp.> 203.119.40.1#53
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: query response was ANSWER

Dec 18 18:08:57 tmaeno unbound: [1088:0] info: response for b.dns.jp. AAAA IN
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: reply from <jp.> 203.119.40.1#53
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: query response was REFERRAL

Dec 18 18:08:57 tmaeno unbound: [1088:0] info: response for c.dns.jp. AAAA IN
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: reply from <jp.> 202.12.30.131#53
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: query response was REFERRAL

Dec 18 18:08:57 tmaeno unbound: [1088:0] info: response for f.dns.jp. A IN
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: reply from <jp.> 203.119.1.1#53
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: query response was REFERRAL

Dec 18 18:08:57 tmaeno unbound: [1088:0] info: response for e.dns.jp. A IN
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: reply from <jp.> 150.100.6.8#53
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: query response was REFERRAL

Dec 18 18:08:57 tmaeno unbound: [1088:0] info: response for d.dns.jp. AAAA IN
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: reply from <jp.> 203.119.1.1#53
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: query response was REFERRAL

Dec 18 18:08:57 tmaeno unbound: [1088:0] info: response for a.dns.jp. AAAA IN
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: reply from <jp.> 192.50.43.53#53
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: query response was REFERRAL

Dec 18 18:08:57 tmaeno unbound: [1088:0] info: response for g.dns.jp. A IN
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: reply from <jp.> 150.100.6.8#53
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: query response was REFERRAL

Dec 18 18:08:57 tmaeno unbound: [1088:0] info: response for c.dns.jp. A IN
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: reply from <jp.> 202.12.30.131#53
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: query response was REFERRAL

Dec 18 18:08:57 tmaeno unbound: [1088:0] info: response for d.dns.jp. A IN
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: reply from <jp.> 210.138.175.244#53
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: query response was REFERRAL

Dec 18 18:08:57 tmaeno unbound: [1088:0] info: response for e.dns.jp. AAAA IN
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: reply from <jp.> 150.100.6.8#53
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: query response was REFERRAL

Dec 18 18:08:57 tmaeno unbound: [1088:0] info: response for b.dns.jp. A IN
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: reply from <jp.> 202.12.30.131#53
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: query response was REFERRAL

Dec 18 18:08:57 tmaeno unbound: [1088:0] info: response for f.dns.jp. AAAA IN
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: reply from <jp.> 150.100.6.8#53
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: query response was REFERRAL

Dec 18 18:08:57 tmaeno unbound: [1088:0] info: response for b.dns.jp. AAAA IN
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: reply from <dns.jp.> 210.138.175.245#53
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: query response was ANSWER

Dec 18 18:08:57 tmaeno unbound: [1088:0] info: response for c.dns.jp. AAAA IN
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: reply from <dns.jp.> 203.119.40.4#53
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: query response was ANSWER

Dec 18 18:08:57 tmaeno unbound: [1088:0] info: response for f.dns.jp. A IN
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: reply from <dns.jp.> 210.138.175.245#53
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: query response was ANSWER

Dec 18 18:08:57 tmaeno unbound: [1088:0] info: response for e.dns.jp. A IN
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: reply from <dns.jp.> 210.138.175.245#53
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: query response was ANSWER

Dec 18 18:08:57 tmaeno unbound: [1088:0] info: response for d.dns.jp. AAAA IN
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: reply from <dns.jp.> 203.119.40.4#53
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: query response was ANSWER

Dec 18 18:08:57 tmaeno unbound: [1088:0] info: response for a.dns.jp. AAAA IN
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: reply from <dns.jp.> 203.119.40.4#53
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: query response was ANSWER

Dec 18 18:08:57 tmaeno unbound: [1088:0] info: response for c.dns.jp. A IN
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: reply from <dns.jp.> 203.119.40.4#53
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: query response was ANSWER

Dec 18 18:08:57 tmaeno unbound: [1088:0] info: response for g.dns.jp. A IN
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: reply from <dns.jp.> 150.100.6.12#53
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: query response was ANSWER

Dec 18 18:08:57 tmaeno unbound: [1088:0] info: response for d.dns.jp. A IN
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: reply from <dns.jp.> 203.119.40.4#53
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: query response was ANSWER

Dec 18 18:08:57 tmaeno unbound: [1088:0] info: response for b.dns.jp. A IN
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: reply from <dns.jp.> 203.119.1.4#53
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: query response was ANSWER

Dec 18 18:08:57 tmaeno unbound: [1088:0] info: response for f.dns.jp. AAAA IN
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: reply from <dns.jp.> 202.12.30.134#53
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: query response was ANSWER

Dec 18 18:08:57 tmaeno unbound: [1088:0] info: response for e.dns.jp. AAAA IN
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: reply from <dns.jp.> 192.50.43.153#53
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: query response was ANSWER

Dec 18 18:08:57 tmaeno unbound: [1088:0] info: response for dns.jp. NS IN
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: reply from <.> 192.228.79.201#53
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: query response was REFERRAL

Dec 18 18:08:57 tmaeno unbound: [1088:0] info: resolving jp. NS IN

Dec 18 18:08:57 tmaeno unbound: [1088:0] info: response for dns.jp. NS IN
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: reply from <jp.> 210.138.175.244#53
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: query response was REFERRAL

Dec 18 18:08:57 tmaeno unbound: [1088:0] info: resolving nse.dns.jp. A IN
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: resolving nsf.dns.jp. A IN
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: resolving nsg.dns.jp. A IN
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: resolving nsa.dns.jp. AAAA IN
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: resolving nsb.dns.jp. AAAA IN
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: resolving nsd.dns.jp. AAAA IN
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: resolving nse.dns.jp. AAAA IN
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: resolving nsb.dns.jp. A IN
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: resolving nsd.dns.jp. A IN
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: resolving nsf.dns.jp. AAAA IN
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: resolving nsa.dns.jp. A IN

Dec 18 18:08:57 tmaeno unbound: [1088:0] info: response for nse.dns.jp. A IN
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: reply from <dns.jp.> 203.119.1.4#53
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: query response was ANSWER

Dec 18 18:08:57 tmaeno unbound: [1088:0] info: response for nsf.dns.jp. A IN
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: reply from <dns.jp.> 210.138.175.245#53
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: query response was ANSWER

Dec 18 18:08:57 tmaeno unbound: [1088:0] info: response for nsg.dns.jp. A IN
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: reply from <dns.jp.> 202.12.30.134#53
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: query response was ANSWER

Dec 18 18:08:57 tmaeno unbound: [1088:0] info: response for dns.jp. NS IN
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: reply from <dns.jp.> 150.100.6.12#53
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: query response was ANSWER

Dec 18 18:08:57 tmaeno unbound: [1088:0] info: response for nsb.dns.jp. AAAA IN
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: reply from <dns.jp.> 202.12.30.134#53
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: query response was ANSWER

Dec 18 18:08:57 tmaeno unbound: [1088:0] info: response for nsa.dns.jp. AAAA IN
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: reply from <dns.jp.> 150.100.6.12#53
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: query response was ANSWER

Dec 18 18:08:57 tmaeno unbound: [1088:0] info: response for nsd.dns.jp. A IN
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: reply from <dns.jp.> 203.119.40.4#53
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: query response was ANSWER

Dec 18 18:08:57 tmaeno unbound: [1088:0] info: response for nse.dns.jp. AAAA IN
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: reply from <dns.jp.> 150.100.6.12#53
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: query response was ANSWER

Dec 18 18:08:57 tmaeno unbound: [1088:0] info: response for nsf.dns.jp. AAAA IN
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: reply from <dns.jp.> 210.138.175.245#53
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: query response was ANSWER

Dec 18 18:08:57 tmaeno unbound: [1088:0] info: response for nsa.dns.jp. A IN
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: reply from <dns.jp.> 150.100.6.12#53
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: query response was ANSWER

Dec 18 18:08:57 tmaeno unbound: [1088:0] info: response for nsd.dns.jp. AAAA IN
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: reply from <dns.jp.> 192.50.43.153#53
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: query response was ANSWER

Dec 18 18:08:57 tmaeno unbound: [1088:0] info: response for nsb.dns.jp. A IN
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: reply from <dns.jp.> 192.50.43.153#53
Dec 18 18:08:57 tmaeno unbound: [1088:0] info: query response was ANSWER