[Dnsmasq-discuss] Failure to resolve boinc.berkeley.edu (kind of)

Andrew Duty andrew.duty at 1solar.com
Thu Aug 1 22:11:43 BST 2019


I am having a problem that I do not understand. I am running dnsmasq 2.80
and cannot resolve boinc.berkeley.edu even though my upstream DNS servers
(8.8.8.8 and 8.8.4.4) resolve it fine. Here is what I get in the logs (I
have replaced my IP address with my_ip):

dnsmasq[5635]: query[A] boinc.berkeley.edu from my_ip
dnsmasq[5635]: forwarded boinc.berkeley.edu to 8.8.4.4
dnsmasq[5635]: dnssec-query[DS] berkeley.edu to 8.8.4.4
dnsmasq[5635]: reply berkeley.edu is DS keytag 3456, algo 10, digest 2
dnsmasq[5635]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 57107, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 51617, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 6233, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 3456, algo 10
dnsmasq[5635]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 3456, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 57107, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 51617, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 6233, algo 10
dnsmasq[5635]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 6233, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 3456, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 57107, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 51617, algo 10
dnsmasq[5635]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 57107, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 51617, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 6233, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 3456, algo 10
dnsmasq[5635]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 57107, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 51617, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 6233, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 3456, algo 10
dnsmasq[5635]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 51617, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 6233, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 3456, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 57107, algo 10
dnsmasq[5635]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 6233, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 3456, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 57107, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 51617, algo 10
dnsmasq[5635]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 6233, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 3456, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 57107, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 51617, algo 10
dnsmasq[5635]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 51617, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 6233, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 3456, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 57107, algo 10
dnsmasq[5635]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 3456, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 57107, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 51617, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 6233, algo 10
dnsmasq[5635]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 57107, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 51617, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 6233, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 3456, algo 10
dnsmasq[5635]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 57107, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 51617, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 6233, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 3456, algo 10
dnsmasq[5635]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 3456, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 57107, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 51617, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 6233, algo 10
dnsmasq[5635]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 57107, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 51617, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 6233, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 3456, algo 10
dnsmasq[5635]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 57107, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 51617, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 6233, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 3456, algo 10
dnsmasq[5635]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 57107, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 51617, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 6233, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 3456, algo 10
dnsmasq[5635]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 3456, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 57107, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 51617, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 6233, algo 10
dnsmasq[5635]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 57107, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 51617, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 6233, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 3456, algo 10
dnsmasq[5635]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 3456, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 57107, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 51617, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 6233, algo 10
dnsmasq[5635]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 3456, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 57107, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 51617, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 6233, algo 10
dnsmasq[5635]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 57107, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 51617, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 6233, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 3456, algo 10
dnsmasq[5635]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 57107, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 51617, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 6233, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 3456, algo 10
dnsmasq[5635]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 57107, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 51617, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 6233, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 3456, algo 10
dnsmasq[5635]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 3456, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 57107, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 51617, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 6233, algo 10
dnsmasq[5635]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 3456, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 57107, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 51617, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 6233, algo 10
dnsmasq[5635]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 3456, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 57107, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 51617, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 6233, algo 10
dnsmasq[5635]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 51617, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 6233, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 3456, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 57107, algo 10
dnsmasq[5635]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 57107, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 51617, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 6233, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 3456, algo 10
dnsmasq[5635]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 57107, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 51617, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 6233, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 3456, algo 10
dnsmasq[5635]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 57107, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 51617, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 6233, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 3456, algo 10
dnsmasq[5635]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 57107, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 51617, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 6233, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 3456, algo 10
dnsmasq[5635]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 6233, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 3456, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 57107, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 51617, algo 10
dnsmasq[5635]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 3456, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 57107, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 51617, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 6233, algo 10
dnsmasq[5635]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 51617, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 6233, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 3456, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 57107, algo 10
dnsmasq[5635]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 57107, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 51617, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 6233, algo 10
dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 3456, algo 10
dnsmasq[5635]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4
dnsmasq[5635]: query[A] boinc.berkeley.edu from my_ip
dnsmasq[5635]: reply boinc.berkeley.edu is 208.68.240.115
dnsmasq[5644]: query[A] boinc.berkeley.edu from my_ip
dnsmasq[5644]: forwarded boinc.berkeley.edu to 8.8.4.4
dnsmasq[5644]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 51617, algo 10
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 6233, algo 10
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 3456, algo 10
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 57107, algo 10
dnsmasq[5644]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 57107, algo 10
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 51617, algo 10
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 6233, algo 10
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 3456, algo 10
dnsmasq[5644]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 57107, algo 10
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 51617, algo 10
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 6233, algo 10
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 3456, algo 10
dnsmasq[5644]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 57107, algo 10
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 51617, algo 10
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 6233, algo 10
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 3456, algo 10
dnsmasq[5644]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 57107, algo 10
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 51617, algo 10
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 6233, algo 10
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 3456, algo 10
dnsmasq[5644]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 57107, algo 10
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 51617, algo 10
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 6233, algo 10
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 3456, algo 10
dnsmasq[5644]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 57107, algo 10
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 51617, algo 10
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 6233, algo 10
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 3456, algo 10
dnsmasq[5644]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 57107, algo 10
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 51617, algo 10
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 6233, algo 10
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 3456, algo 10
dnsmasq[5644]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 57107, algo 10
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 51617, algo 10
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 6233, algo 10
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 3456, algo 10
dnsmasq[5644]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 57107, algo 10
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 51617, algo 10
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 6233, algo 10
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 3456, algo 10
dnsmasq[5644]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 57107, algo 10
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 51617, algo 10
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 6233, algo 10
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 3456, algo 10
dnsmasq[5644]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 57107, algo 10
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 51617, algo 10
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 6233, algo 10
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 3456, algo 10
dnsmasq[5644]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 57107, algo 10
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 51617, algo 10
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 6233, algo 10
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 3456, algo 10
dnsmasq[5644]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 57107, algo 10
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 51617, algo 10
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 6233, algo 10
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 3456, algo 10
dnsmasq[5644]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 57107, algo 10
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 51617, algo 10
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 6233, algo 10
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 3456, algo 10
dnsmasq[5644]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 57107, algo 10
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 51617, algo 10
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 6233, algo 10
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 3456, algo 10
dnsmasq[5644]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 57107, algo 10
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 51617, algo 10
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 6233, algo 10
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 3456, algo 10
dnsmasq[5644]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 57107, algo 10
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 51617, algo 10
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 6233, algo 10
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 3456, algo 10
dnsmasq[5644]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 57107, algo 10
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 51617, algo 10
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 6233, algo 10
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 3456, algo 10
dnsmasq[5644]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 57107, algo 10
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 51617, algo 10
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 6233, algo 10
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 3456, algo 10
dnsmasq[5644]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 57107, algo 10
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 51617, algo 10
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 6233, algo 10
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 3456, algo 10
dnsmasq[5644]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 57107, algo 10
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 51617, algo 10
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 6233, algo 10
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 3456, algo 10
dnsmasq[5644]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 57107, algo 10
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 51617, algo 10
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 6233, algo 10
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 3456, algo 10
dnsmasq[5644]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 57107, algo 10
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 51617, algo 10
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 6233, algo 10
dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 3456, algo 10
dnsmasq[5644]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4
dnsmasq[5644]: validation boinc.berkeley.edu is ABANDONED
dnsmasq[5644]: reply boinc.berkeley.edu is 208.68.240.115

This is what I get from dig (I have replaced the dnsmasq server IP address
with dnsmasq_ip):

dig @dnsmasq_ip boinc.berkeley.edu
;; Truncated, retrying in TCP mode.

; <<>> DiG 9.10.3-P4-Debian <<>> @dnsmasq_ip boinc.berkeley.edu
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 34036
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; QUESTION SECTION:
;boinc.berkeley.edu. IN A

;; Query time: 866 msec
;; SERVER: dnsmasq_ip#53(dnsmasq_ip)
;; WHEN: Thu Aug 01 14:12:32 MDT 2019
;; MSG SIZE  rcvd: 47

dig +ignore works fine:
dig +ignore @dnsmasq_ip boinc.berkeley.edu

; <<>> DiG 9.10.3-P4-Debian <<>> +ignore @dnsmasq_ip boinc.berkeley.edu
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 41693
;; flags: qr tc rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; QUESTION SECTION:
;boinc.berkeley.edu. IN A

;; ANSWER SECTION:
boinc.berkeley.edu. 299 IN A 208.68.240.115

;; Query time: 321 msec
;; SERVER: dnsmasq_ip#53(dnsmasq_ip)
;; WHEN: Thu Aug 01 14:49:59 MDT 2019
;; MSG SIZE  rcvd: 63

Also (this may be unrelated, but I stumbled across it while troubleshooting
and I don't understand it), when I do a dig +trace from my machine, it
fails to resolve the authoritative servers:

dig +trace @8.8.8.8 boinc.berkeley.edu

; <<>> DiG 9.10.3-P4-Debian <<>> +trace @8.8.8.8 boinc.berkeley.edu
; (1 server found)
;; global options: +cmd
. 225285 IN NS a.root-servers.net.
. 225285 IN NS b.root-servers.net.
. 225285 IN NS c.root-servers.net.
. 225285 IN NS d.root-servers.net.
. 225285 IN NS e.root-servers.net.
. 225285 IN NS f.root-servers.net.
. 225285 IN NS g.root-servers.net.
. 225285 IN NS h.root-servers.net.
. 225285 IN NS i.root-servers.net.
. 225285 IN NS j.root-servers.net.
. 225285 IN NS k.root-servers.net.
. 225285 IN NS l.root-servers.net.
. 225285 IN NS m.root-servers.net.
. 225285 IN RRSIG NS 8 0 518400 20190814050000 20190801040000 59944 .
YLucSYJTUePAv0hTIdgkoXRIm5clxYoEyFx/67rAt/C+KKf5lIOwnAP4
S3VnZd0nO9sGRDT3mxNcTzHVHriFdaLiFBSHspDhspdKoU0SKgmkJlYw
aeR8FyM8acyfWzqghSA3rydxFlQDu1kaekoBRVV0ppcV92jBlQFePRzH
gNGAeLsIX8zoNPkIsx/6/doymTa2yMyQkh/iO0GxIVTw7bsJpH+2g4Iv
e5pbs7Pls5wpziXg5l9aGbhtjVF2ruUp7LkMpXa5fDpEn/WfuKPhvlIm
uWw++Bwsqc6QzAdBP9tafiwBu/t0LI65sxblaoy5oyF7IkL9VRLsAtOM v/BS2w==
;; Received 525 bytes from 8.8.8.8#53(8.8.8.8) in 43 ms

edu. 172800 IN NS g.edu-servers.net.
edu. 172800 IN NS h.edu-servers.net.
edu. 172800 IN NS k.edu-servers.net.
edu. 172800 IN NS m.edu-servers.net.
edu. 172800 IN NS c.edu-servers.net.
edu. 172800 IN NS j.edu-servers.net.
edu. 172800 IN NS f.edu-servers.net.
edu. 172800 IN NS d.edu-servers.net.
edu. 172800 IN NS i.edu-servers.net.
edu. 172800 IN NS e.edu-servers.net.
edu. 172800 IN NS a.edu-servers.net.
edu. 172800 IN NS b.edu-servers.net.
edu. 172800 IN NS l.edu-servers.net.
edu. 86400 IN DS 28065 8 2
4172496CDE85534E51129040355BD04B1FCFEBAE996DFDDE652006F6 F8B2CE76
edu. 86400 IN RRSIG DS 8 1 86400 20190814170000 20190801160000 59944 .
RjDmXvL5LW+9H/Qo1Ligk9rbHg718sZlAw3dzTvav8GeOtfNQ8Y45gJI
DFmpET1QKdzI9zo8DOeSQxY5rYqFoei/CKmyJXYzsTRomwvqVT7SlVEB
N7RU3mWPCCM7p3XGPZ+4r9OmO9u9pnKozyj9/NPSEcWZmmJzX2U9X8R3
iujfwqUCckvyZi1p/v4o8efz+FkcTSLeJAmcXflK62nn3LLgbD4UUjhf
dXzIfxMTvPL6JRFGp2A6JX5r0FXduFaknaKeWILdcs0f9098QdS6cmuq
CN+mKOD6o9H2y+aPyJlyl0DPmW78ZeE0FhdFHwUw3fx/x2eTde1OcsRp /XKvQg==
;; Received 1177 bytes from 202.12.27.33#53(m.root-servers.net) in 54 ms

berkeley.edu. 172800 IN NS adns1.berkeley.edu.
berkeley.edu. 172800 IN NS adns2.berkeley.edu.
berkeley.edu. 172800 IN NS adns3.berkeley.edu.
berkeley.edu. 86400 IN DS 3456 10 2
C7677FE8AC453BDFC04432C834B2D6B9526223F28A7A36E52277FF3E FEEBDDEB
berkeley.edu. 86400 IN RRSIG DS 8 2 86400 20190806055859 20190730044859
44132 edu. Mt98SpbG5pErQnd7VfsrHL41KdYJPYm4/frEqTT54yYpyjZEs7lJF4WK
zFOtmIf5pcZLS+p5ycqi0EnpLGDVppwFaXrxk8nsc2Ioi+l76Ik13YD7
v9EFmm2UrQd3Cl8DbroKc4aSb18aArOdGrdxSztuljLeYfD6S5YrMIky
p/qYALXORQD43tl9owq6I1aUNGgoF7+QFEsl18n3hZFhRw==
couldn't get address for 'adns1.berkeley.edu': not found
couldn't get address for 'adns2.berkeley.edu': not found
couldn't get address for 'adns3.berkeley.edu': not found
dig: couldn't get address for 'adns1.berkeley.edu': no more

But if I try to resolve them directly, it's fine:
dig @8.8.8.8 adns1.berkeley.edu

; <<>> DiG 9.10.3-P4-Debian <<>> @8.8.8.8 adns1.berkeley.edu
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 23216
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; QUESTION SECTION:
;adns1.berkeley.edu. IN A

;; ANSWER SECTION:
adns1.berkeley.edu. 3659 IN A 128.32.136.3

;; Query time: 90 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Thu Aug 01 14:41:09 MDT 2019
;; MSG SIZE  rcvd: 63

Furthermore, if I perform the same trace command from the dnsmasq server,
it works fine:
dig +trace @8.8.8.8 boinc.berkeley.edu

; <<>> DiG 9.14.3 <<>> +trace @8.8.8.8 boinc.berkeley.edu
; (1 server found)
;; global options: +cmd
. 15621 IN NS d.root-servers.net.
. 15621 IN NS m.root-servers.net.
. 15621 IN NS i.root-servers.net.
. 15621 IN NS c.root-servers.net.
. 15621 IN NS b.root-servers.net.
. 15621 IN NS f.root-servers.net.
. 15621 IN NS j.root-servers.net.
. 15621 IN NS g.root-servers.net.
. 15621 IN NS k.root-servers.net.
. 15621 IN NS h.root-servers.net.
. 15621 IN NS e.root-servers.net.
. 15621 IN NS l.root-servers.net.
. 15621 IN NS a.root-servers.net.
. 15621 IN RRSIG NS 8 0 518400 20190811170000 20190729160000 59944 .
EoLwrjgUfYoS3Do6vwwjLQtxq4+whuMDwRBNDiMeSRuECB4DnploeBjF
nU0Et7Tj3JgEOtl3jSIhkYCSgpMRAg3/aH3Pfu4j4cjNW5Q91fZx7noa
1VpdyuxUoqKqGh2Ag2xUhHyq9F38MvOigh/1GI+b/IrSjA1FkNK7LyS9
DFyWAYyiUVTK9DLuXMWxscm8IcO1gcfFjG1xWbB+SuD+fnUIgafcjC2d
BwK8WIqf9xmleG+ivzsqlKn5f8Ffc7n4SXTXbzXF96qjwCA73mq/FWoh
HNEK69hZg40sUFfKNymR/NN9KzSiErQswkkLW6SfTUN7w/L+ou4Hr5Qj H3G05Q==
;; Received 525 bytes from 8.8.8.8#53(8.8.8.8) in 41 ms

edu. 172800 IN NS g.edu-servers.net.
edu. 172800 IN NS f.edu-servers.net.
edu. 172800 IN NS l.edu-servers.net.
edu. 172800 IN NS c.edu-servers.net.
edu. 172800 IN NS i.edu-servers.net.
edu. 172800 IN NS b.edu-servers.net.
edu. 172800 IN NS m.edu-servers.net.
edu. 172800 IN NS d.edu-servers.net.
edu. 172800 IN NS k.edu-servers.net.
edu. 172800 IN NS j.edu-servers.net.
edu. 172800 IN NS h.edu-servers.net.
edu. 172800 IN NS e.edu-servers.net.
edu. 172800 IN NS a.edu-servers.net.
edu. 86400 IN DS 28065 8 2
4172496CDE85534E51129040355BD04B1FCFEBAE996DFDDE652006F6 F8B2CE76
edu. 86400 IN RRSIG DS 8 1 86400 20190814170000 20190801160000 59944 .
RjDmXvL5LW+9H/Qo1Ligk9rbHg718sZlAw3dzTvav8GeOtfNQ8Y45gJI
DFmpET1QKdzI9zo8DOeSQxY5rYqFoei/CKmyJXYzsTRomwvqVT7SlVEB
N7RU3mWPCCM7p3XGPZ+4r9OmO9u9pnKozyj9/NPSEcWZmmJzX2U9X8R3
iujfwqUCckvyZi1p/v4o8efz+FkcTSLeJAmcXflK62nn3LLgbD4UUjhf
dXzIfxMTvPL6JRFGp2A6JX5r0FXduFaknaKeWILdcs0f9098QdS6cmuq
CN+mKOD6o9H2y+aPyJlyl0DPmW78ZeE0FhdFHwUw3fx/x2eTde1OcsRp /XKvQg==
;; Received 1205 bytes from 192.33.4.12#53(c.root-servers.net) in 50 ms

berkeley.edu. 172800 IN NS adns1.berkeley.edu.
berkeley.edu. 172800 IN NS adns2.berkeley.edu.
berkeley.edu. 172800 IN NS adns3.berkeley.edu.
berkeley.edu. 86400 IN DS 3456 10 2
C7677FE8AC453BDFC04432C834B2D6B9526223F28A7A36E52277FF3E FEEBDDEB
berkeley.edu. 86400 IN RRSIG DS 8 2 86400 20190806055859 20190730044859
44132 edu. Mt98SpbG5pErQnd7VfsrHL41KdYJPYm4/frEqTT54yYpyjZEs7lJF4WK
zFOtmIf5pcZLS+p5ycqi0EnpLGDVppwFaXrxk8nsc2Ioi+l76Ik13YD7
v9EFmm2UrQd3Cl8DbroKc4aSb18aArOdGrdxSztuljLeYfD6S5YrMIky
p/qYALXORQD43tl9owq6I1aUNGgoF7+QFEsl18n3hZFhRw==
;; Received 426 bytes from 192.12.94.30#53(e.edu-servers.net) in 32 ms

boinc.berkeley.edu. 300 IN A 208.68.240.115
boinc.berkeley.edu. 300 IN RRSIG A 10 3 300 20190805040440 20190801034131
51617 berkeley.edu.
rF5bcjX/lIgPlZSusFVr7IONZx47ROshdV/mz3neyZNJeWLZZ2CL7cuf
9JLxBSSMhlUaw+mopHATfYYEJE5cx3kiRcUYzgEjzPhi5p4qCUVjSNnz
I8xqs+VhlUmk/Az9eaeaGGpzC96MM/qvknxHL4UZfll7cYLynlLnrt0B QXE=
;; Received 235 bytes from 128.32.136.3#53(adns1.berkeley.edu) in 40 ms

I do not have a thorough understanding of DNS, and I would be extremely
grateful if someone could shed some light on this for me.

-- 
Andrew Duty
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/attachments/20190801/a9fead8a/attachment-0001.html>


More information about the Dnsmasq-discuss mailing list