<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
</head>
<body>
<p><font face="Helvetica, Arial, sans-serif">Hey,</font></p>
<p><font face="Helvetica, Arial, sans-serif">I have a FreeBSD box
where jails communicate with dnsmasq outside to resolve each
other's addresses (they get different IPs on redeployments), and
dnsmasq communicates with unbound where it needs to resolve
outside domains.</font></p>
<p><font face="Helvetica, Arial, sans-serif">When running stuff from
cron within the jails, sometimes hostnames don't resolve and I
started to investigate on the problem by turning debug log on
with dnsmasq. As it turns out, it complains about domain DNSSEC
errors, where they are properly configured. This happens with my
domain (attached in the logs), and outher domains (github,
updates.spamassassin.org) as well. I'm somewhat clueless as to
why it happens, so please see the log attached, with my own
domain, obsswitcher.com. What happens here is, I've set up a
cronjob with curl to run until it succeeds, that is:</font></p>
<p><font face="Helvetica, Arial, sans-serif">while true; do curl -s
'<a class="moz-txt-link-freetext" href="https://obsswitcher.com/">https://obsswitcher.com/</a>' && break || date; done<br>
</font></p>
<p><font face="Helvetica, Arial, sans-serif">Sometimes hostname
resolution succeeds at first time, sometimes it takes 200+ tries
until it succeeds once, and quits. The attached log is the one
where it happened 200+ times before succeeding.</font></p>
<p><font face="Helvetica, Arial, sans-serif">Any help is
appreciated.<br>
</font></p>
<pre class="moz-signature" cols="72">Cheers,
--
László Károlyi
<a class="moz-txt-link-freetext" href="http://linkedin.com/in/karolyi">http://linkedin.com/in/karolyi</a>
</pre>
</body>
</html>