我不知道我在这里出了什么问题。它曾经在Ubuntu18.04上工作,但在20.04上却不起作用。我已经安装了unbound
DNS服务器:
unbound-control status
version: 1.9.4
verbosity: 1
threads: 1
modules: 3 [ subnet validator iterator ]
uptime: 314 seconds
options: reuseport control(ssl)
unbound (pid 1074177) is running...
在/etc/conv.conf中有:
#domain members.linode.com
#search members.linode.com
#nameserver 212.71.252.5
#nameserver 212.71.253.5
#nameserver 178.79.182.5
#nameserver 176.58.107.5
#nameserver 176.58.116.5
#nameserver 176.58.121.5
#nameserver 151.236.220.5
#nameserver 109.74.192.20
#nameserver 109.74.193.20
#nameserver 109.74.194.20
#options rotate
nameserver 127.0.0.1
options edns0
search members.linode.com
在/etc/垃圾邮件/local.cf中有:
dns_server 127.0.0.1
我重新启动了服务器,但似乎
0.0 RCVD_IN_DNSWL_BLOCKED RBL:管理员注意:对DNSWL的查询被阻止。有关详细信息,请参阅DnsBlocklists。209.85.218.53 list.dnswl.org
我是不是遗漏了什么?
关于服务器设置的更多细节:
systemd-resolve --status
Global
LLMNR setting: no
MulticastDNS setting: no
DNSOverTLS setting: no
DNSSEC setting: no
DNSSEC supported: no
Current DNS Server: 127.0.0.1
DNS Servers: 127.0.0.1
DNS Domain: members.linode.com
DNSSEC NTA: 10.in-addr.arpa
16.172.in-addr.arpa
168.192.in-addr.arpa
17.172.in-addr.arpa
18.172.in-addr.arpa
19.172.in-addr.arpa
20.172.in-addr.arpa
21.172.in-addr.arpa
22.172.in-addr.arpa
23.172.in-addr.arpa
24.172.in-addr.arpa
25.172.in-addr.arpa
26.172.in-addr.arpa
27.172.in-addr.arpa
28.172.in-addr.arpa
29.172.in-addr.arpa
30.172.in-addr.arpa
31.172.in-addr.arpa
corp
d.f.ip6.arpa
home
internal
intranet
lan
local
private
test
Link 2 (eth0)
Current Scopes: DNS
DefaultRoute setting: yes
LLMNR setting: yes
MulticastDNS setting: no
DNSOverTLS setting: no
DNSSEC setting: no
DNSSEC supported: no
Current DNS Server: 176.58.107.5
DNS Servers: 176.58.107.5
212.71.253.5
151.236.220.5
DNS Domain: members.linode.com
正如建议的那样,下面是sudo ss -lntp|grep 53
的输出:
LISTEN 0 256 127.0.0.1:53 0.0.0.0:* users:(("unbound",pid=783,fd=6))
LISTEN 0 4096 127.0.0.53%lo:53 0.0.0.0:* users:(("systemd-resolve",pid=524,fd=13))
LISTEN 0 256 127.0.0.1:8953 0.0.0.0:* users:(("unbound",pid=783,fd=7))
LISTEN 0 256 [::1]:53 [::]:* users:(("unbound",pid=783,fd=4))
发布于 2023-02-04 22:06:27
编辑:正如这里所述-> https://www.linode.com/community/questions/21413/rcvd_在……里面_泼尼斯韦尔_强假阳性,众所周知,linode用户存在这个问题。看起来您的DNS查询是通过linode的解析器转发的,这些解析器会被阻塞,因为有那么多的用户都会通过它们。基于systemd的输出--解析--状态:
DNS Servers: 176.58.107.5
212.71.253.5
151.236.220.5
我会再次检查未绑定是否确实在运行-> sudo ss -lntp|grep 53 --重复检查它的配置为递归服务器,并设置systemd解析,以便在它位于上游时查询它。系统d-解析--set-dns=SERVER或vim /etc/systemd/SERVER
https://serverfault.com/questions/1120989
复制相似问题