Can't resolve raspbian.raspberrypi.org locally

Hi guys.
I have problems with updating the packages. Can someone please explain the following behaviour to me?
The DNS for my pihole is my router (192.168.2.1).
Even after a DNS flush / dnsmasq restart on the pi, it can't resolve raspbian.raspberrypi.org, but using another DNS server or my router directly, it works.

pi@raspberrypi:~ $ dig raspbian.raspberrypi.org

; <<>> DiG 9.10.3-P4-Raspbian <<>> raspbian.raspberrypi.org
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 9731
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;raspbian.raspberrypi.org. IN A

;; Query time: 1062 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Mon Jun 25 12:50:19 UTC 2018
;; MSG SIZE rcvd: 53

pi@raspberrypi:~ $ dig raspbian.raspberrypi.org 192.168.2.1

; <<>> DiG 9.10.3-P4-Raspbian <<>> raspbian.raspberrypi.org 192.168.2.1
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 54144
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;raspbian.raspberrypi.org. IN A

;; Query time: 1038 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Mon Jun 25 12:57:52 UTC 2018
;; MSG SIZE rcvd: 53

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 54005
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;192.168.2.1. IN A

;; ANSWER SECTION:
192.168.2.1. 2 IN A 192.168.2.1

;; Query time: 1 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Mon Jun 25 12:57:52 UTC 2018
;; MSG SIZE rcvd: 56

It is limited to just that one particular domain?

There is a posting with raspbian.raspberrypi.org and DNSSEC:

Yes. All others I tried are working.

I recently deactivated DNSSEC, still problems. (Or since?)

Ok two things:
I just saw that the answer from the router was also not working.

But besides that, now it is working without changing anything.
After hours of being offline, the result was the same as posted above.
Now I nslookup'ed some arbitrary domains and still got positive results.
As I tried raspbian.raspberrypi.org, it's working now!

Hm, could this be some bug related to the deactivation of DNSSEC today (before my initial posting)?

Or some Fritz!Box DNS flush/lease times?

Btw: I disabled DNSSEC today because I wasn't able to resolve another domain earlier this morning.

I was unable to resolve any of the RPi domains from my Linode VPS yesterday, but it seems to be working now.

1 Like

This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.