MoinQ:

DNS/毒盛/CNAME/unboundについて、ここに記述してください。

Unbound は CNAME 返答についてくるAレコードは捨てるようだ。

dig -t a www.youtube.com @127.0.0.2

$ grep youtube-ui unbound.log 
[1443994329] unbound[1107:0] info: sanitize: removing extraneous answer RRset: youtube-ui.l.google.com. A IN
[1443994329] unbound[1107:0] info: sending query: youtube-ui.l.google.com. A IN
[1443994329] unbound[1107:0] info: iterator operate: chased to youtube-ui.l.google.com. A IN
[1443994329] unbound[1107:0] info: sending query: youtube-ui.l.google.com. A IN
[1443994330] unbound[1107:0] info: iterator operate: chased to youtube-ui.l.google.com. A IN
[1443994330] unbound[1107:0] info: sending query: youtube-ui.l.google.com. A IN
[1443994330] unbound[1107:0] info: iterator operate: chased to youtube-ui.l.google.com. A IN
[1443994745] unbound[1107:0] info: sending query: youtube-ui.l.google.com. MX IN
[1443994745] unbound[1107:0] info: iterator operate: chased to youtube-ui.l.google.com. MX IN


dns2.psn.jp. A を unbound に問い合せたら: 

$ dig -t a dns2.psn.jp @127.0.0.2

; <<>> DiG 9.9.5-3ubuntu0.4-Ubuntu <<>> -t a dns2.psn.jp @127.0.0.2
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 42310
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 2, ADDITIONAL: 2

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;dns2.psn.jp.                   IN      A

;; ANSWER SECTION:
dns2.psn.jp.            7200    IN      CNAME   ns2.psn.jp.
ns2.psn.jp.             7200    IN      A       59.106.185.138

;; AUTHORITY SECTION:
psn.jp.                 7200    IN      NS      ns.psn.jp.
psn.jp.                 7200    IN      NS      ns2.psn.jp.

;; ADDITIONAL SECTION:
ns.psn.jp.              7200    IN      A       49.212.13.62

;; Query time: 216 msec
;; SERVER: 127.0.0.2#53(127.0.0.2)
;; WHEN: Wed Aug 05 16:54:58 JST 2015
;; MSG SIZE  rcvd: 121

[1438761297] unbound[2766:0] info: validator operate: query dns2.psn.jp. A IN
[1438761297] unbound[2766:0] debug: iterator[module 1] operate: extstate:module_state_initial event:module_event_pass
[1438761297] unbound[2766:0] info: resolving dns2.psn.jp. A IN
[1438761297] unbound[2766:0] info: resolving (init part 2):  dns2.psn.jp. A IN
[1438761297] unbound[2766:0] info: resolving (init part 3):  dns2.psn.jp. A IN
[1438761297] unbound[2766:0] info: processQueryTargets: dns2.psn.jp. A IN
[1438761297] unbound[2766:0] info: sending query: dns2.psn.jp. A IN
[1438761297] unbound[2766:0] debug: sending to target: <jp.> 156.154.100.5#53
[1438761297] unbound[2766:0] debug: cache memory msg=55515 rrset=44850 infra=7101 val=33741
[1438761298] unbound[2766:0] debug: iterator[module 1] operate: extstate:module_wait_reply event:module_event_reply
[1438761298] unbound[2766:0] info: iterator operate: query dns2.psn.jp. A IN
[1438761298] unbound[2766:0] info: response for dns2.psn.jp. A IN
[1438761298] unbound[2766:0] info: reply from <jp.> 156.154.100.5#53
[1438761298] unbound[2766:0] info: query response was REFERRAL

[1438761298] unbound[2766:0] info: processQueryTargets: dns2.psn.jp. A IN
[1438761298] unbound[2766:0] info: sending query: dns2.psn.jp. A IN
[1438761298] unbound[2766:0] debug: sending to target: <psn.jp.> 59.106.185.138#53
[1438761298] unbound[2766:0] debug: iterator[module 1] operate: extstate:module_state_initial event:module_event_pass
[1438761298] unbound[2766:0] info: iterator operate: query psn.jp. NS IN
[1438761298] unbound[2766:0] info: resolving psn.jp. NS IN
[1438761298] unbound[2766:0] info: resolving (init part 2):  psn.jp. NS IN
[1438761298] unbound[2766:0] info: resolving (init part 3):  psn.jp. NS IN
[1438761298] unbound[2766:0] info: processQueryTargets: psn.jp. NS IN

[1438761298] unbound[2766:0] info: sending query: psn.jp. NS IN
[1438761298] unbound[2766:0] debug: sending to target: <jp.> 210.138.175.244#53
[1438761298] unbound[2766:0] debug: cache memory msg=55515 rrset=44850 infra=7337 val=33741
[1438761298] unbound[2766:0] debug: iterator[module 1] operate: extstate:module_wait_reply event:module_event_reply
[1438761298] unbound[2766:0] info: iterator operate: query dns2.psn.jp. A IN
[1438761298] unbound[2766:0] info: sanitize: removing extraneous answer RRset: ns2.psn.jp. A IN
[1438761298] unbound[2766:0] info: response for dns2.psn.jp. A IN
[1438761298] unbound[2766:0] info: reply from <psn.jp.> 59.106.185.138#53
[1438761298] unbound[2766:0] info: query response was CNAME
[1438761298] unbound[2766:0] info: resolving dns2.psn.jp. A IN
[1438761298] unbound[2766:0] info: resolving (init part 2):  dns2.psn.jp. A IN
[1438761298] unbound[2766:0] info: resolving (init part 3):  dns2.psn.jp. A IN
[1438761298] unbound[2766:0] info: processQueryTargets: dns2.psn.jp. A IN

[1438761298] unbound[2766:0] info: sending query: ns2.psn.jp. A IN
[1438761298] unbound[2766:0] debug: sending to target: <psn.jp.> 49.212.13.62#53
[1438761298] unbound[2766:0] debug: cache memory msg=55515 rrset=45313 infra=7573 val=33741
[1438761298] unbound[2766:0] debug: iterator[module 1] operate: extstate:module_wait_reply event:module_event_reply
[1438761298] unbound[2766:0] info: iterator operate: query psn.jp. NS IN
[1438761298] unbound[2766:0] info: response for psn.jp. NS IN
[1438761298] unbound[2766:0] info: reply from <jp.> 210.138.175.244#53
[1438761298] unbound[2766:0] info: query response was REFERRAL
[1438761298] unbound[2766:0] info: processQueryTargets: psn.jp. NS IN

[1438761298] unbound[2766:0] info: sending query: psn.jp. NS IN
[1438761298] unbound[2766:0] debug: sending to target: <psn.jp.> 49.212.13.62#53
[1438761298] unbound[2766:0] debug: iterator[module 1] operate: extstate:module_state_initial event:module_event_pass
[1438761298] unbound[2766:0] info: iterator operate: query ns.psn.jp. A IN
[1438761298] unbound[2766:0] info: resolving ns.psn.jp. A IN
[1438761298] unbound[2766:0] info: resolving (init part 2):  ns.psn.jp. A IN
[1438761298] unbound[2766:0] info: resolving (init part 3):  ns.psn.jp. A IN
[1438761298] unbound[2766:0] info: processQueryTargets: ns.psn.jp. A IN

[1438761298] unbound[2766:0] info: sending query: ns.psn.jp. A IN
[1438761298] unbound[2766:0] debug: sending to target: <psn.jp.> 49.212.13.62#53
[1438761298] unbound[2766:0] debug: iterator[module 1] operate: extstate:module_state_initial event:module_event_pass
[1438761298] unbound[2766:0] info: iterator operate: query ns2.psn.jp. A IN
[1438761298] unbound[2766:0] info: resolving ns2.psn.jp. A IN
[1438761298] unbound[2766:0] info: resolving (init part 2):  ns2.psn.jp. A IN
[1438761298] unbound[2766:0] info: resolving (init part 3):  ns2.psn.jp. A IN
[1438761298] unbound[2766:0] info: processQueryTargets: ns2.psn.jp. A IN

[1438761298] unbound[2766:0] info: sending query: ns2.psn.jp. A IN
[1438761298] unbound[2766:0] debug: sending to target: <psn.jp.> 49.212.13.62#53
[1438761298] unbound[2766:0] debug: cache memory msg=55515 rrset=45821 infra=7573 val=33834
[1438761298] unbound[2766:0] debug: iterator[module 1] operate: extstate:module_wait_reply event:module_event_reply
[1438761298] unbound[2766:0] info: iterator operate: query ns2.psn.jp. A IN
[1438761298] unbound[2766:0] info: response for ns2.psn.jp. A IN
[1438761298] unbound[2766:0] info: reply from <psn.jp.> 49.212.13.62#53
[1438761298] unbound[2766:0] info: query response was ANSWER
[1438761298] unbound[2766:0] info: finishing processing for ns2.psn.jp. A IN

[1438761298] unbound[2766:0] debug: validator[module 0] operate: extstate:module_state_initial event:module_event_moddone
[1438761298] unbound[2766:0] info: validator operate: query ns2.psn.jp. A IN
[1438761298] unbound[2766:0] debug: cache memory msg=55683 rrset=45821 infra=7573 val=33834
[1438761298] unbound[2766:0] debug: iterator[module 1] operate: extstate:module_wait_reply event:module_event_reply
[1438761298] unbound[2766:0] info: iterator operate: query dns2.psn.jp. A IN
[1438761298] unbound[2766:0] info: iterator operate: chased to ns2.psn.jp. A IN
[1438761298] unbound[2766:0] info: response for dns2.psn.jp. A IN
[1438761298] unbound[2766:0] info: reply from <psn.jp.> 49.212.13.62#53
[1438761298] unbound[2766:0] info: query response was ANSWER
[1438761298] unbound[2766:0] info: finishing processing for dns2.psn.jp. A IN

[1438761298] unbound[2766:0] debug: validator[module 0] operate: extstate:module_wait_module event:module_event_moddone
[1438761298] unbound[2766:0] info: validator operate: query dns2.psn.jp. A IN
[1438761298] unbound[2766:0] debug: cache memory msg=55868 rrset=45821 infra=7573 val=33834
[1438761298] unbound[2766:0] debug: iterator[module 1] operate: extstate:module_wait_reply event:module_event_reply
[1438761298] unbound[2766:0] info: iterator operate: query psn.jp. NS IN
[1438761298] unbound[2766:0] info: response for psn.jp. NS IN
[1438761298] unbound[2766:0] info: reply from <psn.jp.> 49.212.13.62#53
[1438761298] unbound[2766:0] info: query response was ANSWER
[1438761298] unbound[2766:0] info: finishing processing for psn.jp. NS IN

[1438761298] unbound[2766:0] debug: validator[module 0] operate: extstate:module_state_initial event:module_event_moddone
[1438761298] unbound[2766:0] info: validator operate: query psn.jp. NS IN
[1438761298] unbound[2766:0] debug: cache memory msg=56032 rrset=45821 infra=7573 val=33834
[1438761298] unbound[2766:0] debug: iterator[module 1] operate: extstate:module_wait_reply event:module_event_reply
[1438761298] unbound[2766:0] info: iterator operate: query ns.psn.jp. A IN
[1438761298] unbound[2766:0] info: response for ns.psn.jp. A IN
[1438761298] unbound[2766:0] info: reply from <psn.jp.> 49.212.13.62#53
[1438761298] unbound[2766:0] info: query response was ANSWER
[1438761298] unbound[2766:0] info: finishing processing for ns.psn.jp. A IN

[1438761298] unbound[2766:0] debug: validator[module 0] operate: extstate:module_state_initial event:module_event_moddone
[1438761298] unbound[2766:0] info: validator operate: query ns.psn.jp. A IN
[1438761298] unbound[2766:0] debug: cache memory msg=56199 rrset=45821 infra=7573 val=33834