Skip to content

RPZ configured BIND-9.20.1 takes long time for readyness after starting up

Summary

In our current situation BIND-9.20.1 as an RPZ-resolver takes between 80-140s after startup, before it begins successful answering on recursive queries. This is a big difference comparing to BIND-9.18.24 (for example), which takes about 7-12s after startup to begin answering on recursive queries with the same configuration on the same server. When I disable the whole RPZ configuration (but yet loading the zone files, which would be used in the RPZ configuration), then named starts answering on recursive queries within 4-9s after startup (like BIND-9.18.24).

It's also obvious that named in 9.20.1 consumes much more and longer CPU during startup than 9.18.24 (see top -d1 -u named -H -n1 | grep named).

BIND version affected

$ named -V
BIND 9.20.1 (Stable Release) <id:478c83c>
running on Linux x86_64 4.18.0-305.3.1.el8_4.x86_64 #1 SMP Thu Jun 17 07:52:48 UTC 2021
built by make with  '--prefix=/usr/local/bind-9.20.1' '--sysconfdir=/opt/chroot/bind/etc/named/' '--mandir=/usr/local/share/man' '--localstatedir=/opt/chroot/bind/var' '--enable-largefile' '--enable-full-report' '--without-gssapi' '--disable-doh'
compiled by GCC 8.4.1 20200928 (Red Hat 8.4.1-1)
compiled with OpenSSL version: OpenSSL 1.1.1g FIPS  21 Apr 2020
linked to OpenSSL version: OpenSSL 1.1.1g FIPS  21 Apr 2020
compiled with libuv version: 1.40.0
linked to libuv version: 1.40.0
compiled with liburcu version: 0.10.1
compiled with jemalloc version: 5.2.1
compiled with libxml2 version: 2.9.7
linked to libxml2 version: 20907
compiled with zlib version: 1.2.11
linked to zlib version: 1.2.11
threads support is enabled
DNSSEC algorithms: RSASHA1 NSEC3RSASHA1 RSASHA256 RSASHA512 ECDSAP256SHA256 ECDSAP384SHA384 ED25519 ED448
DS algorithms: SHA-1 SHA-256 SHA-384
HMAC algorithms: HMAC-MD5 HMAC-SHA1 HMAC-SHA224 HMAC-SHA256 HMAC-SHA384 HMAC-SHA512
TKEY mode 2 support (Diffie-Hellman): no
TKEY mode 3 support (GSS-API): no

default paths:
  named configuration:  /opt/chroot/bind/etc/named/named.conf
  rndc configuration:   /opt/chroot/bind/etc/named/rndc.conf
  nsupdate session key: /opt/chroot/bind/var/run/named/session.key
  named PID file:       /opt/chroot/bind/var/run/named/named.pid

Steps to reproduce

  • Start named with some response policy zones (for ex. Spamhaus)
  • Recurse querying the starting resolver (optionally query the resolver for records with low TTL, which shows another result, see below)
  • Perhaps shut down hung fetch while resolving 0x7f109734f000(bind9test.rc8.ch/A) are related to the problem

What is the current bug behavior?

BIND-9.20.1 has longer startup behavior as BIND-9.18.24 (for example) with the same configuration on the same server.

What is the expected correct behavior?

Faster complete startup behavior OR faster response-readyness

Relevant configuration files

RPZ configuration 
response-policy {
	zone "special-rewrites-rpz.arcade.ch" log no max-policy-ttl 3600 policy given;
	zone "whitelist-rpz.arcade.ch" log no policy passthru;
	zone "blacklist-rpz.arcade.ch" policy nxdomain;
	zone "mozilla-doh-blacklist.zone" policy nxdomain;
	zone "zone.wl.rpz.switch.ch" log no policy passthru;
	zone "zone3.mw.rpz.switch.ch" policy nxdomain;
	zone "zone3.ph.rpz.switch.ch" policy nxdomain;
	zone "zone3.misc.rpz.switch.ch" policy nxdomain;
	zone "badrep.host.dtq" policy nxdomain;
	zone "phish.host.dtq" policy nxdomain;
	zone "malware.host.dtq" policy nxdomain;
	zone "malware.domains.dtq" policy nxdomain;
	zone "botnetcc.host.dtq" policy nxdomain;
	zone "botnet.host.dtq" policy nxdomain;
	zone "adware.host.dtq" policy nxdomain;
	zone "badrep.hacked.host.dtq" policy nxdomain;
	zone "phish.hacked.host.dtq" policy nxdomain;
	zone "malware.hacked.host.dtq" policy nxdomain;
	zone "botnetcc.hacked.host.dtq" policy nxdomain;
	zone "bad-nameservers.ip.dtq" policy nxdomain;
	zone "bad-nameservers.host.dtq" policy nxdomain;
	zone "botnetcc.ip.dtq" policy nxdomain;
	zone "dga.host.dtq" policy nxdomain;
	zone "drop.ip.dtq" policy nxdomain;
	zone "botnetcc.hacked.ip.dtq" policy nxdomain;
	zone "bogons.ip.dtq" policy nxdomain;
	zone "torblock.srv" log no policy passthru;
	zone "coinblocker.srv" policy nxdomain;
	zone "badrep.edit.host.dtq" policy nxdomain;
	zone "phish.edit.host.dtq" policy nxdomain;
	zone "malware.edit.host.dtq" policy nxdomain;
	zone "adware.edit.host.dtq" policy nxdomain;
	zone "botnetcc.edit.host.dtq" policy nxdomain;
	zone "botnet.edit.host.dtq" policy nxdomain;
	zone "melbl.rpz.govcert.ch" policy nxdomain;
	zone "melblip.rpz.govcert.ch" policy nxdomain;
	zone "melmisp.rpz.govcert.ch" policy nxdomain;
	zone "dynamicdns.rpz.govcert.ch" policy nxdomain;
	zone "phishdb.rpz.govcert.ch" policy nxdomain;
	zone "urlhaus.rpz.govcert.ch" policy nxdomain;
} add-soa no break-dnssec yes max-policy-ttl 0 nsip-wait-recurse no qname-wait-recurse no;

Relevant logs

BIND-9.20.1

BIND-9.20.1 started: 07:08:08

BIND-9.20.1 began successfully answering on recursive queries: 07:09:44 (after 1m36s)

BIND9.20.1-Startup 
$ /usr/local/bind-9.20.1/sbin/named -4 -t /opt/chroot/bind -u named -c /etc/named/named.conf -g 
27-Aug-2024 07:08:08.734 starting BIND 9.20.1 (Stable Release) <id:478c83c>
27-Aug-2024 07:08:08.734 running on Linux x86_64 4.18.0-305.3.1.el8_4.x86_64 #1 SMP Thu Jun 17 07:52:48 UTC 2021
27-Aug-2024 07:08:08.734 built with  '--prefix=/usr/local/bind-9.20.1' '--sysconfdir=/opt/chroot/bind/etc/named/' '--mandir=/usr/local/share/man' '--localstatedir=/opt/chroot/bind/var' '--enable-largefile' '--enable-full-report' '--without-gssapi' '--disable-doh'
27-Aug-2024 07:08:08.734 running as: named -4 -t /opt/chroot/bind -u named -c /etc/named/named.conf -g
27-Aug-2024 07:08:08.734 compiled by GCC 8.4.1 20200928 (Red Hat 8.4.1-1)
27-Aug-2024 07:08:08.734 compiled with OpenSSL version: OpenSSL 1.1.1g FIPS  21 Apr 2020
27-Aug-2024 07:08:08.734 linked to OpenSSL version: OpenSSL 1.1.1g FIPS  21 Apr 2020
27-Aug-2024 07:08:08.734 compiled with libuv version: 1.40.0
27-Aug-2024 07:08:08.734 linked to libuv version: 1.40.0
27-Aug-2024 07:08:08.734 compiled with liburcu version: 0.10.1
27-Aug-2024 07:08:08.734 compiled with jemalloc version: 5.2.1
27-Aug-2024 07:08:08.734 compiled with libxml2 version: 2.9.7
27-Aug-2024 07:08:08.734 linked to libxml2 version: 20907
27-Aug-2024 07:08:08.734 compiled with zlib version: 1.2.11
27-Aug-2024 07:08:08.734 linked to zlib version: 1.2.11
27-Aug-2024 07:08:08.734 ----------------------------------------------------
27-Aug-2024 07:08:08.734 BIND 9 is maintained by Internet Systems Consortium,
27-Aug-2024 07:08:08.734 Inc. (ISC), a non-profit 501(c)(3) public-benefit 
27-Aug-2024 07:08:08.734 corporation.  Support and training for BIND 9 are 
27-Aug-2024 07:08:08.734 available at https://www.isc.org/support
27-Aug-2024 07:08:08.734 ----------------------------------------------------
27-Aug-2024 07:08:08.734 adjusted limit on open files from 1024 to 262144
27-Aug-2024 07:08:08.734 found 4 CPUs, using 4 worker threads
27-Aug-2024 07:08:08.735 DNSSEC algorithms: RSASHA1 NSEC3RSASHA1 RSASHA256 RSASHA512 ECDSAP256SHA256 ECDSAP384SHA384 ED25519 ED448
27-Aug-2024 07:08:08.735 DS algorithms: SHA-1 SHA-256 SHA-384
27-Aug-2024 07:08:08.735 HMAC algorithms: HMAC-MD5 HMAC-SHA1 HMAC-SHA224 HMAC-SHA256 HMAC-SHA384 HMAC-SHA512
27-Aug-2024 07:08:08.735 TKEY mode 2 support (Diffie-Hellman): no
27-Aug-2024 07:08:08.735 TKEY mode 3 support (GSS-API): no
27-Aug-2024 07:08:08.736 config.c: option 'sig0checks-quota' is experimental and subject to change in the future
27-Aug-2024 07:08:08.736 config.c: option 'allow-proxy' is experimental and subject to change in the future
27-Aug-2024 07:08:08.736 config.c: option 'allow-proxy-on' is experimental and subject to change in the future
27-Aug-2024 07:08:08.736 loading configuration from '/etc/named/named.conf'
27-Aug-2024 07:08:08.737 using default UDP/IPv4 port range: [1024, 65535]
27-Aug-2024 07:08:08.738 listening on IPv4 interface lo, 127.0.0.1#53
27-Aug-2024 07:08:08.738 listening on IPv4 interface eth0, 10.100.102.23#53
27-Aug-2024 07:08:08.738 Disabling periodic interface re-scans timer
27-Aug-2024 07:08:08.738 generating session key for dynamic DNS
27-Aug-2024 07:08:08.739 using built-in root key for view _default
27-Aug-2024 07:08:08.739 set up managed keys zone for view _default, file 'managed-keys.bind'
27-Aug-2024 07:08:08.739 automatic empty zone: 10.IN-ADDR.ARPA
27-Aug-2024 07:08:08.739 automatic empty zone: 16.172.IN-ADDR.ARPA
27-Aug-2024 07:08:08.739 automatic empty zone: 17.172.IN-ADDR.ARPA
27-Aug-2024 07:08:08.739 automatic empty zone: 18.172.IN-ADDR.ARPA
27-Aug-2024 07:08:08.739 automatic empty zone: 19.172.IN-ADDR.ARPA
27-Aug-2024 07:08:08.739 automatic empty zone: 20.172.IN-ADDR.ARPA
27-Aug-2024 07:08:08.739 automatic empty zone: 21.172.IN-ADDR.ARPA
27-Aug-2024 07:08:08.739 automatic empty zone: 22.172.IN-ADDR.ARPA
27-Aug-2024 07:08:08.739 automatic empty zone: 23.172.IN-ADDR.ARPA
27-Aug-2024 07:08:08.740 automatic empty zone: 24.172.IN-ADDR.ARPA
27-Aug-2024 07:08:08.740 automatic empty zone: 25.172.IN-ADDR.ARPA
27-Aug-2024 07:08:08.740 automatic empty zone: 26.172.IN-ADDR.ARPA
27-Aug-2024 07:08:08.740 automatic empty zone: 27.172.IN-ADDR.ARPA
27-Aug-2024 07:08:08.740 automatic empty zone: 28.172.IN-ADDR.ARPA
27-Aug-2024 07:08:08.740 automatic empty zone: 29.172.IN-ADDR.ARPA
27-Aug-2024 07:08:08.740 automatic empty zone: 30.172.IN-ADDR.ARPA
27-Aug-2024 07:08:08.740 automatic empty zone: 31.172.IN-ADDR.ARPA
27-Aug-2024 07:08:08.740 automatic empty zone: 168.192.IN-ADDR.ARPA
27-Aug-2024 07:08:08.740 automatic empty zone: 64.100.IN-ADDR.ARPA
27-Aug-2024 07:08:08.740 automatic empty zone: 65.100.IN-ADDR.ARPA
27-Aug-2024 07:08:08.740 automatic empty zone: 66.100.IN-ADDR.ARPA
27-Aug-2024 07:08:08.740 automatic empty zone: 67.100.IN-ADDR.ARPA
27-Aug-2024 07:08:08.740 automatic empty zone: 68.100.IN-ADDR.ARPA
27-Aug-2024 07:08:08.740 automatic empty zone: 69.100.IN-ADDR.ARPA
27-Aug-2024 07:08:08.740 automatic empty zone: 70.100.IN-ADDR.ARPA
27-Aug-2024 07:08:08.740 automatic empty zone: 71.100.IN-ADDR.ARPA
27-Aug-2024 07:08:08.740 automatic empty zone: 72.100.IN-ADDR.ARPA
27-Aug-2024 07:08:08.740 automatic empty zone: 73.100.IN-ADDR.ARPA
27-Aug-2024 07:08:08.740 automatic empty zone: 74.100.IN-ADDR.ARPA
27-Aug-2024 07:08:08.740 automatic empty zone: 75.100.IN-ADDR.ARPA
27-Aug-2024 07:08:08.740 automatic empty zone: 76.100.IN-ADDR.ARPA
27-Aug-2024 07:08:08.740 automatic empty zone: 77.100.IN-ADDR.ARPA
27-Aug-2024 07:08:08.740 automatic empty zone: 78.100.IN-ADDR.ARPA
27-Aug-2024 07:08:08.740 automatic empty zone: 79.100.IN-ADDR.ARPA
27-Aug-2024 07:08:08.740 automatic empty zone: 80.100.IN-ADDR.ARPA
27-Aug-2024 07:08:08.740 automatic empty zone: 81.100.IN-ADDR.ARPA
27-Aug-2024 07:08:08.740 automatic empty zone: 82.100.IN-ADDR.ARPA
27-Aug-2024 07:08:08.740 automatic empty zone: 83.100.IN-ADDR.ARPA
27-Aug-2024 07:08:08.740 automatic empty zone: 84.100.IN-ADDR.ARPA
27-Aug-2024 07:08:08.740 automatic empty zone: 85.100.IN-ADDR.ARPA
27-Aug-2024 07:08:08.740 automatic empty zone: 86.100.IN-ADDR.ARPA
27-Aug-2024 07:08:08.740 automatic empty zone: 87.100.IN-ADDR.ARPA
27-Aug-2024 07:08:08.740 automatic empty zone: 88.100.IN-ADDR.ARPA
27-Aug-2024 07:08:08.740 automatic empty zone: 89.100.IN-ADDR.ARPA
27-Aug-2024 07:08:08.740 automatic empty zone: 90.100.IN-ADDR.ARPA
27-Aug-2024 07:08:08.740 automatic empty zone: 91.100.IN-ADDR.ARPA
27-Aug-2024 07:08:08.740 automatic empty zone: 92.100.IN-ADDR.ARPA
27-Aug-2024 07:08:08.740 automatic empty zone: 93.100.IN-ADDR.ARPA
27-Aug-2024 07:08:08.740 automatic empty zone: 94.100.IN-ADDR.ARPA
27-Aug-2024 07:08:08.740 automatic empty zone: 95.100.IN-ADDR.ARPA
27-Aug-2024 07:08:08.740 automatic empty zone: 96.100.IN-ADDR.ARPA
27-Aug-2024 07:08:08.740 automatic empty zone: 97.100.IN-ADDR.ARPA
27-Aug-2024 07:08:08.740 automatic empty zone: 98.100.IN-ADDR.ARPA
27-Aug-2024 07:08:08.740 automatic empty zone: 99.100.IN-ADDR.ARPA
27-Aug-2024 07:08:08.740 automatic empty zone: 100.100.IN-ADDR.ARPA
27-Aug-2024 07:08:08.740 automatic empty zone: 101.100.IN-ADDR.ARPA
27-Aug-2024 07:08:08.740 automatic empty zone: 102.100.IN-ADDR.ARPA
27-Aug-2024 07:08:08.740 automatic empty zone: 103.100.IN-ADDR.ARPA
27-Aug-2024 07:08:08.740 automatic empty zone: 104.100.IN-ADDR.ARPA
27-Aug-2024 07:08:08.740 automatic empty zone: 105.100.IN-ADDR.ARPA
27-Aug-2024 07:08:08.740 automatic empty zone: 106.100.IN-ADDR.ARPA
27-Aug-2024 07:08:08.740 automatic empty zone: 107.100.IN-ADDR.ARPA
27-Aug-2024 07:08:08.740 automatic empty zone: 108.100.IN-ADDR.ARPA
27-Aug-2024 07:08:08.740 automatic empty zone: 109.100.IN-ADDR.ARPA
27-Aug-2024 07:08:08.740 automatic empty zone: 110.100.IN-ADDR.ARPA
27-Aug-2024 07:08:08.740 automatic empty zone: 111.100.IN-ADDR.ARPA
27-Aug-2024 07:08:08.740 automatic empty zone: 112.100.IN-ADDR.ARPA
27-Aug-2024 07:08:08.740 automatic empty zone: 113.100.IN-ADDR.ARPA
27-Aug-2024 07:08:08.740 automatic empty zone: 114.100.IN-ADDR.ARPA
27-Aug-2024 07:08:08.740 automatic empty zone: 115.100.IN-ADDR.ARPA
27-Aug-2024 07:08:08.740 automatic empty zone: 116.100.IN-ADDR.ARPA
27-Aug-2024 07:08:08.740 automatic empty zone: 117.100.IN-ADDR.ARPA
27-Aug-2024 07:08:08.740 automatic empty zone: 118.100.IN-ADDR.ARPA
27-Aug-2024 07:08:08.740 automatic empty zone: 119.100.IN-ADDR.ARPA
27-Aug-2024 07:08:08.740 automatic empty zone: 120.100.IN-ADDR.ARPA
27-Aug-2024 07:08:08.740 automatic empty zone: 121.100.IN-ADDR.ARPA
27-Aug-2024 07:08:08.740 automatic empty zone: 122.100.IN-ADDR.ARPA
27-Aug-2024 07:08:08.740 automatic empty zone: 123.100.IN-ADDR.ARPA
27-Aug-2024 07:08:08.740 automatic empty zone: 124.100.IN-ADDR.ARPA
27-Aug-2024 07:08:08.740 automatic empty zone: 125.100.IN-ADDR.ARPA
27-Aug-2024 07:08:08.740 automatic empty zone: 126.100.IN-ADDR.ARPA
27-Aug-2024 07:08:08.740 automatic empty zone: 127.100.IN-ADDR.ARPA
27-Aug-2024 07:08:08.740 automatic empty zone: 0.IN-ADDR.ARPA
27-Aug-2024 07:08:08.750 automatic empty zone: 127.IN-ADDR.ARPA
27-Aug-2024 07:08:08.750 automatic empty zone: 254.169.IN-ADDR.ARPA
27-Aug-2024 07:08:08.750 automatic empty zone: 2.0.192.IN-ADDR.ARPA
27-Aug-2024 07:08:08.750 automatic empty zone: 100.51.198.IN-ADDR.ARPA
27-Aug-2024 07:08:08.750 automatic empty zone: 113.0.203.IN-ADDR.ARPA
27-Aug-2024 07:08:08.750 automatic empty zone: 255.255.255.255.IN-ADDR.ARPA
27-Aug-2024 07:08:08.750 automatic empty zone: 0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.ARPA
27-Aug-2024 07:08:08.750 automatic empty zone: D.F.IP6.ARPA
27-Aug-2024 07:08:08.750 automatic empty zone: 8.E.F.IP6.ARPA
27-Aug-2024 07:08:08.751 automatic empty zone: 9.E.F.IP6.ARPA
27-Aug-2024 07:08:08.751 automatic empty zone: A.E.F.IP6.ARPA
27-Aug-2024 07:08:08.751 automatic empty zone: B.E.F.IP6.ARPA
27-Aug-2024 07:08:08.751 automatic empty zone: 8.B.D.0.1.0.0.2.IP6.ARPA
27-Aug-2024 07:08:08.751 automatic empty zone: EMPTY.AS112.ARPA
27-Aug-2024 07:08:08.751 automatic empty zone: HOME.ARPA
27-Aug-2024 07:08:08.751 automatic empty zone: RESOLVER.ARPA
27-Aug-2024 07:08:08.751 not using config file logging statement for logging due to -g option
27-Aug-2024 07:08:08.751 statistics-channels: JSON library missing, only XML stats will be available
27-Aug-2024 07:08:08.751 statistics channel listening on 10.100.102.23#8888
27-Aug-2024 07:08:08.751 command channel listening on 127.0.0.1#953
27-Aug-2024 07:08:08.761 managed-keys-zone: loaded serial 1730
27-Aug-2024 07:08:08.762 zone 0.0.127.in-addr.arpa/IN: loaded serial 1
27-Aug-2024 07:08:08.762 zone melblip.rpz.govcert.ch/IN: loaded serial 244778
27-Aug-2024 07:08:08.762 zone 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa/IN: loaded serial 1
27-Aug-2024 07:08:08.763 zone blacklist-rpz.arcade.ch/IN: loaded serial 2024082001
27-Aug-2024 07:08:08.766 zone whitelist-rpz.arcade.ch/IN: loaded serial 2024061001
27-Aug-2024 07:08:08.766 zone melbl.rpz.govcert.ch/IN: loaded serial 246092
27-Aug-2024 07:08:08.766 zone melmisp.rpz.govcert.ch/IN: loaded serial 245873
27-Aug-2024 07:08:08.766 zone phishdb.rpz.govcert.ch/IN: loaded serial 248083
27-Aug-2024 07:08:08.766 zone urlhaus.rpz.govcert.ch/IN: loaded serial 328169
27-Aug-2024 07:08:08.769 zone zone3.misc.rpz.switch.ch/IN: loaded serial 1724431997
27-Aug-2024 07:08:08.770 zone botnetcc.host.dtq/IN: loaded serial 1724676961
27-Aug-2024 07:08:08.772 zone malware.hacked.host.dtq/IN: loaded serial 1724676841
27-Aug-2024 07:08:08.807 Verifying the zone using the following algorithms:
27-Aug-2024 07:08:08.807 - RSASHA256
27-Aug-2024 07:08:08.808 zone zone3.ph.rpz.switch.ch/IN: loaded serial 1724676409
27-Aug-2024 07:08:08.808 zone zone.wl.rpz.switch.ch/IN: loaded serial 1721974411
27-Aug-2024 07:08:08.809 zone adware.host.dtq/IN: loaded serial 1724677081
27-Aug-2024 07:08:08.809 zone botnet.host.dtq/IN: loaded serial 1724676721
27-Aug-2024 07:08:08.822 zone malware.host.dtq/IN: loaded serial 1724676841
27-Aug-2024 07:08:08.825 zone bad-nameservers.ip.dtq/IN: loaded serial 1724677081
27-Aug-2024 07:08:08.855 Zone fully signed:
27-Aug-2024 07:08:08.855 Algorithm: RSASHA256: KSKs: 1 active, 0 stand-by, 0 revoked
27-Aug-2024 07:08:08.855                       ZSKs: 1 active, 0 stand-by, 0 revoked
27-Aug-2024 07:08:08.855 zone ./IN: loaded serial 2024082602 (DNSSEC signed)
27-Aug-2024 07:08:08.856 zone ./IN: mirror zone is now in use
27-Aug-2024 07:08:08.856 zone special-rewrites-rpz.arcade.ch/IN: loaded serial 2024031901
27-Aug-2024 07:08:08.878 zone dynamicdns.rpz.govcert.ch/IN: loaded serial 241379
27-Aug-2024 07:08:08.883 zone bad-nameservers.host.dtq/IN: loaded serial 1724676961
27-Aug-2024 07:08:08.883 zone adware.edit.host.dtq/IN: loaded serial 1724677081
27-Aug-2024 07:08:08.885 zone botnetcc.edit.host.dtq/IN: loaded serial 1724676841
27-Aug-2024 07:08:08.906 zone malware.edit.host.dtq/IN: loaded serial 1724676721
27-Aug-2024 07:08:09.205 zone bogons.ip.dtq/IN: loaded serial 1724659981
27-Aug-2024 07:08:09.207 zone botnetcc.ip.dtq/IN: loaded serial 1724676961
27-Aug-2024 07:08:09.207 zone botnetcc.hacked.ip.dtq/IN: loaded serial 1724677081
27-Aug-2024 07:08:09.209 zone torblock.srv/IN: loaded serial 1724675821
27-Aug-2024 07:08:09.209 zone mozilla-doh-blacklist.zone/IN: loaded serial 1
27-Aug-2024 07:08:09.209 rpz: melbl.rpz.govcert.ch: reload start
27-Aug-2024 07:08:09.209 rpz: phishdb.rpz.govcert.ch: reload start
27-Aug-2024 07:08:09.209 rpz: botnetcc.host.dtq: reload start
27-Aug-2024 07:08:09.209 rpz: malware.hacked.host.dtq: reload start
27-Aug-2024 07:08:09.209 rpz: malware.host.dtq: reload start
27-Aug-2024 07:08:09.209 rpz: bad-nameservers.ip.dtq: reload start
27-Aug-2024 07:08:09.209 rpz: bogons.ip.dtq: reload start
27-Aug-2024 07:08:09.209 rpz: botnetcc.ip.dtq: reload start
27-Aug-2024 07:08:09.209 rpz: botnetcc.hacked.ip.dtq: reload start
27-Aug-2024 07:08:09.209 rpz: torblock.srv: reload start
27-Aug-2024 07:08:09.209 rpz: mozilla-doh-blacklist.zone: reload start
27-Aug-2024 07:08:09.209 zone whitelist-rpz.arcade.ch/IN: sending notifies (serial 2024061001)
27-Aug-2024 07:08:09.214 rpz: melbl.rpz.govcert.ch: reload done: success
27-Aug-2024 07:08:09.214 rpz: phishdb.rpz.govcert.ch: reload done: success
27-Aug-2024 07:08:09.214 rpz: botnetcc.host.dtq: reload done: success
27-Aug-2024 07:08:09.238 rpz: bad-nameservers.ip.dtq: reload done: success
27-Aug-2024 07:08:09.238 rpz: malware.hacked.host.dtq: reload done: success
27-Aug-2024 07:08:09.241 rpz: botnetcc.ip.dtq: reload done: success
27-Aug-2024 07:08:09.253 rpz: botnetcc.hacked.ip.dtq: reload done: success
27-Aug-2024 07:08:09.253 rpz: torblock.srv: reload done: success
27-Aug-2024 07:08:09.253 rpz: mozilla-doh-blacklist.zone: reload done: success
27-Aug-2024 07:08:09.358 rpz: malware.host.dtq: reload done: success
27-Aug-2024 07:08:09.617 rpz: bogons.ip.dtq: reload done: success
27-Aug-2024 07:08:09.937 zone phish.edit.host.dtq/IN: loaded serial 1724676841
27-Aug-2024 07:08:09.939 zone badrep.hacked.host.dtq/IN: loaded serial 1724676961
27-Aug-2024 07:08:09.939 zone botnetcc.hacked.host.dtq/IN: loaded serial 1724676961
27-Aug-2024 07:08:09.939 rpz: special-rewrites-rpz.arcade.ch: reload start
27-Aug-2024 07:08:09.939 rpz: dynamicdns.rpz.govcert.ch: reload start
27-Aug-2024 07:08:09.939 rpz: bad-nameservers.host.dtq: reload start
27-Aug-2024 07:08:09.939 rpz: adware.edit.host.dtq: reload start
27-Aug-2024 07:08:09.939 rpz: botnetcc.edit.host.dtq: reload start
27-Aug-2024 07:08:09.939 rpz: malware.edit.host.dtq: reload start
27-Aug-2024 07:08:09.939 rpz: phish.edit.host.dtq: reload start
27-Aug-2024 07:08:09.939 rpz: badrep.hacked.host.dtq: reload start
27-Aug-2024 07:08:09.939 rpz: botnetcc.hacked.host.dtq: reload start
27-Aug-2024 07:08:09.939 zone special-rewrites-rpz.arcade.ch/IN: sending notifies (serial 2024031901)
27-Aug-2024 07:08:09.940 rpz: special-rewrites-rpz.arcade.ch: reload done: success
27-Aug-2024 07:08:09.940 zone special-rewrites-rpz.arcade.ch/IN: sending notify to xx.xx.xx.xx#53
27-Aug-2024 07:08:09.940 zone special-rewrites-rpz.arcade.ch/IN: sending notify to xx.xx.xx.xx#53
27-Aug-2024 07:08:09.940 zone special-rewrites-rpz.arcade.ch/IN: sending notify to xx.xx.xx.xx#53
27-Aug-2024 07:08:09.941 zone whitelist-rpz.arcade.ch/IN: sending notify to xx.xx.xx.xx#53
27-Aug-2024 07:08:09.941 zone whitelist-rpz.arcade.ch/IN: sending notify to xx.xx.xx.xx#53
27-Aug-2024 07:08:09.941 zone whitelist-rpz.arcade.ch/IN: sending notify to xx.xx.xx.xx#53
27-Aug-2024 07:08:09.945 rpz: adware.edit.host.dtq: reload done: success
27-Aug-2024 07:08:09.960 rpz: botnetcc.edit.host.dtq: reload done: success
27-Aug-2024 07:08:09.983 rpz: bad-nameservers.host.dtq: reload done: success
27-Aug-2024 07:08:10.023 rpz: badrep.hacked.host.dtq: reload done: success
27-Aug-2024 07:08:10.023 rpz: botnetcc.hacked.host.dtq: reload done: success
27-Aug-2024 07:08:10.082 rpz: malware.edit.host.dtq: reload done: success
27-Aug-2024 07:08:10.109 rpz: dynamicdns.rpz.govcert.ch: reload done: success
27-Aug-2024 07:08:11.790 zone zone3.mw.rpz.switch.ch/IN: loaded serial 1724676414
27-Aug-2024 07:08:11.826 zone malware.domains.dtq/IN: loaded serial 1724676841
27-Aug-2024 07:08:11.948 zone dga.host.dtq/IN: loaded serial 1724674021
27-Aug-2024 07:08:12.305 rpz: phish.edit.host.dtq: reload done: success
27-Aug-2024 07:08:15.088 zone badrep.edit.host.dtq/IN: loaded serial 1724676721
27-Aug-2024 07:08:15.088 zone botnet.edit.host.dtq/IN: loaded serial 1724676961
27-Aug-2024 07:08:15.088 zone localhost/IN: loaded serial 2002022401
27-Aug-2024 07:08:15.088 rpz: blacklist-rpz.arcade.ch: reload start
27-Aug-2024 07:08:15.088 rpz: zone3.ph.rpz.switch.ch: reload start
27-Aug-2024 07:08:15.089 rpz: zone.wl.rpz.switch.ch: reload start
27-Aug-2024 07:08:15.089 rpz: adware.host.dtq: reload start
27-Aug-2024 07:08:15.089 rpz: botnet.host.dtq: reload start
27-Aug-2024 07:08:15.089 rpz: dga.host.dtq: reload start
27-Aug-2024 07:08:15.089 rpz: badrep.edit.host.dtq: reload start
27-Aug-2024 07:08:15.089 rpz: botnet.edit.host.dtq: reload start
27-Aug-2024 07:08:15.089 zone blacklist-rpz.arcade.ch/IN: sending notifies (serial 2024082001)
27-Aug-2024 07:08:15.089 rpz: zone.wl.rpz.switch.ch: reload done: success
27-Aug-2024 07:08:15.089 rpz: botnet.host.dtq: reload done: success
27-Aug-2024 07:08:15.097 zone blacklist-rpz.arcade.ch/IN: sending notify to xx.xx.xx.xx#53
27-Aug-2024 07:08:15.097 zone blacklist-rpz.arcade.ch/IN: sending notify to xx.xx.xx.xx#53
27-Aug-2024 07:08:15.097 zone blacklist-rpz.arcade.ch/IN: sending notify to xx.xx.xx.xx#53
27-Aug-2024 07:08:15.113 rpz: adware.host.dtq: reload done: success
27-Aug-2024 07:08:15.113 rpz: blacklist-rpz.arcade.ch: reload done: success
27-Aug-2024 07:08:15.113 rpz: botnet.edit.host.dtq: reload done: success
27-Aug-2024 07:08:15.317 rpz: zone3.ph.rpz.switch.ch: reload done: success
27-Aug-2024 07:08:16.568 zone badrep.host.dtq/IN: loaded serial 1724676961
27-Aug-2024 07:08:16.575 zone phish.hacked.host.dtq/IN: loaded serial 1724677081
27-Aug-2024 07:08:18.271 zone phish.host.dtq/IN: loaded serial 1724676841
27-Aug-2024 07:08:18.273 zone drop.ip.dtq/IN: loaded serial 1724675641
27-Aug-2024 07:08:18.508 zone coinblocker.srv/IN: loaded serial 1724594581
27-Aug-2024 07:08:18.508 all zones loaded
27-Aug-2024 07:08:18.528 FIPS mode is disabled
27-Aug-2024 07:08:18.528 running
27-Aug-2024 07:08:18.528 rpz: melblip.rpz.govcert.ch: reload start
27-Aug-2024 07:08:18.528 rpz: melmisp.rpz.govcert.ch: reload start
27-Aug-2024 07:08:18.528 rpz: urlhaus.rpz.govcert.ch: reload start
27-Aug-2024 07:08:18.528 rpz: zone3.misc.rpz.switch.ch: reload start
27-Aug-2024 07:08:18.528 rpz: zone3.mw.rpz.switch.ch: reload start
27-Aug-2024 07:08:18.528 rpz: malware.domains.dtq: reload start
27-Aug-2024 07:08:18.528 rpz: badrep.host.dtq: reload start
27-Aug-2024 07:08:18.528 rpz: phish.hacked.host.dtq: reload start
27-Aug-2024 07:08:18.528 rpz: phish.host.dtq: reload start
27-Aug-2024 07:08:18.535 rpz: drop.ip.dtq: reload start
27-Aug-2024 07:08:18.535 rpz: coinblocker.srv: reload start
27-Aug-2024 07:08:18.536 managed-keys-zone: Key 20326 for zone . is now trusted (acceptance timer complete)
27-Aug-2024 07:08:18.583 rpz: melblip.rpz.govcert.ch: reload done: success
27-Aug-2024 07:08:18.589 rpz: melmisp.rpz.govcert.ch: reload done: success
27-Aug-2024 07:08:18.589 rpz: urlhaus.rpz.govcert.ch: reload done: success
27-Aug-2024 07:08:20.792 rpz: zone3.misc.rpz.switch.ch: reload done: success
27-Aug-2024 07:08:21.331 rpz: malware.domains.dtq: reload done: success
27-Aug-2024 07:08:24.942 zone special-rewrites-rpz.arcade.ch/IN: notify to xx.xx.xx.xx#53 failed: timed out: retrying over TCP
27-Aug-2024 07:08:24.942 zone whitelist-rpz.arcade.ch/IN: notify to xx.xx.xx.xx#53 failed: timed out: retrying over TCP
27-Aug-2024 07:08:24.942 zone whitelist-rpz.arcade.ch/IN: notify to xx.xx.xx.xx#53 failed: timed out: retrying over TCP
27-Aug-2024 07:08:24.942 zone whitelist-rpz.arcade.ch/IN: notify to xx.xx.xx.xx#53 failed: timed out: retrying over TCP
27-Aug-2024 07:08:24.942 zone special-rewrites-rpz.arcade.ch/IN: notify to xx.xx.xx.xx#53 failed: timed out: retrying over TCP
27-Aug-2024 07:08:24.942 zone special-rewrites-rpz.arcade.ch/IN: notify to xx.xx.xx.xx#53 failed: timed out: retrying over TCP
27-Aug-2024 07:08:24.942 zone special-rewrites-rpz.arcade.ch/IN: sending notify to xx.xx.xx.xx#53
27-Aug-2024 07:08:24.942 zone whitelist-rpz.arcade.ch/IN: sending notify to xx.xx.xx.xx#53
27-Aug-2024 07:08:24.942 zone special-rewrites-rpz.arcade.ch/IN: sending notify to xx.xx.xx.xx#53
27-Aug-2024 07:08:24.942 zone whitelist-rpz.arcade.ch/IN: sending notify to xx.xx.xx.xx#53
27-Aug-2024 07:08:24.942 zone special-rewrites-rpz.arcade.ch/IN: sending notify to xx.xx.xx.xx#53
27-Aug-2024 07:08:24.942 zone whitelist-rpz.arcade.ch/IN: sending notify to xx.xx.xx.xx#53
27-Aug-2024 07:08:30.100 zone blacklist-rpz.arcade.ch/IN: notify to xx.xx.xx.xx#53 failed: timed out: retrying over TCP
27-Aug-2024 07:08:30.100 zone blacklist-rpz.arcade.ch/IN: notify to xx.xx.xx.xx#53 failed: timed out: retrying over TCP
27-Aug-2024 07:08:30.100 zone blacklist-rpz.arcade.ch/IN: notify to xx.xx.xx.xx#53 failed: timed out: retrying over TCP
27-Aug-2024 07:08:30.100 zone blacklist-rpz.arcade.ch/IN: sending notify to xx.xx.xx.xx#53
27-Aug-2024 07:08:30.100 zone blacklist-rpz.arcade.ch/IN: sending notify to xx.xx.xx.xx#53
27-Aug-2024 07:08:30.100 zone blacklist-rpz.arcade.ch/IN: sending notify to xx.xx.xx.xx#53
27-Aug-2024 07:08:32.117 shut down hung fetch while resolving 0x7f109734f000(bind9test.rc8.ch/A)
27-Aug-2024 07:08:39.953 zone special-rewrites-rpz.arcade.ch/IN: notify to xx.xx.xx.xx#53 failed: timed out: retries exceeded
27-Aug-2024 07:08:39.953 zone special-rewrites-rpz.arcade.ch/IN: notify to xx.xx.xx.xx#53 failed: timed out: retries exceeded
27-Aug-2024 07:08:39.953 zone special-rewrites-rpz.arcade.ch/IN: notify to xx.xx.xx.xx#53 failed: timed out: retries exceeded
27-Aug-2024 07:08:39.953 zone whitelist-rpz.arcade.ch/IN: notify to xx.xx.xx.xx#53 failed: timed out: retries exceeded
27-Aug-2024 07:08:39.953 zone whitelist-rpz.arcade.ch/IN: notify to xx.xx.xx.xx#53 failed: timed out: retries exceeded
27-Aug-2024 07:08:39.953 zone whitelist-rpz.arcade.ch/IN: notify to xx.xx.xx.xx#53 failed: timed out: retries exceeded
27-Aug-2024 07:08:45.110 zone blacklist-rpz.arcade.ch/IN: notify to xx.xx.xx.xx#53 failed: timed out: retries exceeded
27-Aug-2024 07:08:45.110 zone blacklist-rpz.arcade.ch/IN: notify to xx.xx.xx.xx#53 failed: timed out: retries exceeded
27-Aug-2024 07:08:45.110 zone blacklist-rpz.arcade.ch/IN: notify to xx.xx.xx.xx#53 failed: timed out: retries exceeded
27-Aug-2024 07:08:46.421 shut down hung fetch while resolving 0x7f109734f000(bind9test.rc8.ch/A)
27-Aug-2024 07:09:00.203 shut down hung fetch while resolving 0x7f1097350400(bind9test.rc8.ch/A)
27-Aug-2024 07:09:14.507 shut down hung fetch while resolving 0x7f102ba2a000(bind9test.rc8.ch/A)
27-Aug-2024 07:09:21.704 rpz: zone3.mw.rpz.switch.ch: reload done: success
27-Aug-2024 07:09:21.769 rpz: phish.hacked.host.dtq: reload done: success
27-Aug-2024 07:09:28.293 shut down hung fetch while resolving 0x7f1097351800(bind9test.rc8.ch/A)
^[[A27-Aug-2024 07:09:38.800 rpz: phish.host.dtq: reload done: success
27-Aug-2024 07:09:39.463 rpz IP address "48" is not the canonical "48.zz.6c4.678.2001"
27-Aug-2024 07:09:39.463 rpz IP address "48" is not the canonical "48.zz.724.678.2001"
27-Aug-2024 07:09:39.464 rpz IP address "48" is not the canonical "48.zz.738.678.2001"
27-Aug-2024 07:09:39.464 rpz IP address "48" is not the canonical "48.zz.73c.678.2001"
27-Aug-2024 07:09:39.464 rpz IP address "48" is not the canonical "48.zz.754.678.2001"
27-Aug-2024 07:09:39.464 rpz IP address "48" is not the canonical "48.zz.758.678.2001"
27-Aug-2024 07:09:39.464 rpz IP address "48" is not the canonical "48.zz.770.678.2001"
27-Aug-2024 07:09:39.464 rpz IP address "48" is not the canonical "48.zz.780.678.2001"
27-Aug-2024 07:09:39.464 rpz IP address "48" is not the canonical "48.zz.788.678.2001"
27-Aug-2024 07:09:39.464 rpz IP address "48" is not the canonical "48.zz.c5c.678.2001"
27-Aug-2024 07:09:39.464 rpz IP address "48" is not the canonical "48.zz.e38.678.2001"
27-Aug-2024 07:09:39.464 rpz IP address "48" is not the canonical "48.zz.e4c.678.2001"
27-Aug-2024 07:09:39.723 rpz IP address "48" is not the canonical "48.zz.1760.2401"
27-Aug-2024 07:09:39.723 rpz IP address "32" is not the canonical "32.zz.c580.2401"
27-Aug-2024 07:09:39.723 rpz IP address "32" is not the canonical "32.zz.6680.2402"
27-Aug-2024 07:09:39.723 rpz IP address "48" is not the canonical "48.zz.1.9fc0.2405"
27-Aug-2024 07:09:39.726 rpz IP address "32" is not the canonical "32.zz.b180.2405"
27-Aug-2024 07:09:39.726 rpz IP address "32" is not the canonical "32.zz.b480.2405"
27-Aug-2024 07:09:39.726 rpz IP address "32" is not the canonical "32.zz.e880.2405"
27-Aug-2024 07:09:39.726 rpz IP address "48" is not the canonical "48.zz.1.f915.2602"
27-Aug-2024 07:09:39.726 rpz IP address "40" is not the canonical "40.zz.f91d.2602"
27-Aug-2024 07:09:39.726 rpz IP address "36" is not the canonical "36.zz.ffa0.2602"
27-Aug-2024 07:09:39.726 rpz IP address "32" is not the canonical "32.zz.d100.2607"
27-Aug-2024 07:09:39.726 rpz IP address "32" is not the canonical "32.zz.f2d0.2607"
27-Aug-2024 07:09:39.735 rpz IP address "48" is not the canonical "48.zz.c00.80.2801"
27-Aug-2024 07:09:39.735 rpz IP address "48" is not the canonical "48.zz.ffff.5380.2803"
27-Aug-2024 07:09:39.735 rpz IP address "32" is not the canonical "32.zz.8700.2803"
27-Aug-2024 07:09:39.735 rpz IP address "29" is not the canonical "29.zz.4c80.2a00"
27-Aug-2024 07:09:39.735 rpz IP address "32" is not the canonical "32.zz.55a0.2a00"
27-Aug-2024 07:09:39.735 rpz IP address "39" is not the canonical "39.zz.a000.b0c6.2a05"
27-Aug-2024 07:09:39.735 rpz IP address "39" is not the canonical "39.zz.a200.b0c6.2a05"
27-Aug-2024 07:09:39.735 rpz IP address "36" is not the canonical "36.zz.6000.b0c7.2a05"
27-Aug-2024 07:09:39.735 rpz IP address "29" is not the canonical "29.zz.b440.2a06"
27-Aug-2024 07:09:39.735 rpz IP address "29" is not the canonical "29.zz.d240.2a06"
27-Aug-2024 07:09:39.735 rpz IP address "29" is not the canonical "29.zz.e480.2a06"
27-Aug-2024 07:09:39.735 rpz IP address "36" is not the canonical "36.zz.3000.e80.2a06"
27-Aug-2024 07:09:39.735 rpz IP address "29" is not the canonical "29.zz.4180.2a07"
27-Aug-2024 07:09:39.735 rpz IP address "29" is not the canonical "29.zz.5780.2a07"
27-Aug-2024 07:09:39.735 rpz IP address "29" is not the canonical "29.zz.5c0.2a07"
27-Aug-2024 07:09:39.735 rpz IP address "29" is not the canonical "29.zz.6800.2a07"
27-Aug-2024 07:09:39.735 rpz IP address "29" is not the canonical "29.zz.7700.2a07"
27-Aug-2024 07:09:39.735 rpz IP address "29" is not the canonical "29.zz.9b80.2a07"
27-Aug-2024 07:09:39.735 rpz IP address "29" is not the canonical "29.zz.b300.2a07"
27-Aug-2024 07:09:39.735 rpz IP address "29" is not the canonical "29.zz.ac80.2a09"
27-Aug-2024 07:09:39.735 rpz IP address "29" is not the canonical "29.zz.36c0.2a0a"
27-Aug-2024 07:09:39.735 rpz IP address "48" is not the canonical "48.zz.938.53c0.2a0a"
27-Aug-2024 07:09:39.735 rpz IP address "29" is not the canonical "29.zz.6240.2a0a"
27-Aug-2024 07:09:39.735 rpz IP address "29" is not the canonical "29.zz.6340.2a0a"
27-Aug-2024 07:09:39.735 rpz IP address "29" is not the canonical "29.zz.a840.2a0a"
27-Aug-2024 07:09:39.735 rpz IP address "29" is not the canonical "29.zz.c00.2a0a"
27-Aug-2024 07:09:39.735 rpz IP address "29" is not the canonical "29.zz.ed80.2a0a"
27-Aug-2024 07:09:39.735 rpz IP address "29" is not the canonical "29.zz.3e80.2a0b"
27-Aug-2024 07:09:39.735 rpz IP address "29" is not the canonical "29.zz.4ec0.2a0b"
27-Aug-2024 07:09:39.736 rpz IP address "29" is not the canonical "29.zz.ae80.2a0b"
27-Aug-2024 07:09:39.736 rpz IP address "29" is not the canonical "29.zz.f500.2a0b"
27-Aug-2024 07:09:39.736 rpz IP address "29" is not the canonical "29.zz.fdc0.2a0b"
27-Aug-2024 07:09:39.736 rpz IP address "32" is not the canonical "32.zz.6c2.2a0d"
27-Aug-2024 07:09:39.736 rpz IP address "29" is not the canonical "29.zz.c700.2a0d"
27-Aug-2024 07:09:39.736 rpz IP address "48" is not the canonical "48.zz.ffff.e7c7.2a0d"
27-Aug-2024 07:09:39.736 rpz IP address "48" is not the canonical "48.zz.1572.b107.2a0e"
27-Aug-2024 07:09:39.736 rpz IP address "48" is not the canonical "48.zz.1574.b107.2a0e"
27-Aug-2024 07:09:39.736 rpz IP address "44" is not the canonical "44.zz.1a10.b107.2a0e"
27-Aug-2024 07:09:39.736 rpz IP address "48" is not the canonical "48.zz.7220.d601.2a0e"
27-Aug-2024 07:09:39.736 rpz IP address "48" is not the canonical "48.zz.1.d604.2a0e"
27-Aug-2024 07:09:39.736 rpz IP address "29" is not the canonical "29.zz.fa00.2a0e"
27-Aug-2024 07:09:39.736 rpz IP address "48" is not the canonical "48.zz.215.2f01.2a10"
27-Aug-2024 07:09:39.736 rpz IP address "29" is not the canonical "29.zz.9700.2a10"
27-Aug-2024 07:09:39.736 rpz IP address "44" is not the canonical "44.zz.100.cc45.2a10"
27-Aug-2024 07:09:39.736 rpz IP address "29" is not the canonical "29.zz.2640.2a12"
27-Aug-2024 07:09:39.736 rpz IP address "30" is not the canonical "30.zz.6740.2a12"
27-Aug-2024 07:09:39.736 rpz IP address "40" is not the canonical "40.zz.8500.dd47.2a12"
27-Aug-2024 07:09:39.736 rpz IP address "38" is not the canonical "38.zz.a800.df80.2a13"
27-Aug-2024 07:09:39.736 rpz IP address "32" is not the canonical "32.zz.df84.2a13"
27-Aug-2024 07:09:39.736 rpz IP address "39" is not the canonical "39.zz.b600.df87.2a13"
27-Aug-2024 07:09:39.736 rpz IP address "32" is not the canonical "32.zz.ef45.2a13"
27-Aug-2024 07:09:39.736 rpz IP address "40" is not the canonical "40.zz.1e00.7c0.2a14"
27-Aug-2024 07:09:39.736 rpz IP address "32" is not the canonical "32.zz.7c2.2a14"
27-Aug-2024 07:09:39.736 rpz IP address "32" is not the canonical "32.zz.7c3.2a14"
27-Aug-2024 07:09:40.071 rpz: drop.ip.dtq: reload done: success
27-Aug-2024 07:09:42.071 shut down hung fetch while resolving 0x7f109734f000(bind9test.rc8.ch/A)
27-Aug-2024 07:09:42.804 rpz: coinblocker.srv: reload done: success
27-Aug-2024 07:09:56.423 rpz: badrep.edit.host.dtq: reload done: success
27-Aug-2024 07:10:15.560 rpz: badrep.host.dtq: reload done: success
27-Aug-2024 07:10:19.134 rpz: dga.host.dtq: reload done: success

The notify- or exceeded-messages above are expected, because this (test)-system is an 1:1 clone from a productive system, but it's not in the same network zone as the productive one.

If named has the option of resolving a request with a normal TTL value (ex. 600s) during startup, this request will be answered successfully. If the TTL value is low (for example 5s), then this request is not answered successfully. For this, see the output below during the startup above:

The following output is from a script, which queries the starting resolver for "bind9test.rc8.ch" (TTL 5s) and outputs the results.

Script querying for bind9test.rc8.ch 
#!/bin/bash
while true; do
	/usr/bin/echo -en "$(date): "
	OUT=$(dig @10.100.102.23 +retry=1 +tries=1 +timeout=1 +noall +comments +answer bind9test.rc8.ch)
	if /usr/bin/grep "127.0.0.1" <<<"$OUT" >/dev/null; then
		echo -e "$OUT" | /usr/bin/grep "127.0.0.1"
	elif grep "SERVFAIL" <<<"$OUT" >/dev/null; then
		echo -e "SERVFAIL"
	else
		echo -e "timed out"
	fi
	sleep 0.5
done
Tue Aug 27 07:08:06 CEST 2024: timed out
Tue Aug 27 07:08:07 CEST 2024: timed out
Tue Aug 27 07:08:09 CEST 2024: bind9test.rc8.ch.	5	IN	A	127.0.0.1
Tue Aug 27 07:08:10 CEST 2024: bind9test.rc8.ch.	5	IN	A	127.0.0.1
Tue Aug 27 07:08:11 CEST 2024: timed out
Tue Aug 27 07:08:12 CEST 2024: bind9test.rc8.ch.	3	IN	A	127.0.0.1
Tue Aug 27 07:08:13 CEST 2024: timed out
Tue Aug 27 07:08:14 CEST 2024: bind9test.rc8.ch.	1	IN	A	127.0.0.1
Tue Aug 27 07:08:15 CEST 2024: bind9test.rc8.ch.	5	IN	A	127.0.0.1
Tue Aug 27 07:08:15 CEST 2024: bind9test.rc8.ch.	5	IN	A	127.0.0.1
Tue Aug 27 07:08:16 CEST 2024: bind9test.rc8.ch.	4	IN	A	127.0.0.1
Tue Aug 27 07:08:16 CEST 2024: timed out
Tue Aug 27 07:08:18 CEST 2024: bind9test.rc8.ch.	2	IN	A	127.0.0.1
Tue Aug 27 07:08:19 CEST 2024: bind9test.rc8.ch.	1	IN	A	127.0.0.1
Tue Aug 27 07:08:19 CEST 2024: bind9test.rc8.ch.	1	IN	A	127.0.0.1
Tue Aug 27 07:08:20 CEST 2024: timed out
Tue Aug 27 07:08:21 CEST 2024: timed out
Tue Aug 27 07:08:23 CEST 2024: timed out
Tue Aug 27 07:08:24 CEST 2024: timed out
Tue Aug 27 07:08:26 CEST 2024: timed out
Tue Aug 27 07:08:27 CEST 2024: timed out
Tue Aug 27 07:08:29 CEST 2024: timed out
Tue Aug 27 07:08:30 CEST 2024: timed out
Tue Aug 27 07:08:32 CEST 2024: SERVFAIL
Tue Aug 27 07:08:32 CEST 2024: SERVFAIL
Tue Aug 27 07:08:33 CEST 2024: SERVFAIL
Tue Aug 27 07:08:33 CEST 2024: SERVFAIL
Tue Aug 27 07:08:34 CEST 2024: timed out
Tue Aug 27 07:08:35 CEST 2024: timed out
Tue Aug 27 07:08:37 CEST 2024: timed out
Tue Aug 27 07:08:38 CEST 2024: timed out
Tue Aug 27 07:08:40 CEST 2024: timed out
Tue Aug 27 07:08:42 CEST 2024: timed out
Tue Aug 27 07:08:43 CEST 2024: timed out
Tue Aug 27 07:08:45 CEST 2024: timed out
Tue Aug 27 07:08:46 CEST 2024: SERVFAIL
Tue Aug 27 07:08:47 CEST 2024: SERVFAIL
Tue Aug 27 07:08:47 CEST 2024: SERVFAIL
Tue Aug 27 07:08:48 CEST 2024: timed out
Tue Aug 27 07:08:49 CEST 2024: timed out
Tue Aug 27 07:08:51 CEST 2024: timed out
Tue Aug 27 07:08:52 CEST 2024: timed out
Tue Aug 27 07:08:54 CEST 2024: timed out
Tue Aug 27 07:08:55 CEST 2024: timed out
Tue Aug 27 07:08:57 CEST 2024: timed out
Tue Aug 27 07:08:58 CEST 2024: timed out
Tue Aug 27 07:09:00 CEST 2024: SERVFAIL
Tue Aug 27 07:09:00 CEST 2024: SERVFAIL
Tue Aug 27 07:09:01 CEST 2024: SERVFAIL
Tue Aug 27 07:09:01 CEST 2024: SERVFAIL
Tue Aug 27 07:09:02 CEST 2024: timed out
Tue Aug 27 07:09:04 CEST 2024: timed out
Tue Aug 27 07:09:05 CEST 2024: timed out
Tue Aug 27 07:09:07 CEST 2024: timed out
Tue Aug 27 07:09:08 CEST 2024: timed out
Tue Aug 27 07:09:10 CEST 2024: timed out
Tue Aug 27 07:09:11 CEST 2024: timed out
Tue Aug 27 07:09:13 CEST 2024: timed out
Tue Aug 27 07:09:14 CEST 2024: SERVFAIL
Tue Aug 27 07:09:15 CEST 2024: SERVFAIL
Tue Aug 27 07:09:15 CEST 2024: SERVFAIL
Tue Aug 27 07:09:16 CEST 2024: timed out
Tue Aug 27 07:09:17 CEST 2024: timed out
Tue Aug 27 07:09:19 CEST 2024: timed out
Tue Aug 27 07:09:20 CEST 2024: timed out
Tue Aug 27 07:09:22 CEST 2024: timed out
Tue Aug 27 07:09:23 CEST 2024: timed out
Tue Aug 27 07:09:25 CEST 2024: timed out
Tue Aug 27 07:09:26 CEST 2024: timed out
Tue Aug 27 07:09:28 CEST 2024: SERVFAIL
Tue Aug 27 07:09:29 CEST 2024: SERVFAIL
Tue Aug 27 07:09:29 CEST 2024: SERVFAIL
Tue Aug 27 07:09:30 CEST 2024: timed out
Tue Aug 27 07:09:31 CEST 2024: timed out
Tue Aug 27 07:09:33 CEST 2024: timed out
Tue Aug 27 07:09:34 CEST 2024: timed out
Tue Aug 27 07:09:36 CEST 2024: timed out
Tue Aug 27 07:09:37 CEST 2024: timed out
Tue Aug 27 07:09:39 CEST 2024: timed out
Tue Aug 27 07:09:40 CEST 2024: timed out
Tue Aug 27 07:09:42 CEST 2024: SERVFAIL
Tue Aug 27 07:09:42 CEST 2024: SERVFAIL
Tue Aug 27 07:09:43 CEST 2024: SERVFAIL
Tue Aug 27 07:09:43 CEST 2024: SERVFAIL
Tue Aug 27 07:09:44 CEST 2024: bind9test.rc8.ch.	5	IN	A	127.0.0.1
Tue Aug 27 07:09:44 CEST 2024: bind9test.rc8.ch.	5	IN	A	127.0.0.1
Tue Aug 27 07:09:45 CEST 2024: bind9test.rc8.ch.	4	IN	A	127.0.0.1
Tue Aug 27 07:09:45 CEST 2024: bind9test.rc8.ch.	4	IN	A	127.0.0.1
Tue Aug 27 07:09:46 CEST 2024: bind9test.rc8.ch.	3	IN	A	127.0.0.1
Tue Aug 27 07:09:47 CEST 2024: bind9test.rc8.ch.	2	IN	A	127.0.0.1
Tue Aug 27 07:09:47 CEST 2024: bind9test.rc8.ch.	2	IN	A	127.0.0.1

After 07:09:44, named resolves successfully.

During the same time, another script asked for "www.arcade.ch" (TTL 600s), which gives me the following output:

Script querying for www.arcade.ch 
#!/bin/bash
while true; do
	/usr/bin/echo -en "$(date): "
	OUT=$(dig @10.100.102.23 +retry=1 +tries=1 +timeout=1 +noall +comments +answer www.arcade.ch)
	if /usr/bin/grep "46.22.30.93" <<<"$OUT" >/dev/null; then
		echo -e "$OUT" | /usr/bin/grep "46.22.30.93"
	elif grep "SERVFAIL" <<<"$OUT" >/dev/null; then
		echo -e "SERVFAIL"
	else
		echo -e "timed out"
	fi
	sleep 0.5
done
Tue Aug 27 07:08:02 CEST 2024: timed out
Tue Aug 27 07:08:03 CEST 2024: timed out
Tue Aug 27 07:08:05 CEST 2024: timed out
Tue Aug 27 07:08:06 CEST 2024: timed out
Tue Aug 27 07:08:08 CEST 2024: timed out
Tue Aug 27 07:08:09 CEST 2024: timed out
Tue Aug 27 07:08:11 CEST 2024: www.arcade.ch.		600	IN	A	46.22.30.93
Tue Aug 27 07:08:12 CEST 2024: timed out
Tue Aug 27 07:08:13 CEST 2024: www.arcade.ch.		598	IN	A	46.22.30.93
Tue Aug 27 07:08:14 CEST 2024: www.arcade.ch.		597	IN	A	46.22.30.93
Tue Aug 27 07:08:14 CEST 2024: www.arcade.ch.		596	IN	A	46.22.30.93
Tue Aug 27 07:08:15 CEST 2024: timed out
Tue Aug 27 07:08:17 CEST 2024: www.arcade.ch.		594	IN	A	46.22.30.93
Tue Aug 27 07:08:17 CEST 2024: www.arcade.ch.		594	IN	A	46.22.30.93
Tue Aug 27 07:08:18 CEST 2024: www.arcade.ch.		593	IN	A	46.22.30.93
Tue Aug 27 07:08:18 CEST 2024: www.arcade.ch.		593	IN	A	46.22.30.93
Tue Aug 27 07:08:19 CEST 2024: www.arcade.ch.		592	IN	A	46.22.30.93
Tue Aug 27 07:08:19 CEST 2024: www.arcade.ch.		592	IN	A	46.22.30.93
Tue Aug 27 07:08:20 CEST 2024: www.arcade.ch.		591	IN	A	46.22.30.93
Tue Aug 27 07:08:20 CEST 2024: www.arcade.ch.		591	IN	A	46.22.30.93
Tue Aug 27 07:08:21 CEST 2024: www.arcade.ch.		590	IN	A	46.22.30.93
Tue Aug 27 07:08:21 CEST 2024: www.arcade.ch.		590	IN	A	46.22.30.93
Tue Aug 27 07:08:22 CEST 2024: www.arcade.ch.		589	IN	A	46.22.30.93
Tue Aug 27 07:08:22 CEST 2024: www.arcade.ch.		589	IN	A	46.22.30.93
Tue Aug 27 07:08:23 CEST 2024: www.arcade.ch.		588	IN	A	46.22.30.93
Tue Aug 27 07:08:23 CEST 2024: www.arcade.ch.		587	IN	A	46.22.30.93
Tue Aug 27 07:08:24 CEST 2024: www.arcade.ch.		587	IN	A	46.22.30.93
Tue Aug 27 07:08:25 CEST 2024: www.arcade.ch.		586	IN	A	46.22.30.93
Tue Aug 27 07:08:25 CEST 2024: www.arcade.ch.		586	IN	A	46.22.30.93
Tue Aug 27 07:08:26 CEST 2024: www.arcade.ch.		585	IN	A	46.22.30.93
Tue Aug 27 07:08:26 CEST 2024: www.arcade.ch.		585	IN	A	46.22.30.93
Tue Aug 27 07:08:27 CEST 2024: www.arcade.ch.		584	IN	A	46.22.30.93
Tue Aug 27 07:08:27 CEST 2024: www.arcade.ch.		584	IN	A	46.22.30.93
Tue Aug 27 07:08:28 CEST 2024: www.arcade.ch.		583	IN	A	46.22.30.93
Tue Aug 27 07:08:28 CEST 2024: www.arcade.ch.		583	IN	A	46.22.30.93
Tue Aug 27 07:08:29 CEST 2024: www.arcade.ch.		582	IN	A	46.22.30.93
Tue Aug 27 07:08:29 CEST 2024: www.arcade.ch.		582	IN	A	46.22.30.93
Tue Aug 27 07:08:30 CEST 2024: www.arcade.ch.		581	IN	A	46.22.30.93
Tue Aug 27 07:08:30 CEST 2024: www.arcade.ch.		581	IN	A	46.22.30.93
Tue Aug 27 07:08:31 CEST 2024: www.arcade.ch.		580	IN	A	46.22.30.93
Tue Aug 27 07:08:31 CEST 2024: www.arcade.ch.		580	IN	A	46.22.30.93
Tue Aug 27 07:08:32 CEST 2024: www.arcade.ch.		579	IN	A	46.22.30.93
Tue Aug 27 07:08:32 CEST 2024: www.arcade.ch.		579	IN	A	46.22.30.93
Tue Aug 27 07:08:33 CEST 2024: www.arcade.ch.		578	IN	A	46.22.30.93
Tue Aug 27 07:08:34 CEST 2024: www.arcade.ch.		577	IN	A	46.22.30.93
Tue Aug 27 07:08:34 CEST 2024: www.arcade.ch.		577	IN	A	46.22.30.93
Tue Aug 27 07:08:35 CEST 2024: www.arcade.ch.		576	IN	A	46.22.30.93
Tue Aug 27 07:08:35 CEST 2024: www.arcade.ch.		576	IN	A	46.22.30.93
Tue Aug 27 07:08:36 CEST 2024: www.arcade.ch.		575	IN	A	46.22.30.93
Tue Aug 27 07:08:36 CEST 2024: www.arcade.ch.		575	IN	A	46.22.30.93
Tue Aug 27 07:08:37 CEST 2024: www.arcade.ch.		574	IN	A	46.22.30.93
Tue Aug 27 07:08:37 CEST 2024: www.arcade.ch.		574	IN	A	46.22.30.93
Tue Aug 27 07:08:38 CEST 2024: www.arcade.ch.		573	IN	A	46.22.30.93
Tue Aug 27 07:08:38 CEST 2024: www.arcade.ch.		573	IN	A	46.22.30.93
Tue Aug 27 07:08:39 CEST 2024: www.arcade.ch.		572	IN	A	46.22.30.93
Tue Aug 27 07:08:39 CEST 2024: www.arcade.ch.		572	IN	A	46.22.30.93
Tue Aug 27 07:08:40 CEST 2024: www.arcade.ch.		571	IN	A	46.22.30.93
Tue Aug 27 07:08:40 CEST 2024: www.arcade.ch.		571	IN	A	46.22.30.93
Tue Aug 27 07:08:41 CEST 2024: www.arcade.ch.		570	IN	A	46.22.30.93
Tue Aug 27 07:08:41 CEST 2024: www.arcade.ch.		570	IN	A	46.22.30.93
Tue Aug 27 07:08:42 CEST 2024: www.arcade.ch.		569	IN	A	46.22.30.93
Tue Aug 27 07:08:43 CEST 2024: www.arcade.ch.		568	IN	A	46.22.30.93
Tue Aug 27 07:08:43 CEST 2024: www.arcade.ch.		568	IN	A	46.22.30.93
Tue Aug 27 07:08:44 CEST 2024: www.arcade.ch.		567	IN	A	46.22.30.93
Tue Aug 27 07:08:44 CEST 2024: www.arcade.ch.		567	IN	A	46.22.30.93
Tue Aug 27 07:08:45 CEST 2024: www.arcade.ch.		566	IN	A	46.22.30.93
Tue Aug 27 07:08:45 CEST 2024: www.arcade.ch.		566	IN	A	46.22.30.93
Tue Aug 27 07:08:46 CEST 2024: www.arcade.ch.		565	IN	A	46.22.30.93
Tue Aug 27 07:08:46 CEST 2024: www.arcade.ch.		565	IN	A	46.22.30.93
Tue Aug 27 07:08:47 CEST 2024: www.arcade.ch.		564	IN	A	46.22.30.93
Tue Aug 27 07:08:47 CEST 2024: www.arcade.ch.		564	IN	A	46.22.30.93
Tue Aug 27 07:08:48 CEST 2024: www.arcade.ch.		563	IN	A	46.22.30.93
Tue Aug 27 07:08:48 CEST 2024: www.arcade.ch.		563	IN	A	46.22.30.93
Tue Aug 27 07:08:49 CEST 2024: www.arcade.ch.		562	IN	A	46.22.30.93
Tue Aug 27 07:08:49 CEST 2024: www.arcade.ch.		562	IN	A	46.22.30.93
Tue Aug 27 07:08:50 CEST 2024: www.arcade.ch.		561	IN	A	46.22.30.93
Tue Aug 27 07:08:50 CEST 2024: www.arcade.ch.		561	IN	A	46.22.30.93
Tue Aug 27 07:08:51 CEST 2024: www.arcade.ch.		560	IN	A	46.22.30.93
Tue Aug 27 07:08:51 CEST 2024: www.arcade.ch.		559	IN	A	46.22.30.93
Tue Aug 27 07:08:52 CEST 2024: www.arcade.ch.		559	IN	A	46.22.30.93
Tue Aug 27 07:08:53 CEST 2024: www.arcade.ch.		558	IN	A	46.22.30.93
Tue Aug 27 07:08:53 CEST 2024: www.arcade.ch.		558	IN	A	46.22.30.93
Tue Aug 27 07:08:54 CEST 2024: www.arcade.ch.		557	IN	A	46.22.30.93
Tue Aug 27 07:08:54 CEST 2024: www.arcade.ch.		557	IN	A	46.22.30.93
Tue Aug 27 07:08:55 CEST 2024: www.arcade.ch.		556	IN	A	46.22.30.93
Tue Aug 27 07:08:55 CEST 2024: www.arcade.ch.		556	IN	A	46.22.30.93
Tue Aug 27 07:08:56 CEST 2024: www.arcade.ch.		555	IN	A	46.22.30.93
Tue Aug 27 07:08:56 CEST 2024: www.arcade.ch.		555	IN	A	46.22.30.93
Tue Aug 27 07:08:57 CEST 2024: www.arcade.ch.		554	IN	A	46.22.30.93
Tue Aug 27 07:08:57 CEST 2024: www.arcade.ch.		554	IN	A	46.22.30.93
Tue Aug 27 07:08:58 CEST 2024: www.arcade.ch.		553	IN	A	46.22.30.93
Tue Aug 27 07:08:58 CEST 2024: www.arcade.ch.		553	IN	A	46.22.30.93
Tue Aug 27 07:08:59 CEST 2024: www.arcade.ch.		552	IN	A	46.22.30.93
Tue Aug 27 07:08:59 CEST 2024: www.arcade.ch.		552	IN	A	46.22.30.93
Tue Aug 27 07:09:00 CEST 2024: www.arcade.ch.		551	IN	A	46.22.30.93
Tue Aug 27 07:09:00 CEST 2024: www.arcade.ch.		551	IN	A	46.22.30.93
Tue Aug 27 07:09:01 CEST 2024: www.arcade.ch.		550	IN	A	46.22.30.93
Tue Aug 27 07:09:02 CEST 2024: www.arcade.ch.		549	IN	A	46.22.30.93
Tue Aug 27 07:09:02 CEST 2024: www.arcade.ch.		549	IN	A	46.22.30.93
Tue Aug 27 07:09:03 CEST 2024: www.arcade.ch.		548	IN	A	46.22.30.93
Tue Aug 27 07:09:03 CEST 2024: www.arcade.ch.		548	IN	A	46.22.30.93
Tue Aug 27 07:09:04 CEST 2024: www.arcade.ch.		547	IN	A	46.22.30.93
Tue Aug 27 07:09:04 CEST 2024: www.arcade.ch.		547	IN	A	46.22.30.93
Tue Aug 27 07:09:05 CEST 2024: www.arcade.ch.		546	IN	A	46.22.30.93
Tue Aug 27 07:09:05 CEST 2024: www.arcade.ch.		546	IN	A	46.22.30.93
Tue Aug 27 07:09:06 CEST 2024: www.arcade.ch.		545	IN	A	46.22.30.93
Tue Aug 27 07:09:06 CEST 2024: www.arcade.ch.		545	IN	A	46.22.30.93
Tue Aug 27 07:09:07 CEST 2024: www.arcade.ch.		544	IN	A	46.22.30.93
Tue Aug 27 07:09:07 CEST 2024: www.arcade.ch.		544	IN	A	46.22.30.93
Tue Aug 27 07:09:08 CEST 2024: www.arcade.ch.		543	IN	A	46.22.30.93
Tue Aug 27 07:09:08 CEST 2024: www.arcade.ch.		543	IN	A	46.22.30.93
Tue Aug 27 07:09:09 CEST 2024: www.arcade.ch.		542	IN	A	46.22.30.93
Tue Aug 27 07:09:09 CEST 2024: www.arcade.ch.		542	IN	A	46.22.30.93
Tue Aug 27 07:09:10 CEST 2024: www.arcade.ch.		541	IN	A	46.22.30.93
Tue Aug 27 07:09:11 CEST 2024: www.arcade.ch.		540	IN	A	46.22.30.93
Tue Aug 27 07:09:11 CEST 2024: www.arcade.ch.		540	IN	A	46.22.30.93
Tue Aug 27 07:09:12 CEST 2024: www.arcade.ch.		539	IN	A	46.22.30.93
Tue Aug 27 07:09:12 CEST 2024: www.arcade.ch.		539	IN	A	46.22.30.93
Tue Aug 27 07:09:13 CEST 2024: www.arcade.ch.		538	IN	A	46.22.30.93
Tue Aug 27 07:09:13 CEST 2024: www.arcade.ch.		538	IN	A	46.22.30.93
Tue Aug 27 07:09:14 CEST 2024: www.arcade.ch.		537	IN	A	46.22.30.93
Tue Aug 27 07:09:14 CEST 2024: www.arcade.ch.		537	IN	A	46.22.30.93
Tue Aug 27 07:09:15 CEST 2024: www.arcade.ch.		536	IN	A	46.22.30.93
Tue Aug 27 07:09:15 CEST 2024: www.arcade.ch.		536	IN	A	46.22.30.93
Tue Aug 27 07:09:16 CEST 2024: www.arcade.ch.		535	IN	A	46.22.30.93
Tue Aug 27 07:09:16 CEST 2024: www.arcade.ch.		535	IN	A	46.22.30.93
Tue Aug 27 07:09:17 CEST 2024: www.arcade.ch.		534	IN	A	46.22.30.93
Tue Aug 27 07:09:17 CEST 2024: www.arcade.ch.		534	IN	A	46.22.30.93
Tue Aug 27 07:09:18 CEST 2024: www.arcade.ch.		533	IN	A	46.22.30.93
Tue Aug 27 07:09:18 CEST 2024: www.arcade.ch.		533	IN	A	46.22.30.93
Tue Aug 27 07:09:19 CEST 2024: www.arcade.ch.		532	IN	A	46.22.30.93
Tue Aug 27 07:09:19 CEST 2024: www.arcade.ch.		532	IN	A	46.22.30.93
Tue Aug 27 07:09:20 CEST 2024: www.arcade.ch.		531	IN	A	46.22.30.93
Tue Aug 27 07:09:21 CEST 2024: www.arcade.ch.		530	IN	A	46.22.30.93
Tue Aug 27 07:09:21 CEST 2024: www.arcade.ch.		530	IN	A	46.22.30.93
Tue Aug 27 07:09:22 CEST 2024: www.arcade.ch.		529	IN	A	46.22.30.93
Tue Aug 27 07:09:22 CEST 2024: www.arcade.ch.		529	IN	A	46.22.30.93
Tue Aug 27 07:09:23 CEST 2024: www.arcade.ch.		528	IN	A	46.22.30.93
Tue Aug 27 07:09:23 CEST 2024: www.arcade.ch.		528	IN	A	46.22.30.93
Tue Aug 27 07:09:24 CEST 2024: www.arcade.ch.		527	IN	A	46.22.30.93
Tue Aug 27 07:09:24 CEST 2024: www.arcade.ch.		527	IN	A	46.22.30.93
Tue Aug 27 07:09:25 CEST 2024: www.arcade.ch.		526	IN	A	46.22.30.93
Tue Aug 27 07:09:25 CEST 2024: www.arcade.ch.		526	IN	A	46.22.30.93
Tue Aug 27 07:09:26 CEST 2024: www.arcade.ch.		525	IN	A	46.22.30.93
Tue Aug 27 07:09:26 CEST 2024: www.arcade.ch.		525	IN	A	46.22.30.93
Tue Aug 27 07:09:27 CEST 2024: www.arcade.ch.		524	IN	A	46.22.30.93
Tue Aug 27 07:09:27 CEST 2024: www.arcade.ch.		524	IN	A	46.22.30.93
Tue Aug 27 07:09:28 CEST 2024: www.arcade.ch.		523	IN	A	46.22.30.93
Tue Aug 27 07:09:28 CEST 2024: www.arcade.ch.		523	IN	A	46.22.30.93
Tue Aug 27 07:09:29 CEST 2024: www.arcade.ch.		522	IN	A	46.22.30.93
Tue Aug 27 07:09:30 CEST 2024: www.arcade.ch.		521	IN	A	46.22.30.93
Tue Aug 27 07:09:30 CEST 2024: www.arcade.ch.		521	IN	A	46.22.30.93
Tue Aug 27 07:09:31 CEST 2024: www.arcade.ch.		520	IN	A	46.22.30.93
Tue Aug 27 07:09:31 CEST 2024: www.arcade.ch.		520	IN	A	46.22.30.93
Tue Aug 27 07:09:32 CEST 2024: www.arcade.ch.		519	IN	A	46.22.30.93
Tue Aug 27 07:09:32 CEST 2024: www.arcade.ch.		519	IN	A	46.22.30.93
Tue Aug 27 07:09:33 CEST 2024: www.arcade.ch.		518	IN	A	46.22.30.93
Tue Aug 27 07:09:33 CEST 2024: www.arcade.ch.		518	IN	A	46.22.30.93
Tue Aug 27 07:09:34 CEST 2024: www.arcade.ch.		517	IN	A	46.22.30.93
Tue Aug 27 07:09:34 CEST 2024: www.arcade.ch.		517	IN	A	46.22.30.93
Tue Aug 27 07:09:35 CEST 2024: www.arcade.ch.		516	IN	A	46.22.30.93
Tue Aug 27 07:09:35 CEST 2024: www.arcade.ch.		516	IN	A	46.22.30.93
Tue Aug 27 07:09:36 CEST 2024: www.arcade.ch.		515	IN	A	46.22.30.93
Tue Aug 27 07:09:36 CEST 2024: www.arcade.ch.		515	IN	A	46.22.30.93
Tue Aug 27 07:09:37 CEST 2024: www.arcade.ch.		514	IN	A	46.22.30.93
Tue Aug 27 07:09:37 CEST 2024: www.arcade.ch.		514	IN	A	46.22.30.93
Tue Aug 27 07:09:38 CEST 2024: www.arcade.ch.		513	IN	A	46.22.30.93
Tue Aug 27 07:09:38 CEST 2024: www.arcade.ch.		513	IN	A	46.22.30.93
Tue Aug 27 07:09:39 CEST 2024: www.arcade.ch.		512	IN	A	46.22.30.93
Tue Aug 27 07:09:40 CEST 2024: www.arcade.ch.		511	IN	A	46.22.30.93
Tue Aug 27 07:09:40 CEST 2024: www.arcade.ch.		511	IN	A	46.22.30.93
Tue Aug 27 07:09:41 CEST 2024: www.arcade.ch.		510	IN	A	46.22.30.93
Tue Aug 27 07:09:41 CEST 2024: www.arcade.ch.		510	IN	A	46.22.30.93
Tue Aug 27 07:09:42 CEST 2024: www.arcade.ch.		509	IN	A	46.22.30.93
Tue Aug 27 07:09:42 CEST 2024: www.arcade.ch.		509	IN	A	46.22.30.93
Tue Aug 27 07:09:43 CEST 2024: www.arcade.ch.		508	IN	A	46.22.30.93
Tue Aug 27 07:09:43 CEST 2024: www.arcade.ch.		508	IN	A	46.22.30.93
Tue Aug 27 07:09:44 CEST 2024: www.arcade.ch.		507	IN	A	46.22.30.93
Tue Aug 27 07:09:44 CEST 2024: www.arcade.ch.		507	IN	A	46.22.30.93
Tue Aug 27 07:09:45 CEST 2024: www.arcade.ch.		506	IN	A	46.22.30.93
Tue Aug 27 07:09:45 CEST 2024: www.arcade.ch.		506	IN	A	46.22.30.93
Tue Aug 27 07:09:46 CEST 2024: www.arcade.ch.		505	IN	A	46.22.30.93
Tue Aug 27 07:09:46 CEST 2024: www.arcade.ch.		505	IN	A	46.22.30.93

It seems, that named was able to resolve during startup and took the record in the cache, what make a difference regarding querying a low TTL'ed ressource record (5s) and a "normal" TTL'ed ressourced record (600s).

BIND-9.18.24

Comparing to BIND-9.18.24:

$ /usr/local/bind-9.18.24/sbin/named -V
BIND 9.18.24 (Extended Support Version) <id:6d7674f>
running on Linux x86_64 4.18.0-305.3.1.el8_4.x86_64 #1 SMP Thu Jun 17 07:52:48 UTC 2021
built by make with  '--prefix=/usr/local/bind-9.18.24' '--sysconfdir=/opt/chroot/bind/etc/named/' '--mandir=/usr/local/share/man' '--localstatedir=/opt/chroot/bind/var' '--enable-largefile' '--enable-full-report' '--without-gssapi' '--disable-doh'
compiled by GCC 8.4.1 20200928 (Red Hat 8.4.1-1)
compiled with OpenSSL version: OpenSSL 1.1.1g FIPS  21 Apr 2020
linked to OpenSSL version: OpenSSL 1.1.1g FIPS  21 Apr 2020
compiled with libuv version: 1.40.0
linked to libuv version: 1.40.0
compiled with libxml2 version: 2.9.7
linked to libxml2 version: 20907
compiled with zlib version: 1.2.11
linked to zlib version: 1.2.11
threads support is enabled
DNSSEC algorithms: RSASHA1 NSEC3RSASHA1 RSASHA256 RSASHA512 ECDSAP256SHA256 ECDSAP384SHA384 ED25519 ED448
DS algorithms: SHA-1 SHA-256 SHA-384
HMAC algorithms: HMAC-MD5 HMAC-SHA1 HMAC-SHA224 HMAC-SHA256 HMAC-SHA384 HMAC-SHA512
TKEY mode 2 support (Diffie-Hellman): yes
TKEY mode 3 support (GSS-API): no

default paths:
  named configuration:  /opt/chroot/bind/etc/named/named.conf
  rndc configuration:   /opt/chroot/bind/etc/named/rndc.conf
  DNSSEC root key:      /opt/chroot/bind/etc/named/bind.keys
  nsupdate session key: /opt/chroot/bind/var/run/named/session.key
  named PID file:       /opt/chroot/bind/var/run/named/named.pid
  named lock file:      /opt/chroot/bind/var/run/named/named.lock

BIND-9.18.24 started: 07:54:46

BIND-9.18.24 began successfully answering on recursive queries: 07:54:54 (after 8s)

BIND9.18.24-Startup 
$ /usr/local/bind-9.18.24/sbin/named -4 -t /opt/chroot/bind -u named -c /etc/named/named.conf -g 
27-Aug-2024 07:54:46.343 starting BIND 9.18.24 (Extended Support Version) <id:6d7674f>
27-Aug-2024 07:54:46.344 running on Linux x86_64 4.18.0-305.3.1.el8_4.x86_64 #1 SMP Thu Jun 17 07:52:48 UTC 2021
27-Aug-2024 07:54:46.344 built with  '--prefix=/usr/local/bind-9.18.24' '--sysconfdir=/opt/chroot/bind/etc/named/' '--mandir=/usr/local/share/man' '--localstatedir=/opt/chroot/bind/var' '--enable-largefile' '--enable-full-report' '--without-gssapi' '--disable-doh'
27-Aug-2024 07:54:46.344 running as: named -4 -t /opt/chroot/bind -u named -c /etc/named/named.conf -g
27-Aug-2024 07:54:46.344 compiled by GCC 8.4.1 20200928 (Red Hat 8.4.1-1)
27-Aug-2024 07:54:46.344 compiled with OpenSSL version: OpenSSL 1.1.1g FIPS  21 Apr 2020
27-Aug-2024 07:54:46.344 linked to OpenSSL version: OpenSSL 1.1.1g FIPS  21 Apr 2020
27-Aug-2024 07:54:46.344 compiled with libuv version: 1.40.0
27-Aug-2024 07:54:46.344 linked to libuv version: 1.40.0
27-Aug-2024 07:54:46.344 compiled with libxml2 version: 2.9.7
27-Aug-2024 07:54:46.344 linked to libxml2 version: 20907
27-Aug-2024 07:54:46.344 compiled with zlib version: 1.2.11
27-Aug-2024 07:54:46.344 linked to zlib version: 1.2.11
27-Aug-2024 07:54:46.344 ----------------------------------------------------
27-Aug-2024 07:54:46.344 BIND 9 is maintained by Internet Systems Consortium,
27-Aug-2024 07:54:46.344 Inc. (ISC), a non-profit 501(c)(3) public-benefit 
27-Aug-2024 07:54:46.344 corporation.  Support and training for BIND 9 are 
27-Aug-2024 07:54:46.344 available at https://www.isc.org/support
27-Aug-2024 07:54:46.344 ----------------------------------------------------
27-Aug-2024 07:54:46.344 adjusted limit on open files from 262144 to 1048576
27-Aug-2024 07:54:46.344 found 4 CPUs, using 4 worker threads
27-Aug-2024 07:54:46.344 using 4 UDP listeners per interface
27-Aug-2024 07:54:46.346 DNSSEC algorithms: RSASHA1 NSEC3RSASHA1 RSASHA256 RSASHA512 ECDSAP256SHA256 ECDSAP384SHA384 ED25519 ED448
27-Aug-2024 07:54:46.346 DS algorithms: SHA-1 SHA-256 SHA-384
27-Aug-2024 07:54:46.346 HMAC algorithms: HMAC-MD5 HMAC-SHA1 HMAC-SHA224 HMAC-SHA256 HMAC-SHA384 HMAC-SHA512
27-Aug-2024 07:54:46.346 TKEY mode 2 support (Diffie-Hellman): yes
27-Aug-2024 07:54:46.346 TKEY mode 3 support (GSS-API): no
27-Aug-2024 07:54:46.349 loading configuration from '/etc/named/named.conf'
27-Aug-2024 07:54:46.350 unable to open '/opt/chroot/bind/etc/named/bind.keys'; using built-in keys instead
27-Aug-2024 07:54:46.350 statistics-channels: JSON library missing, only XML stats will be available
27-Aug-2024 07:54:46.350 statistics channel listening on 10.100.102.23#8888
27-Aug-2024 07:54:46.350 using default UDP/IPv4 port range: [1024, 65535]
27-Aug-2024 07:54:46.351 listening on IPv4 interface lo, 127.0.0.1#53
27-Aug-2024 07:54:46.351 listening on IPv4 interface eth0, 10.100.102.23#53
27-Aug-2024 07:54:46.351 generating session key for dynamic DNS
27-Aug-2024 07:54:46.351 sizing zone task pool based on 44 zones
27-Aug-2024 07:54:46.352 using built-in root key for view _default
27-Aug-2024 07:54:46.352 set up managed keys zone for view _default, file 'managed-keys.bind'
27-Aug-2024 07:54:46.352 automatic empty zone: 10.IN-ADDR.ARPA
27-Aug-2024 07:54:46.352 automatic empty zone: 16.172.IN-ADDR.ARPA
27-Aug-2024 07:54:46.352 automatic empty zone: 17.172.IN-ADDR.ARPA
27-Aug-2024 07:54:46.352 automatic empty zone: 18.172.IN-ADDR.ARPA
27-Aug-2024 07:54:46.352 automatic empty zone: 19.172.IN-ADDR.ARPA
27-Aug-2024 07:54:46.352 automatic empty zone: 20.172.IN-ADDR.ARPA
27-Aug-2024 07:54:46.352 automatic empty zone: 21.172.IN-ADDR.ARPA
27-Aug-2024 07:54:46.352 automatic empty zone: 22.172.IN-ADDR.ARPA
27-Aug-2024 07:54:46.352 automatic empty zone: 23.172.IN-ADDR.ARPA
27-Aug-2024 07:54:46.352 automatic empty zone: 24.172.IN-ADDR.ARPA
27-Aug-2024 07:54:46.352 automatic empty zone: 25.172.IN-ADDR.ARPA
27-Aug-2024 07:54:46.352 automatic empty zone: 26.172.IN-ADDR.ARPA
27-Aug-2024 07:54:46.352 automatic empty zone: 27.172.IN-ADDR.ARPA
27-Aug-2024 07:54:46.352 automatic empty zone: 28.172.IN-ADDR.ARPA
27-Aug-2024 07:54:46.352 automatic empty zone: 29.172.IN-ADDR.ARPA
27-Aug-2024 07:54:46.352 automatic empty zone: 30.172.IN-ADDR.ARPA
27-Aug-2024 07:54:46.352 automatic empty zone: 31.172.IN-ADDR.ARPA
27-Aug-2024 07:54:46.352 automatic empty zone: 168.192.IN-ADDR.ARPA
27-Aug-2024 07:54:46.352 automatic empty zone: 64.100.IN-ADDR.ARPA
27-Aug-2024 07:54:46.352 automatic empty zone: 65.100.IN-ADDR.ARPA
27-Aug-2024 07:54:46.352 automatic empty zone: 66.100.IN-ADDR.ARPA
27-Aug-2024 07:54:46.352 automatic empty zone: 67.100.IN-ADDR.ARPA
27-Aug-2024 07:54:46.352 automatic empty zone: 68.100.IN-ADDR.ARPA
27-Aug-2024 07:54:46.352 automatic empty zone: 69.100.IN-ADDR.ARPA
27-Aug-2024 07:54:46.352 automatic empty zone: 70.100.IN-ADDR.ARPA
27-Aug-2024 07:54:46.352 automatic empty zone: 71.100.IN-ADDR.ARPA
27-Aug-2024 07:54:46.352 automatic empty zone: 72.100.IN-ADDR.ARPA
27-Aug-2024 07:54:46.352 automatic empty zone: 73.100.IN-ADDR.ARPA
27-Aug-2024 07:54:46.352 automatic empty zone: 74.100.IN-ADDR.ARPA
27-Aug-2024 07:54:46.352 automatic empty zone: 75.100.IN-ADDR.ARPA
27-Aug-2024 07:54:46.352 automatic empty zone: 76.100.IN-ADDR.ARPA
27-Aug-2024 07:54:46.352 automatic empty zone: 77.100.IN-ADDR.ARPA
27-Aug-2024 07:54:46.353 automatic empty zone: 78.100.IN-ADDR.ARPA
27-Aug-2024 07:54:46.353 automatic empty zone: 79.100.IN-ADDR.ARPA
27-Aug-2024 07:54:46.353 automatic empty zone: 80.100.IN-ADDR.ARPA
27-Aug-2024 07:54:46.353 automatic empty zone: 81.100.IN-ADDR.ARPA
27-Aug-2024 07:54:46.353 automatic empty zone: 82.100.IN-ADDR.ARPA
27-Aug-2024 07:54:46.353 automatic empty zone: 83.100.IN-ADDR.ARPA
27-Aug-2024 07:54:46.353 automatic empty zone: 84.100.IN-ADDR.ARPA
27-Aug-2024 07:54:46.353 automatic empty zone: 85.100.IN-ADDR.ARPA
27-Aug-2024 07:54:46.353 automatic empty zone: 86.100.IN-ADDR.ARPA
27-Aug-2024 07:54:46.353 automatic empty zone: 87.100.IN-ADDR.ARPA
27-Aug-2024 07:54:46.353 automatic empty zone: 88.100.IN-ADDR.ARPA
27-Aug-2024 07:54:46.353 automatic empty zone: 89.100.IN-ADDR.ARPA
27-Aug-2024 07:54:46.353 automatic empty zone: 90.100.IN-ADDR.ARPA
27-Aug-2024 07:54:46.353 automatic empty zone: 91.100.IN-ADDR.ARPA
27-Aug-2024 07:54:46.353 automatic empty zone: 92.100.IN-ADDR.ARPA
27-Aug-2024 07:54:46.353 automatic empty zone: 93.100.IN-ADDR.ARPA
27-Aug-2024 07:54:46.353 automatic empty zone: 94.100.IN-ADDR.ARPA
27-Aug-2024 07:54:46.353 automatic empty zone: 95.100.IN-ADDR.ARPA
27-Aug-2024 07:54:46.353 automatic empty zone: 96.100.IN-ADDR.ARPA
27-Aug-2024 07:54:46.353 automatic empty zone: 97.100.IN-ADDR.ARPA
27-Aug-2024 07:54:46.353 automatic empty zone: 98.100.IN-ADDR.ARPA
27-Aug-2024 07:54:46.353 automatic empty zone: 99.100.IN-ADDR.ARPA
27-Aug-2024 07:54:46.353 automatic empty zone: 100.100.IN-ADDR.ARPA
27-Aug-2024 07:54:46.353 automatic empty zone: 101.100.IN-ADDR.ARPA
27-Aug-2024 07:54:46.353 automatic empty zone: 102.100.IN-ADDR.ARPA
27-Aug-2024 07:54:46.353 automatic empty zone: 103.100.IN-ADDR.ARPA
27-Aug-2024 07:54:46.353 automatic empty zone: 104.100.IN-ADDR.ARPA
27-Aug-2024 07:54:46.353 automatic empty zone: 105.100.IN-ADDR.ARPA
27-Aug-2024 07:54:46.353 automatic empty zone: 106.100.IN-ADDR.ARPA
27-Aug-2024 07:54:46.353 automatic empty zone: 107.100.IN-ADDR.ARPA
27-Aug-2024 07:54:46.353 automatic empty zone: 108.100.IN-ADDR.ARPA
27-Aug-2024 07:54:46.353 automatic empty zone: 109.100.IN-ADDR.ARPA
27-Aug-2024 07:54:46.353 automatic empty zone: 110.100.IN-ADDR.ARPA
27-Aug-2024 07:54:46.353 automatic empty zone: 111.100.IN-ADDR.ARPA
27-Aug-2024 07:54:46.353 automatic empty zone: 112.100.IN-ADDR.ARPA
27-Aug-2024 07:54:46.353 automatic empty zone: 113.100.IN-ADDR.ARPA
27-Aug-2024 07:54:46.353 automatic empty zone: 114.100.IN-ADDR.ARPA
27-Aug-2024 07:54:46.353 automatic empty zone: 115.100.IN-ADDR.ARPA
27-Aug-2024 07:54:46.353 automatic empty zone: 116.100.IN-ADDR.ARPA
27-Aug-2024 07:54:46.353 automatic empty zone: 117.100.IN-ADDR.ARPA
27-Aug-2024 07:54:46.353 automatic empty zone: 118.100.IN-ADDR.ARPA
27-Aug-2024 07:54:46.353 automatic empty zone: 119.100.IN-ADDR.ARPA
27-Aug-2024 07:54:46.353 automatic empty zone: 120.100.IN-ADDR.ARPA
27-Aug-2024 07:54:46.353 automatic empty zone: 121.100.IN-ADDR.ARPA
27-Aug-2024 07:54:46.353 automatic empty zone: 122.100.IN-ADDR.ARPA
27-Aug-2024 07:54:46.353 automatic empty zone: 123.100.IN-ADDR.ARPA
27-Aug-2024 07:54:46.353 automatic empty zone: 124.100.IN-ADDR.ARPA
27-Aug-2024 07:54:46.353 automatic empty zone: 125.100.IN-ADDR.ARPA
27-Aug-2024 07:54:46.353 automatic empty zone: 126.100.IN-ADDR.ARPA
27-Aug-2024 07:54:46.353 automatic empty zone: 127.100.IN-ADDR.ARPA
27-Aug-2024 07:54:46.353 automatic empty zone: 0.IN-ADDR.ARPA
27-Aug-2024 07:54:46.353 automatic empty zone: 127.IN-ADDR.ARPA
27-Aug-2024 07:54:46.353 automatic empty zone: 254.169.IN-ADDR.ARPA
27-Aug-2024 07:54:46.353 automatic empty zone: 2.0.192.IN-ADDR.ARPA
27-Aug-2024 07:54:46.353 automatic empty zone: 100.51.198.IN-ADDR.ARPA
27-Aug-2024 07:54:46.353 automatic empty zone: 113.0.203.IN-ADDR.ARPA
27-Aug-2024 07:54:46.353 automatic empty zone: 255.255.255.255.IN-ADDR.ARPA
27-Aug-2024 07:54:46.353 automatic empty zone: 0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.ARPA
27-Aug-2024 07:54:46.353 automatic empty zone: D.F.IP6.ARPA
27-Aug-2024 07:54:46.353 automatic empty zone: 8.E.F.IP6.ARPA
27-Aug-2024 07:54:46.353 automatic empty zone: 9.E.F.IP6.ARPA
27-Aug-2024 07:54:46.353 automatic empty zone: A.E.F.IP6.ARPA
27-Aug-2024 07:54:46.353 automatic empty zone: B.E.F.IP6.ARPA
27-Aug-2024 07:54:46.353 automatic empty zone: 8.B.D.0.1.0.0.2.IP6.ARPA
27-Aug-2024 07:54:46.353 automatic empty zone: EMPTY.AS112.ARPA
27-Aug-2024 07:54:46.353 automatic empty zone: HOME.ARPA
27-Aug-2024 07:54:46.353 command channel listening on 127.0.0.1#953
27-Aug-2024 07:54:46.353 not using config file logging statement for logging due to -g option
27-Aug-2024 07:54:46.357 managed-keys-zone: loaded serial 1732
27-Aug-2024 07:54:46.359 zone adware.host.dtq/IN: loaded serial 1724677081
27-Aug-2024 07:54:46.362 zone whitelist-rpz.arcade.ch/IN: loaded serial 2024061001
27-Aug-2024 07:54:46.362 zone melblip.rpz.govcert.ch/IN: loaded serial 244778
27-Aug-2024 07:54:46.364 zone bad-nameservers.host.dtq/IN: loaded serial 1724676961
27-Aug-2024 07:54:46.364 zone melmisp.rpz.govcert.ch/IN: loaded serial 245873
27-Aug-2024 07:54:46.364 zone urlhaus.rpz.govcert.ch/IN: loaded serial 328169
27-Aug-2024 07:54:46.365 zone botnetcc.edit.host.dtq/IN: loaded serial 1724676841
27-Aug-2024 07:54:46.409 Verifying the zone using the following algorithms:
27-Aug-2024 07:54:46.409 - RSASHA256
27-Aug-2024 07:54:46.463 Zone fully signed:
27-Aug-2024 07:54:46.463 Algorithm: RSASHA256: KSKs: 1 active, 0 stand-by, 0 revoked
27-Aug-2024 07:54:46.463                       ZSKs: 1 active, 0 stand-by, 0 revoked
27-Aug-2024 07:54:46.463 zone ./IN: loaded serial 2024082602 (DNSSEC signed)
27-Aug-2024 07:54:46.463 zone ./IN: mirror zone is now in use
27-Aug-2024 07:54:46.487 zone dynamicdns.rpz.govcert.ch/IN: loaded serial 241379
27-Aug-2024 07:54:46.488 zone phishdb.rpz.govcert.ch/IN: loaded serial 248083
27-Aug-2024 07:54:46.493 zone botnetcc.host.dtq/IN: loaded serial 1724676961
27-Aug-2024 07:54:46.493 zone botnet.edit.host.dtq/IN: loaded serial 1724676961
27-Aug-2024 07:54:46.493 zone botnetcc.hacked.ip.dtq/IN: loaded serial 1724677081
27-Aug-2024 07:54:46.494 zone melbl.rpz.govcert.ch/IN: loaded serial 246092
27-Aug-2024 07:54:46.496 zone zone3.misc.rpz.switch.ch/IN: loaded serial 1724431997
27-Aug-2024 07:54:46.547 zone zone3.ph.rpz.switch.ch/IN: loaded serial 1724676409
27-Aug-2024 07:54:47.619 zone phish.edit.host.dtq/IN: loaded serial 1724676841
27-Aug-2024 07:54:47.619 zone special-rewrites-rpz.arcade.ch/IN: loaded serial 2024031901
27-Aug-2024 07:54:47.622 zone bad-nameservers.ip.dtq/IN: loaded serial 1724677081
27-Aug-2024 07:54:48.086 zone bogons.ip.dtq/IN: loaded serial 1724659981
27-Aug-2024 07:54:48.086 zone special-rewrites-rpz.arcade.ch/IN: sending notifies (serial 2024031901)
27-Aug-2024 07:54:50.027 zone zone3.mw.rpz.switch.ch/IN: loaded serial 1724676414
27-Aug-2024 07:54:50.305 zone badrep.edit.host.dtq/IN: loaded serial 1724676721
27-Aug-2024 07:54:50.305 zone 0.0.127.in-addr.arpa/IN: loaded serial 1
27-Aug-2024 07:54:50.306 zone blacklist-rpz.arcade.ch/IN: loaded serial 2024082001
27-Aug-2024 07:54:50.308 zone malware.hacked.host.dtq/IN: loaded serial 1724676841
27-Aug-2024 07:54:50.308 zone localhost/IN: loaded serial 2002022401
27-Aug-2024 07:54:50.565 zone coinblocker.srv/IN: loaded serial 1724594581
27-Aug-2024 07:54:50.565 zone 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa/IN: loaded serial 1
27-Aug-2024 07:54:50.619 zone malware.host.dtq/IN: loaded serial 1724676841
27-Aug-2024 07:54:52.531 zone badrep.host.dtq/IN: loaded serial 1724676961
27-Aug-2024 07:54:52.531 zone botnet.host.dtq/IN: loaded serial 1724676721
27-Aug-2024 07:54:52.531 zone botnetcc.hacked.host.dtq/IN: loaded serial 1724676961
27-Aug-2024 07:54:52.538 zone phish.hacked.host.dtq/IN: loaded serial 1724677081
27-Aug-2024 07:54:52.540 zone drop.ip.dtq/IN: loaded serial 1724675641
27-Aug-2024 07:54:52.542 zone torblock.srv/IN: loaded serial 1724675821
27-Aug-2024 07:54:52.542 zone whitelist-rpz.arcade.ch/IN: sending notifies (serial 2024061001)
27-Aug-2024 07:54:52.774 zone phish.host.dtq/IN: loaded serial 1724676841
27-Aug-2024 07:54:52.774 zone blacklist-rpz.arcade.ch/IN: sending notifies (serial 2024082001)
27-Aug-2024 07:54:53.952 zone dga.host.dtq/IN: loaded serial 1724674021
27-Aug-2024 07:54:53.952 zone mozilla-doh-blacklist.zone/IN: loaded serial 1
27-Aug-2024 07:54:53.953 zone adware.edit.host.dtq/IN: loaded serial 1724677081
27-Aug-2024 07:54:53.975 zone malware.edit.host.dtq/IN: loaded serial 1724676721
27-Aug-2024 07:54:53.977 zone badrep.hacked.host.dtq/IN: loaded serial 1724676961
27-Aug-2024 07:54:53.979 zone botnetcc.ip.dtq/IN: loaded serial 1724676961
27-Aug-2024 07:54:53.980 zone zone.wl.rpz.switch.ch/IN: loaded serial 1721974411
27-Aug-2024 07:54:54.019 zone malware.domains.dtq/IN: loaded serial 1724676841
27-Aug-2024 07:54:54.019 all zones loaded
27-Aug-2024 07:54:54.019 running
27-Aug-2024 07:54:54.019 rpz: adware.host.dtq: reload start
27-Aug-2024 07:54:54.019 rpz: whitelist-rpz.arcade.ch: reload start
27-Aug-2024 07:54:54.019 rpz: melblip.rpz.govcert.ch: reload start
27-Aug-2024 07:54:54.019 rpz: bad-nameservers.host.dtq: reload start
27-Aug-2024 07:54:54.019 rpz: melmisp.rpz.govcert.ch: reload start
27-Aug-2024 07:54:54.019 rpz: urlhaus.rpz.govcert.ch: reload start
27-Aug-2024 07:54:54.019 rpz: botnetcc.edit.host.dtq: reload start
27-Aug-2024 07:54:54.019 rpz: dynamicdns.rpz.govcert.ch: reload start
27-Aug-2024 07:54:54.019 rpz: phishdb.rpz.govcert.ch: reload start
27-Aug-2024 07:54:54.019 rpz: botnetcc.host.dtq: reload start
27-Aug-2024 07:54:54.019 rpz: botnet.edit.host.dtq: reload start
27-Aug-2024 07:54:54.020 rpz: botnetcc.hacked.ip.dtq: reload start
27-Aug-2024 07:54:54.020 rpz: melbl.rpz.govcert.ch: reload start
27-Aug-2024 07:54:54.020 rpz: zone3.misc.rpz.switch.ch: reload start
27-Aug-2024 07:54:54.020 rpz: zone3.ph.rpz.switch.ch: reload start
27-Aug-2024 07:54:54.020 rpz: phish.edit.host.dtq: reload start
27-Aug-2024 07:54:54.020 rpz: special-rewrites-rpz.arcade.ch: reload start
27-Aug-2024 07:54:54.020 rpz: bad-nameservers.ip.dtq: reload start
27-Aug-2024 07:54:54.020 rpz: bogons.ip.dtq: reload start
27-Aug-2024 07:54:54.020 rpz: zone3.mw.rpz.switch.ch: reload start
27-Aug-2024 07:54:54.020 rpz: badrep.edit.host.dtq: reload start
27-Aug-2024 07:54:54.020 rpz: blacklist-rpz.arcade.ch: reload start
27-Aug-2024 07:54:54.020 rpz: malware.hacked.host.dtq: reload start
27-Aug-2024 07:54:54.020 rpz: coinblocker.srv: reload start
27-Aug-2024 07:54:54.020 rpz: malware.host.dtq: reload start
27-Aug-2024 07:54:54.020 rpz: badrep.host.dtq: reload start
27-Aug-2024 07:54:54.020 rpz: botnet.host.dtq: reload start
27-Aug-2024 07:54:54.020 rpz: botnetcc.hacked.host.dtq: reload start
27-Aug-2024 07:54:54.020 rpz: phish.hacked.host.dtq: reload start
27-Aug-2024 07:54:54.020 rpz: drop.ip.dtq: reload start
27-Aug-2024 07:54:54.020 rpz: torblock.srv: reload start
27-Aug-2024 07:54:54.020 rpz: phish.host.dtq: reload start
27-Aug-2024 07:54:54.020 rpz: dga.host.dtq: reload start
27-Aug-2024 07:54:54.020 rpz: mozilla-doh-blacklist.zone: reload start
27-Aug-2024 07:54:54.020 rpz: adware.edit.host.dtq: reload start
27-Aug-2024 07:54:54.020 rpz: malware.edit.host.dtq: reload start
27-Aug-2024 07:54:54.020 rpz: badrep.hacked.host.dtq: reload start
27-Aug-2024 07:54:54.020 rpz: botnetcc.ip.dtq: reload start
27-Aug-2024 07:54:54.020 rpz: zone.wl.rpz.switch.ch: reload start
27-Aug-2024 07:54:54.020 rpz: malware.domains.dtq: reload start
27-Aug-2024 07:54:54.021 rpz: adware.host.dtq: reload done: success
27-Aug-2024 07:54:54.021 rpz: whitelist-rpz.arcade.ch: reload done: success
27-Aug-2024 07:54:54.022 rpz: melblip.rpz.govcert.ch: reload done: success
27-Aug-2024 07:54:54.022 rpz: urlhaus.rpz.govcert.ch: reload done: success
27-Aug-2024 07:54:54.024 rpz: botnetcc.edit.host.dtq: reload done: success
27-Aug-2024 07:54:54.025 rpz: phishdb.rpz.govcert.ch: reload done: success
27-Aug-2024 07:54:54.030 rpz: melmisp.rpz.govcert.ch: reload done: success
27-Aug-2024 07:54:54.030 rpz: botnet.edit.host.dtq: reload done: success
27-Aug-2024 07:54:54.030 rpz: botnetcc.hacked.ip.dtq: reload done: success
27-Aug-2024 07:54:54.030 rpz: melbl.rpz.govcert.ch: reload done: success
27-Aug-2024 07:54:54.032 rpz: botnetcc.host.dtq: reload done: success
27-Aug-2024 07:54:54.034 rpz: zone3.misc.rpz.switch.ch: reload done: success
27-Aug-2024 07:54:54.037 managed-keys-zone: Key 20326 for zone . is now trusted (acceptance timer complete)
27-Aug-2024 07:54:54.045 rpz: bad-nameservers.host.dtq: reload done: success
27-Aug-2024 07:54:54.045 rpz: special-rewrites-rpz.arcade.ch: reload done: success
27-Aug-2024 07:54:54.057 rpz: bad-nameservers.ip.dtq: reload done: success
27-Aug-2024 07:54:54.070 rpz: dynamicdns.rpz.govcert.ch: reload done: success
27-Aug-2024 07:54:54.101 rpz: zone3.ph.rpz.switch.ch: reload done: success
27-Aug-2024 07:54:55.247 rpz: bogons.ip.dtq: reload done: success
27-Aug-2024 07:54:55.248 rpz: blacklist-rpz.arcade.ch: reload done: success
27-Aug-2024 07:54:55.256 rpz: malware.hacked.host.dtq: reload done: success
27-Aug-2024 07:54:55.905 rpz: coinblocker.srv: reload done: success
27-Aug-2024 07:54:56.039 rpz: malware.host.dtq: reload done: success
27-Aug-2024 07:54:56.393 rpz: phish.edit.host.dtq: reload done: success
27-Aug-2024 07:54:56.393 rpz: botnet.host.dtq: reload done: success
27-Aug-2024 07:54:56.393 rpz: botnetcc.hacked.host.dtq: reload done: success
27-Aug-2024 07:54:56.409 rpz: phish.hacked.host.dtq: reload done: success
27-Aug-2024 07:54:56.412 rpz IP address "48" is not the canonical "48.zz.6c4.678.2001"
27-Aug-2024 07:54:56.412 rpz IP address "48" is not the canonical "48.zz.724.678.2001"
27-Aug-2024 07:54:56.412 rpz IP address "48" is not the canonical "48.zz.738.678.2001"
27-Aug-2024 07:54:56.412 rpz IP address "48" is not the canonical "48.zz.73c.678.2001"
27-Aug-2024 07:54:56.412 rpz IP address "48" is not the canonical "48.zz.754.678.2001"
27-Aug-2024 07:54:56.412 rpz IP address "48" is not the canonical "48.zz.758.678.2001"
27-Aug-2024 07:54:56.412 rpz IP address "48" is not the canonical "48.zz.770.678.2001"
27-Aug-2024 07:54:56.412 rpz IP address "48" is not the canonical "48.zz.780.678.2001"
27-Aug-2024 07:54:56.412 rpz IP address "48" is not the canonical "48.zz.788.678.2001"
27-Aug-2024 07:54:56.412 rpz IP address "48" is not the canonical "48.zz.c5c.678.2001"
27-Aug-2024 07:54:56.412 rpz IP address "48" is not the canonical "48.zz.e38.678.2001"
27-Aug-2024 07:54:56.412 rpz IP address "48" is not the canonical "48.zz.e4c.678.2001"
27-Aug-2024 07:54:56.413 rpz IP address "48" is not the canonical "48.zz.1760.2401"
27-Aug-2024 07:54:56.413 rpz IP address "32" is not the canonical "32.zz.c580.2401"
27-Aug-2024 07:54:56.413 rpz IP address "32" is not the canonical "32.zz.6680.2402"
27-Aug-2024 07:54:56.413 rpz IP address "48" is not the canonical "48.zz.1.9fc0.2405"
27-Aug-2024 07:54:56.413 rpz IP address "32" is not the canonical "32.zz.b180.2405"
27-Aug-2024 07:54:56.413 rpz IP address "32" is not the canonical "32.zz.b480.2405"
27-Aug-2024 07:54:56.413 rpz IP address "32" is not the canonical "32.zz.e880.2405"
27-Aug-2024 07:54:56.413 rpz IP address "48" is not the canonical "48.zz.1.f915.2602"
27-Aug-2024 07:54:56.413 rpz IP address "40" is not the canonical "40.zz.f91d.2602"
27-Aug-2024 07:54:56.413 rpz IP address "36" is not the canonical "36.zz.ffa0.2602"
27-Aug-2024 07:54:56.413 rpz IP address "32" is not the canonical "32.zz.d100.2607"
27-Aug-2024 07:54:56.413 rpz IP address "32" is not the canonical "32.zz.f2d0.2607"
27-Aug-2024 07:54:56.413 rpz IP address "48" is not the canonical "48.zz.c00.80.2801"
27-Aug-2024 07:54:56.413 rpz IP address "48" is not the canonical "48.zz.ffff.5380.2803"
27-Aug-2024 07:54:56.413 rpz IP address "32" is not the canonical "32.zz.8700.2803"
27-Aug-2024 07:54:56.413 rpz IP address "29" is not the canonical "29.zz.4c80.2a00"
27-Aug-2024 07:54:56.413 rpz IP address "32" is not the canonical "32.zz.55a0.2a00"
27-Aug-2024 07:54:56.413 rpz IP address "39" is not the canonical "39.zz.a000.b0c6.2a05"
27-Aug-2024 07:54:56.413 rpz IP address "39" is not the canonical "39.zz.a200.b0c6.2a05"
27-Aug-2024 07:54:56.413 rpz IP address "36" is not the canonical "36.zz.6000.b0c7.2a05"
27-Aug-2024 07:54:56.413 rpz IP address "29" is not the canonical "29.zz.b440.2a06"
27-Aug-2024 07:54:56.413 rpz IP address "29" is not the canonical "29.zz.d240.2a06"
27-Aug-2024 07:54:56.413 rpz IP address "29" is not the canonical "29.zz.e480.2a06"
27-Aug-2024 07:54:56.413 rpz IP address "36" is not the canonical "36.zz.3000.e80.2a06"
27-Aug-2024 07:54:56.413 rpz IP address "29" is not the canonical "29.zz.4180.2a07"
27-Aug-2024 07:54:56.413 rpz IP address "29" is not the canonical "29.zz.5780.2a07"
27-Aug-2024 07:54:56.413 rpz IP address "29" is not the canonical "29.zz.5c0.2a07"
27-Aug-2024 07:54:56.413 rpz IP address "29" is not the canonical "29.zz.6800.2a07"
27-Aug-2024 07:54:56.413 rpz IP address "29" is not the canonical "29.zz.7700.2a07"
27-Aug-2024 07:54:56.413 rpz IP address "29" is not the canonical "29.zz.9b80.2a07"
27-Aug-2024 07:54:56.413 rpz IP address "29" is not the canonical "29.zz.b300.2a07"
27-Aug-2024 07:54:56.413 rpz IP address "29" is not the canonical "29.zz.ac80.2a09"
27-Aug-2024 07:54:56.413 rpz IP address "29" is not the canonical "29.zz.36c0.2a0a"
27-Aug-2024 07:54:56.413 rpz IP address "48" is not the canonical "48.zz.938.53c0.2a0a"
27-Aug-2024 07:54:56.413 rpz IP address "29" is not the canonical "29.zz.6240.2a0a"
27-Aug-2024 07:54:56.413 rpz IP address "29" is not the canonical "29.zz.6340.2a0a"
27-Aug-2024 07:54:56.413 rpz IP address "29" is not the canonical "29.zz.a840.2a0a"
27-Aug-2024 07:54:56.413 rpz IP address "29" is not the canonical "29.zz.c00.2a0a"
27-Aug-2024 07:54:56.413 rpz IP address "29" is not the canonical "29.zz.ed80.2a0a"
27-Aug-2024 07:54:56.413 rpz IP address "29" is not the canonical "29.zz.3e80.2a0b"
27-Aug-2024 07:54:56.413 rpz IP address "29" is not the canonical "29.zz.4ec0.2a0b"
27-Aug-2024 07:54:56.413 rpz IP address "29" is not the canonical "29.zz.ae80.2a0b"
27-Aug-2024 07:54:56.413 rpz IP address "29" is not the canonical "29.zz.f500.2a0b"
27-Aug-2024 07:54:56.413 rpz IP address "29" is not the canonical "29.zz.fdc0.2a0b"
27-Aug-2024 07:54:56.413 rpz IP address "32" is not the canonical "32.zz.6c2.2a0d"
27-Aug-2024 07:54:56.413 rpz IP address "29" is not the canonical "29.zz.c700.2a0d"
27-Aug-2024 07:54:56.413 rpz IP address "48" is not the canonical "48.zz.ffff.e7c7.2a0d"
27-Aug-2024 07:54:56.413 rpz IP address "48" is not the canonical "48.zz.1572.b107.2a0e"
27-Aug-2024 07:54:56.413 rpz IP address "48" is not the canonical "48.zz.1574.b107.2a0e"
27-Aug-2024 07:54:56.413 rpz IP address "44" is not the canonical "44.zz.1a10.b107.2a0e"
27-Aug-2024 07:54:56.413 rpz IP address "48" is not the canonical "48.zz.7220.d601.2a0e"
27-Aug-2024 07:54:56.413 rpz IP address "48" is not the canonical "48.zz.1.d604.2a0e"
27-Aug-2024 07:54:56.413 rpz IP address "29" is not the canonical "29.zz.fa00.2a0e"
27-Aug-2024 07:54:56.413 rpz IP address "48" is not the canonical "48.zz.215.2f01.2a10"
27-Aug-2024 07:54:56.413 rpz IP address "29" is not the canonical "29.zz.9700.2a10"
27-Aug-2024 07:54:56.413 rpz IP address "44" is not the canonical "44.zz.100.cc45.2a10"
27-Aug-2024 07:54:56.413 rpz IP address "29" is not the canonical "29.zz.2640.2a12"
27-Aug-2024 07:54:56.413 rpz IP address "30" is not the canonical "30.zz.6740.2a12"
27-Aug-2024 07:54:56.413 rpz IP address "40" is not the canonical "40.zz.8500.dd47.2a12"
27-Aug-2024 07:54:56.413 rpz IP address "38" is not the canonical "38.zz.a800.df80.2a13"
27-Aug-2024 07:54:56.413 rpz IP address "32" is not the canonical "32.zz.df84.2a13"
27-Aug-2024 07:54:56.413 rpz IP address "39" is not the canonical "39.zz.b600.df87.2a13"
27-Aug-2024 07:54:56.414 rpz IP address "32" is not the canonical "32.zz.ef45.2a13"
27-Aug-2024 07:54:56.414 rpz IP address "40" is not the canonical "40.zz.1e00.7c0.2a14"
27-Aug-2024 07:54:56.414 rpz IP address "32" is not the canonical "32.zz.7c2.2a14"
27-Aug-2024 07:54:56.414 rpz IP address "32" is not the canonical "32.zz.7c3.2a14"
27-Aug-2024 07:54:56.415 rpz: drop.ip.dtq: reload done: success
27-Aug-2024 07:54:56.420 rpz: torblock.srv: reload done: success
$ ./digger_arcade.sh 
Tue Aug 27 07:54:45 CEST 2024: timed out
Tue Aug 27 07:54:46 CEST 2024: timed out
Tue Aug 27 07:54:48 CEST 2024: timed out
Tue Aug 27 07:54:49 CEST 2024: timed out
Tue Aug 27 07:54:51 CEST 2024: timed out
Tue Aug 27 07:54:52 CEST 2024: timed out
Tue Aug 27 07:54:54 CEST 2024: www.arcade.ch.		598	IN	A	46.22.30.93
Tue Aug 27 07:54:55 CEST 2024: www.arcade.ch.		597	IN	A	46.22.30.93
Tue Aug 27 07:54:55 CEST 2024: www.arcade.ch.		597	IN	A	46.22.30.93
Tue Aug 27 07:54:56 CEST 2024: www.arcade.ch.		596	IN	A	46.22.30.93
Tue Aug 27 07:54:56 CEST 2024: www.arcade.ch.		596	IN	A	46.22.30.93
Tue Aug 27 07:54:57 CEST 2024: www.arcade.ch.		595	IN	A	46.22.30.93
Tue Aug 27 07:54:57 CEST 2024: www.arcade.ch.		595	IN	A	46.22.30.93
Tue Aug 27 07:54:58 CEST 2024: www.arcade.ch.		594	IN	A	46.22.30.93
$ ./digger.sh 
Tue Aug 27 07:54:43 CEST 2024: timed out
Tue Aug 27 07:54:44 CEST 2024: timed out
Tue Aug 27 07:54:46 CEST 2024: timed out
Tue Aug 27 07:54:47 CEST 2024: timed out
Tue Aug 27 07:54:49 CEST 2024: timed out
Tue Aug 27 07:54:51 CEST 2024: timed out
Tue Aug 27 07:54:52 CEST 2024: timed out
Tue Aug 27 07:54:54 CEST 2024: bind9test.rc8.ch.	5	IN	A	127.0.0.1
Tue Aug 27 07:54:54 CEST 2024: bind9test.rc8.ch.	5	IN	A	127.0.0.1
Tue Aug 27 07:54:55 CEST 2024: bind9test.rc8.ch.	4	IN	A	127.0.0.1
Tue Aug 27 07:54:55 CEST 2024: bind9test.rc8.ch.	4	IN	A	127.0.0.1
Tue Aug 27 07:54:56 CEST 2024: bind9test.rc8.ch.	3	IN	A	127.0.0.1
Tue Aug 27 07:54:56 CEST 2024: bind9test.rc8.ch.	3	IN	A	127.0.0.1
Tue Aug 27 07:54:57 CEST 2024: bind9test.rc8.ch.	2	IN	A	127.0.0.1

As we can see above, BIND-9.18.24 responds much faster (after about 8s) for recursive queries than BIND-9.20.1 after a fresh startup.

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information