DNS 温泉 11 LT (2025)

反復クエリ数の上限について　　
--- やっぱり外部名は醜い ---　　

Aug 22-23, 2025 @琵琶湖グランドホテル

鈴木常彦 @E-ONTAP.COM


データ採取スクリプト

#!/bin/sh
QNAME=$1
TYPE=$2
IP=`ifconfig em0 | grep "inet "| cut -w -f 3`
TIME=`date +%s`
brew services restart unbound
unbound-control flush_zone .
# キャッシュ大サービス
#dig ns jp @$IP +noall; dig ns com @$IP +noall; dig ns net @$IP +noall
#dig ns org @$IP +noall;dig ns uk @$IP +noall; dig ns info @$IP +noall; dig ns biz @$IP +noall;
#dig ns d-53.jp @$IP +noall; dig ns d-53.info @$IP +noall; dig ns d-53.net @$IP +noall
#sleep 2
tshark -a duration:4 -l -Q -i em0 -T fields -e ip.dst -e dns.qry.name -e dns.qry.type -n \
dst port 53 and udp > query.$QNAME.$TIME &
sleep 1
dig $QNAME $TYPE @$IP +retry=0

unbound.conf の以下のオプションに注意

# Limit on upstream queries for an incoming query and its recursion.
# max-global-quota: 200

unbound.log

[1755602439] unbound[10573:0] debug: request c.gtld-servers.net. has exceeded the maximum global quota on number of upstream queries 201

WWW.E-ONTAP.COM

harden-referral-path: no / qname-minimisation: no / module-config: "iterator" / disable-edns-do: yes
6行

192.36.148.17	<Root>	2 
192.36.148.17	www.e-ontap.com	1    ... e.root-servers.net
192.33.14.30	www.e-ontap.com	1    ... b.gtld-servers.net
14.192.44.1	www.e-ontap.com	1    ... ns.e-ontap.com
49.212.106.253	ns.e-ontap.com	28   ... ns2.e-ontap.com
14.192.44.1	ns2.e-ontap.com	28
TYPE: 1: A, 2: NS, 28: AAAA

WWW.E-ONTAP.COM

harden-referral-path: no / qname-minimisation: yes / module-config: "iterator" / disable-edns-do: yes
8行

198.41.0.4	<Root>	2
198.97.190.53	com	1
192.5.6.30	e-ontap.com	1
49.212.106.253	www.e-ontap.com	1
14.192.44.1	ns.e-ontap.com	1
49.212.106.253	ns2.e-ontap.com	1
14.192.44.1	ns.e-ontap.com	28
49.212.106.253	ns2.e-ontap.com	28

WWW.E-ONTAP.COM

harden-referral-path: yes / qname-minimisation: yes / module-config: "iterator" / disable-edns-do: yes
55行

192.36.148.17	<Root>	2
192.203.230.10	<Root>	2
192.5.5.241	<Root>	2
202.12.27.33	net	1
198.41.0.4	net	1
198.97.190.53	net	1
192.203.230.10	net	1
192.36.148.17	net	1
199.7.83.42	net	1
170.247.170.2	net	1
192.112.36.4	net	1
199.7.91.13	net	1
193.0.14.129	net	1
170.247.170.2	m.root-servers.net	1
170.247.170.2	f.root-servers.net	1
192.203.230.10	c.root-servers.net	28
193.0.14.129	b.root-servers.net	1
202.12.27.33	www.e-ontap.com	1
192.43.172.30	root-servers.net	1
192.33.14.30	root-servers.net	1
192.58.128.30	net	2
192.52.178.30	root-servers.net	1
192.41.162.30	root-servers.net	1
192.42.93.30	root-servers.net	1
192.31.80.30	root-servers.net	1
192.35.51.30	root-servers.net	1
192.12.94.30	j.root-servers.net	1
192.5.6.30	root-servers.net	1
192.41.162.30	g.root-servers.net	1
202.12.27.33	com	1
192.31.80.30	www.e-ontap.com	1
192.12.94.30	root-servers.net	1
192.35.51.30	m.root-servers.net	28
192.41.162.30	gtld-servers.net	1
192.52.178.30	gtld-servers.net	1
192.26.92.30	gtld-servers.net	1
192.55.83.30	gtld-servers.net	1
192.48.79.30	gtld-servers.net	1
192.5.6.30	gtld-servers.net	1
192.43.172.30	gtld-servers.net	1
192.42.93.30	gtld-servers.net	1
192.31.80.30	gtld-servers.net	1
192.12.94.30	net	2
192.42.93.30	e.gtld-servers.net	28
192.42.93.30	h.gtld-servers.net	1
192.112.36.4	j.root-servers.net	1
199.7.91.13	l.root-servers.net	1
192.112.36.4	d.root-servers.net	1
192.33.14.30	com	2
192.33.4.12	g.root-servers.net	28
49.212.106.253	www.e-ontap.com	1
192.48.79.30	e-ontap.com	1
192.48.79.30	e-ontap.com	1
192.42.93.30	ns.e-ontap.com	28
192.58.128.30	a.root-servers.net	28

WWW.E-ONTAP.COM

harden-referral-path: yes / qname-minimisation: no / module-config: "iterator" / disable-edns-do: yes
110行

202.12.27.33    <Root>  2
198.41.0.4      k.root-servers.net      1
192.58.128.30   b.root-servers.net      1
192.112.36.4    d.root-servers.net      1
192.203.230.10  l.root-servers.net      28
192.203.230.10  f.root-servers.net      1
202.12.27.33    e.root-servers.net      1
193.0.14.129    j.root-servers.net      1
192.203.230.10  h.root-servers.net      1
199.7.83.42     i.root-servers.net      28
192.36.148.17   g.root-servers.net      28
192.203.230.10  d.root-servers.net      28
192.203.230.10  c.root-servers.net      28
198.41.0.4      www.e-ontap.com 1
198.41.0.4      l.root-servers.net      1
170.247.170.2   a.root-servers.net      28
192.5.5.241     c.root-servers.net      1
198.41.0.4      k.root-servers.net      28
192.58.128.30   e.root-servers.net      28
192.33.4.12     b.root-servers.net      28
199.7.91.13     h.root-servers.net      28
199.7.91.13     f.root-servers.net      28
192.203.230.10  g.root-servers.net      1
199.7.83.42     j.root-servers.net      28
192.36.148.17   i.root-servers.net      1
192.33.4.12     a.root-servers.net      1
199.7.91.13     m.root-servers.net      1
193.0.14.129    m.root-servers.net      28
192.48.79.30    www.e-ontap.com 1
192.58.128.30   com     2
192.12.94.30    com     2
198.97.190.53   l.gtld-servers.net      1
193.0.14.129    a.gtld-servers.net      28
199.7.83.42     c.gtld-servers.net      1
198.41.0.4      g.gtld-servers.net      1
202.12.27.33    e.gtld-servers.net      1
198.97.190.53   h.gtld-servers.net      28
192.112.36.4    m.gtld-servers.net      1
192.36.148.17   f.gtld-servers.net      28
192.58.128.30   f.gtld-servers.net      1
199.7.83.42     m.gtld-servers.net      28
192.112.36.4    h.gtld-servers.net      1
192.33.4.12     k.gtld-servers.net      1
199.7.91.13     i.gtld-servers.net      1
199.7.91.13     a.gtld-servers.net      1
170.247.170.2   g.gtld-servers.net      28
192.203.230.10  j.gtld-servers.net      1
192.112.36.4    d.gtld-servers.net      28
202.12.27.33    b.gtld-servers.net      28
193.0.14.129    k.gtld-servers.net      28
198.41.0.4      j.gtld-servers.net      28
170.247.170.2   e.gtld-servers.net      28
202.12.27.33    d.gtld-servers.net      1
198.41.0.4      b.gtld-servers.net      1
198.41.0.4      c.gtld-servers.net      28
198.41.0.4      l.gtld-servers.net      28
193.0.14.129    i.gtld-servers.net      28
192.33.4.12     net     2
192.41.162.30   l.gtld-servers.net      1
192.26.92.30    a.gtld-servers.net      28
192.55.83.30    h.gtld-servers.net      28
192.41.162.30   e.gtld-servers.net      1
192.54.112.30   f.gtld-servers.net      28
192.43.172.30   i.gtld-servers.net      1
192.12.94.30    a.gtld-servers.net      1
192.35.51.30    j.gtld-servers.net      1
192.26.92.30    f.gtld-servers.net      1
192.33.14.30    b.gtld-servers.net      28
192.54.112.30   m.gtld-servers.net      1
192.12.94.30    g.gtld-servers.net      1
192.5.6.30      k.gtld-servers.net      28
192.42.93.30    h.gtld-servers.net      1
192.33.14.30    d.gtld-servers.net      1
192.54.112.30   d.gtld-servers.net      28
192.33.14.30    j.gtld-servers.net      28
192.35.51.30    i.gtld-servers.net      28
192.55.83.30    l.gtld-servers.net      28
192.5.6.30      c.gtld-servers.net      28
192.42.93.30    b.gtld-servers.net      1
192.54.112.30   av4.nstld.com   1
192.112.36.4    gtld-servers.net        2
192.42.93.30    av4.nstld.com   28
192.55.83.30    av2.nstld.com   28
192.54.112.30   av2.nstld.com   1
192.26.92.30    av1.nstld.com   1
192.35.51.30    av1.nstld.com   28
192.54.112.30   av3.nstld.com   28
192.55.83.30    av3.nstld.com   1
192.41.162.30   gtld-servers.net        2
192.26.92.30    nstld.com       2
192.82.133.30   av1.nstld.com   1
192.33.14.30    g.gtld-servers.net      28
192.42.177.30   b.gtld-servers.net      28
192.42.177.30   c.gtld-servers.net      28
192.42.177.30   f.gtld-servers.net      1
192.42.177.30   nstld.com       2
14.192.44.1     www.e-ontap.com 1
192.55.83.30    ns2.e-ontap.com 28
192.43.172.30   e-ontap.com     2
192.42.93.30    ns.e-ontap.com  28
192.42.177.30   g.gtld-servers.net      28
192.35.51.30    e.gtld-servers.net      28
192.42.178.30   i.gtld-servers.net      1
192.42.177.30   f.gtld-servers.net      28
192.42.177.30   m.gtld-servers.net      1
192.42.178.30   j.gtld-servers.net      1
192.82.133.30   av4.nstld.com   1
192.82.134.30   i.gtld-servers.net      28
192.82.134.30   h.gtld-servers.net      1
192.82.133.30   d.gtld-servers.net      28

WWW.MUFJ.JP

harden-referral-path: no / qname-minimisation: no / module-config: "iterator" / disable-edns-do: yes
8行

192.58.128.30	<Root>	2
199.7.91.13	www.mufj.jp	1
202.12.30.131	www.mufj.jp	1
202.12.30.131	g.dns.jp	28
153.127.64.61	www.mufj.jp	1
153.127.64.61	ns.mufj.jp	28
150.100.6.12	g.dns.jp	28
203.119.40.4	nsg.dns.jp	28

WWW.MUFJ.JP

harden-referral-path: no / qname-minimisation: no / module-config: "validator iterator" / disable-edns-do: no
12行

192.5.5.241     <Root>  2
192.58.128.30   www.mufj.jp     1
210.138.175.244 g.dns.jp        28
156.154.100.5   www.mufj.jp     1
203.119.40.4    nsg.dns.jp      28
202.12.30.134   g.dns.jp        28
153.127.64.61   www.mufj.jp     1
153.127.64.61   ns.mufj.jp      28
192.36.148.17   <Root>  48  ... DNSKEY
192.203.230.10  _ta-4f66-9728   10  ... RFC 8145: Signaling Trust Anchor Knowledge in DNS Security Extensions (DNSSEC)
210.138.175.244 jp      48
153.127.64.61   mufj.jp 48

WWW.MUFJ.JP

harden-referral-path: yes / qname-minimisation: no / module-config: "validator iterator" / disable-edns-do: no
220行

198.41.0.4	<Root>	2
192.33.4.12	m.root-servers.net	28
192.33.4.12	a.root-servers.net	1
192.33.4.12	m.root-servers.net	1
198.97.190.53	j.root-servers.net	1
198.41.0.4	e.root-servers.net	28
198.97.190.53	h.root-servers.net	1
198.41.0.4	f.root-servers.net	1
198.97.190.53	i.root-servers.net	28
192.5.5.241	h.root-servers.net	28
202.12.27.33	g.root-servers.net	28
170.247.170.2	i.root-servers.net	1
192.5.5.241	k.root-servers.net	28
198.97.190.53	b.root-servers.net	28
192.5.5.241	c.root-servers.net	28
192.58.128.30	_ta-4f66-9728	10
192.36.148.17	e.root-servers.net	1
202.12.27.33	d.root-servers.net	1
202.12.27.33	<Root>	48
199.7.91.13	l.root-servers.net	28
192.33.4.12	j.root-servers.net	28
192.36.148.17	c.root-servers.net	1
192.112.36.4	k.root-servers.net	1
202.12.27.33	d.root-servers.net	28
199.7.91.13	l.root-servers.net	1
170.247.170.2	g.root-servers.net	1
192.36.148.17	b.root-servers.net	1
192.203.230.10	a.root-servers.net	28
192.33.4.12	f.root-servers.net	28
192.58.128.30	www.mufj.jp	1
192.112.36.4	j.root-servers.net	1
198.41.0.4	h.root-servers.net	1
202.12.27.33	i.root-servers.net	28
192.203.230.10	h.root-servers.net	28
193.0.14.129	g.root-servers.net	28
199.7.91.13	k.root-servers.net	28
192.33.4.12	e.root-servers.net	28
192.5.5.241	b.root-servers.net	28
202.12.27.33	c.root-servers.net	28
193.0.14.129	f.root-servers.net	1
202.12.27.33	e.root-servers.net	1
199.7.91.13	c.root-servers.net	1
170.247.170.2	d.root-servers.net	1
193.0.14.129	l.root-servers.net	28
193.0.14.129	k.root-servers.net	1
198.97.190.53	h.root-servers.net	28
192.5.5.241	i.root-servers.net	28
150.100.6.8	www.mufj.jp	1
198.97.190.53	g.dns.jp	28
199.7.91.13	jp	2
192.58.128.30	g.root-servers.net	28
202.12.27.33	h.root-servers.net	1
192.203.230.10	k.root-servers.net	28
202.12.27.33	b.root-servers.net	28
202.12.27.33	f.root-servers.net	1
192.5.5.241	l.root-servers.net	28
192.33.4.12	h.root-servers.net	28
202.12.30.131	g.dns.jp	28
203.119.40.1	jp	2
156.154.100.5	a.dns.jp	28
202.12.30.131	c.dns.jp	1
203.119.40.1	c.dns.jp	28
202.12.30.131	d.dns.jp	28
203.119.1.1	b.dns.jp	28
203.119.1.1	h.dns.jp	1
202.12.30.131	b.dns.jp	1
203.119.1.1	e.dns.jp	1
202.12.30.131	f.dns.jp	1
203.119.1.1	d.dns.jp	1
150.100.6.8	h.dns.jp	28
203.119.40.1	a.dns.jp	1
202.12.30.131	g.dns.jp	1
156.154.100.5	e.dns.jp	28
170.247.170.2	h.root-servers.net	1
150.100.6.8	f.dns.jp	28
153.127.64.61	www.mufj.jp	1
192.33.4.12	b.root-servers.net	28
203.119.40.1	mufj.jp	2
210.138.175.244	ns.mufj.jp	28
198.97.190.53	f.root-servers.net	1
193.0.14.129	net	43  ...(DS)
202.12.30.131	jp	48  ...(DNSKEY)
210.138.175.245	c.dns.jp	28
150.100.6.12	g.dns.jp	28
153.127.64.61	ns.mufj.jp	1
153.127.64.61	mufj.jp	2
210.138.175.245	b.dns.jp	1
150.100.6.12	e.dns.jp	28
153.127.64.61	ns.mufj.jp	28
203.119.40.4	a.dns.jp	28
210.138.175.245	g.dns.jp	1
150.100.6.8	dns.jp	2
203.119.1.4	e.dns.jp	1
150.100.6.12	h.dns.jp	28
192.203.230.10	i.root-servers.net	1
203.119.40.4	a.dns.jp	1
203.119.40.4	b.dns.jp	28
210.138.175.245	h.dns.jp	1
203.119.40.4	f.dns.jp	28
203.119.1.1	nsg.dns.jp	28
150.100.6.12	d.dns.jp	1
203.119.1.4	d.dns.jp	28
203.119.1.4	f.dns.jp	1
198.97.190.53	m.root-servers.net	28
192.58.128.30	net	48
198.41.0.4	i.root-servers.net	1
210.138.175.245	nsf.dns.jp	1
202.12.30.134	nsb.dns.jp	28
203.119.40.4	nsa.dns.jp	28
203.119.1.4	nsd.dns.jp	1
150.100.6.12	nsa.dns.jp	1
203.119.40.4	nsb.dns.jp	1
150.100.6.12	dns.jp	2
203.119.1.4	nsg.dns.jp	1
150.100.6.12	nse.dns.jp	28
192.58.128.30	a.root-servers.net	1
150.100.6.12	nse.dns.jp	1
203.119.40.4	nsd.dns.jp	28
202.12.30.134	nsf.dns.jp	28
192.112.36.4	m.root-servers.net	1
203.119.1.4	nsg.dns.jp	28
199.7.91.13	m.root-servers.net	28
170.247.170.2	j.root-servers.net	28
153.127.64.61	mufj.jp	48
150.100.6.8	dns.jp	43
198.97.190.53	e.root-servers.net	28
192.112.36.4	net	2
192.26.92.30	net	48
192.5.5.241	a.root-servers.net	1
193.0.14.129	e.root-servers.net	28
192.36.148.17	root-servers.net	43
192.35.51.30	net	2
192.41.162.30	m.gtld-servers.net	28
192.35.51.30	c.gtld-servers.net	1
192.12.94.30	f.gtld-servers.net	28
192.41.162.30	e.gtld-servers.net	1
192.54.112.30	g.gtld-servers.net	28
192.54.112.30	h.gtld-servers.net	1
192.43.172.30	f.gtld-servers.net	1
192.41.162.30	d.gtld-servers.net	28
192.31.80.30	c.gtld-servers.net	28
192.54.112.30	h.gtld-servers.net	28
192.33.14.30	k.gtld-servers.net	1
192.26.92.30	a.gtld-servers.net	28
192.52.178.30	l.gtld-servers.net	1
192.43.172.30	i.gtld-servers.net	28
192.31.80.30	j.gtld-servers.net	28
192.33.14.30	k.gtld-servers.net	28
192.12.94.30	l.gtld-servers.net	28
192.26.92.30	b.gtld-servers.net	28
192.35.51.30	m.gtld-servers.net	1
192.43.172.30	e.gtld-servers.net	28
192.48.79.30	g.gtld-servers.net	1
192.48.79.30	j.gtld-servers.net	1
192.52.178.30	b.gtld-servers.net	1
192.33.14.30	a.gtld-servers.net	1
192.35.51.30	i.gtld-servers.net	1
192.5.6.30	d.gtld-servers.net	1
192.41.162.30	root-servers.net	43
192.35.51.30	gtld-servers.net	2
192.5.5.241	av1.nstld.com	1
198.41.0.4	av1.nstld.com	28
192.112.36.4	av2.nstld.com	1
192.36.148.17	av2.nstld.com	28
192.112.36.4	av3.nstld.com	28
198.97.190.53	av3.nstld.com	1
192.36.148.17	av4.nstld.com	28
198.41.0.4	av4.nstld.com	1
192.35.51.30	av1.nstld.com	1
202.12.27.33	com	2
192.42.93.30	av1.nstld.com	28
192.5.6.30	av2.nstld.com	28
192.31.80.30	av3.nstld.com	1
202.12.30.134	c.dns.jp	1
192.112.36.4	j.root-servers.net	28
192.35.51.30	av2.nstld.com	1
192.42.93.30	av4.nstld.com	1
192.35.51.30	av4.nstld.com	28
192.31.80.30	com	2
192.55.83.30	av3.nstld.com	28
192.48.79.30	nstld.com	2
192.82.134.30	av2.nstld.com	28
192.82.133.30	av3.nstld.com	1
192.5.6.30	com	48
192.42.178.30	c.gtld-servers.net	1
192.42.177.30	g.gtld-servers.net	28
192.82.133.30	d.gtld-servers.net	1
192.82.133.30	k.gtld-servers.net	1
192.82.133.30	a.gtld-servers.net	1
192.82.133.30	h.gtld-servers.net	1
192.42.178.30	e.gtld-servers.net	28
192.42.177.30	f.gtld-servers.net	1
192.42.178.30	h.gtld-servers.net	28
192.42.177.30	m.gtld-servers.net	1
192.42.178.30	i.gtld-servers.net	28
192.42.177.30	i.gtld-servers.net	1
192.42.178.30	gtld-servers.net	2
192.52.178.30	gtld-servers.net	43
192.82.134.30	m.gtld-servers.net	28
192.82.133.30	av1.nstld.com	1
192.42.177.30	d.gtld-servers.net	28
192.42.177.30	e.gtld-servers.net	1
192.42.178.30	g.gtld-servers.net	1
192.82.133.30	l.gtld-servers.net	1
192.42.178.30	j.gtld-servers.net	1
192.82.133.30	av1.nstld.com	28
192.42.177.30	f.gtld-servers.net	28
192.42.177.30	k.gtld-servers.net	28
192.42.177.30	b.gtld-servers.net	28
192.82.133.30	av2.nstld.com	1
192.82.134.30	av4.nstld.com	28
192.82.134.30	av4.nstld.com	1
192.82.133.30	b.gtld-servers.net	1
192.82.134.30	l.gtld-servers.net	28
192.42.178.30	c.gtld-servers.net	28
192.42.178.30	j.gtld-servers.net	28
192.42.178.30	a.gtld-servers.net	28
192.82.133.30	av3.nstld.com	28
192.82.133.30	nstld.com	2
192.12.94.30	nstld.com	43

WWW.CHUKYO-U.AC.JP

harden-referral-path: no / qname-minimisation: no / module-config: "iterator" / disable-edns-do: yes
85行 (TLD cached: 64行/ Also d-53.[net|info|jp] 43行)

198.97.190.53   <Root>  2
192.58.128.30   www.chukyo-u.ac.jp      1
150.100.6.8     www.chukyo-u.ac.jp      1
202.12.30.131   g.dns.jp        28
203.119.40.1    ns1.hs.ctc.jp   28
210.138.175.244 ns2.dc.ctc.ad.jp        1
203.119.1.1     ns2.dc.ctc.ad.jp        28
150.100.6.8     ns1.hs.ctc.jp   1
202.12.30.134   g.dns.jp        28
210.138.175.245 nsg.dns.jp      28
198.41.0.4      ns012-5tu3le3iluf43idc.5.d-53.net       28
150.100.6.8     ns012-5tu3le3iluf43idc.5.d-53.jp        1
156.154.100.5   ns012-5tu3le3iluf43idc.5.d-53.jp        28
13.230.125.104  ns2.dc.ctc.ad.jp        1
13.230.125.104  ns1.hs.ctc.jp   28
156.154.100.5   ns013-bei8fvvc09t758i3.b.d-53.jp        1
192.203.230.10  ns012-5tu3le3iluf43idc.5.d-53.net       1
13.230.125.104  ns2.dc.ctc.ad.jp        28
192.112.36.4    ns013-bei8fvvc09t758i3.b.d-53.net       1
198.41.0.4      ns013-bei8fvvc09t758i3.b.d-53.net       28
170.247.170.2   ns012-5tu3le3iluf43idc.5.d-53.info      1
202.12.27.33    ns013-bei8fvvc09t758i3.b.d-53.info      1
192.33.4.12     ns013-bei8fvvc09t758i3.b.d-53.info      28
203.119.40.1    ns013-bei8fvvc09t758i3.b.d-53.jp        28
192.203.230.10  ns012-5tu3le3iluf43idc.5.d-53.info      28
13.230.125.104  ns1.hs.ctc.jp   1
170.247.170.2   ns.iij-dns.biz  28
192.33.4.12     ns.iij-dns.biz  1
162.159.26.71   ns012-5tu3le3iluf43idc.5.d-53.jp        28
192.54.112.30   ns012-5tu3le3iluf43idc.5.d-53.net       28
192.43.172.30   ns012-5tu3le3iluf43idc.5.d-53.net       1
162.159.27.34   ns013-bei8fvvc09t758i3.b.d-53.jp        1
218.216.176.115 www.chukyo-u.ac.jp      1
162.159.27.34   ns012-5tu3le3iluf43idc.5.d-53.jp        1
199.254.48.1    ns013-bei8fvvc09t758i3.b.d-53.info      1
162.159.26.71   ns013-bei8fvvc09t758i3.b.d-53.jp        28
199.249.121.1   ns012-5tu3le3iluf43idc.5.d-53.info      28
192.33.14.30    ns013-bei8fvvc09t758i3.b.d-53.net       1
192.12.94.30    ns013-bei8fvvc09t758i3.b.d-53.net       28
199.7.91.13     WWW-ELB-EXT-1997305994.ap-northeast-1.elb.amazonaws.com 1
192.5.6.30      ns.iij-dns.net  28
192.42.93.30    ns.iij-dns.net  1
162.159.26.71   ns012-5tu3le3iluf43idc.5.d-53.info      28
210.138.20.112  ns013-bei8fvvc09t758i3.b.d-53.net       1
192.12.94.30    WWW-ELB-EXT-1997305994.ap-northeast-1.elb.amazonaws.com 1
210.138.20.112  ns013-bei8fvvc09t758i3.b.d-53.net       28
162.159.26.71   ns.iij-dns.net  28
205.251.192.27  WWW-ELB-EXT-1997305994.ap-northeast-1.elb.amazonaws.com 1
170.247.170.2   ns-1321.awsdns-37.org   28
192.31.80.30    ns-27.awsdns-03.com     28
192.33.4.12     ns-1670.awsdns-16.co.uk 28
193.0.14.129    ns-1321.awsdns-37.org   1
199.7.91.13     ns-1670.awsdns-16.co.uk 1
156.154.101.3   ns-1670.awsdns-16.co.uk 1
199.249.120.1   ns-1321.awsdns-37.org   1
205.251.198.195 ns-27.awsdns-03.com     28
199.249.121.1   ns012-5tu3le3iluf43idc.5.d-53.info      1
205.251.197.211 ns-1670.awsdns-16.co.uk 1
205.251.198.101 ns-1321.awsdns-37.org   1
204.74.105.1    ns.iij-dns.biz  28
210.138.20.112  ns012-5tu3le3iluf43idc.5.d-53.net       1
210.138.20.112  ns012-5tu3le3iluf43idc.5.d-53.info      1
210.138.20.112  ns012-5tu3le3iluf43idc.5.d-53.net       28
162.159.26.71   ns.iij-dns.net  1
156.154.127.65  ns.iij-dns.biz  1
199.254.50.1    ns013-bei8fvvc09t758i3.b.d-53.info      28
162.159.26.71   ns.iij-dns.biz  1
199.249.120.1   ns-1321.awsdns-37.org   28
210.138.20.112  ns013-bei8fvvc09t758i3.b.d-53.info      28
205.251.198.101 ns-1321.awsdns-37.org   28
192.48.79.30    ns-982.awsdns-58.net    28
205.251.194.231 ns-1325.awsdns-37.org   28
192.43.172.30   ns-54.awsdns-06.com     28
192.12.94.30    ns-54.awsdns-06.com     1
205.251.196.40  ns-1325.awsdns-37.org   1
192.55.83.30    ns-982.awsdns-58.net    1
156.154.102.3   ns-1670.awsdns-16.co.uk 28
205.251.197.45  WWW-ELB-EXT-1997305994.ap-northeast-1.elb.amazonaws.com 1
205.251.197.211 ns-1670.awsdns-16.co.uk 28
162.159.27.34   ns013-bei8fvvc09t758i3.b.d-53.info      1
205.251.192.7   ns-54.awsdns-06.com     1
202.32.219.52   ns.iij-dns.biz  28
205.251.196.134 ns-54.awsdns-06.com     28
205.251.195.60  ns-982.awsdns-58.net    28
205.251.199.186 ns-982.awsdns-58.net    1

WWW.CHUKYO-U.AC.JP

harden-referral-path: no / qname-minimisation: yes / module-config: "iterator" / disable-edns-do: yes
146行

192.58.128.30	<Root>	2
192.112.36.4	jp	1
202.12.30.131	ac.jp	1
156.154.100.5	dns.jp	1
202.12.30.134	nsg.dns.jp	1
202.12.30.134	g.dns.jp	1
203.119.40.1	chukyo-u.ac.jp	1
210.138.175.245	nsg.dns.jp	28
150.100.6.8	ctc.jp	1
150.100.6.8	ad.jp	1
161.232.72.25	ns2.dc.ctc.ad.jp	28
202.12.30.131	ns1.hs.ctc.jp	1
150.100.6.12	g.dns.jp	28
210.138.175.245	nsg.dns.jp	28
202.12.30.131	ctc.ad.jp	1
13.230.125.104	ns1.hs.ctc.jp	1
161.232.72.25	d-53.jp	1
198.97.190.53	info	1
170.247.170.2	info	1
193.0.14.129	net	1
192.112.36.4	net	1
13.230.125.104	hs.ctc.jp	1
192.5.6.30	d-53.net	1
218.216.179.154	www.chukyo-u.ac.jp	1
13.230.125.104	dc.ctc.ad.jp	1
199.254.49.1	d-53.info	1
210.138.175.244	d-53.jp	1
192.35.51.30	d-53.net	1
192.55.83.30	d-53.net	1
13.230.125.104	ns1.hs.ctc.jp	28
192.26.92.30	d-53.net	1
192.203.230.10	com	1
210.138.20.112	b.d-53.net	1
162.159.27.34	5.d-53.jp	1
192.112.36.4	biz	1
192.58.128.30	biz	1
162.159.27.34	ns012-5tu3le3iluf43idc.5.d-53.jp	28
199.254.48.1	d-53.info	1
13.230.125.104	ns2.dc.ctc.ad.jp	1
199.249.113.1	d-53.info	1
210.138.20.112	b.d-53.info	1
192.54.112.30	amazonaws.com	1
210.138.20.112	ns013-bei8fvvc09t758i3.b.d-53.net	1
203.119.1.1	iij-dns.jp	1
156.154.100.5	iij-dns.jp	1
37.209.192.13	iij-dns.biz	1
162.159.26.71	ns013-bei8fvvc09t758i3.b.d-53.info	1
162.159.26.71	b.d-53.net	1
210.138.20.112	5.d-53.info	1
13.230.125.104	ns2.dc.ctc.ad.jp	1
156.154.124.65	iij-dns.biz	1
210.138.20.112	ns013-bei8fvvc09t758i3.b.d-53.net	28
162.159.27.34	ns.iij-dns.jp	1
162.159.26.71	ns.iij-dns.jp	1
202.32.219.52	ns.iij-dns.biz	1
210.138.20.112	ns012-5tu3le3iluf43idc.5.d-53.info	1
162.159.27.34	ns013-bei8fvvc09t758i3.b.d-53.net	1
13.230.125.104	ns2.dc.ctc.ad.jp	1
162.159.27.34	ns.iij-dns.biz	1
210.138.20.112	ns.iij-dns.jp	28
162.159.26.71	ns013-bei8fvvc09t758i3.b.d-53.net	1
162.159.26.71	ns.iij-dns.biz	1
162.159.26.71	ns.iij-dns.biz	28
13.230.125.104	ns2.dc.ctc.ad.jp	1
199.254.49.1	ns013-bei8fvvc09t758i3.b.d-53.info	1
13.230.125.104	ns2.dc.ctc.ad.jp	1
202.32.219.52	5.d-53.net	1
210.138.20.112	ns013-bei8fvvc09t758i3.b.d-53.info	1
13.230.125.104	ns2.dc.ctc.ad.jp	1
162.159.27.34	ns012-5tu3le3iluf43idc.5.d-53.net	1
205.251.192.27	elb.amazonaws.com	1
170.247.170.2	org	1
198.41.0.4	org	1
199.7.91.13	uk	1
192.54.112.30	awsdns-03.com	1
198.41.0.4	uk	1
13.230.125.104	ns2.dc.ctc.ad.jp	1
162.159.26.71	ns012-5tu3le3iluf43idc.5.d-53.net	1
199.249.120.1	awsdns-37.org	1
43.230.48.1	co.uk	1
156.154.102.3	co.uk	1
13.230.125.104	ns2.dc.ctc.ad.jp	1
205.251.196.40	ns-1321.awsdns-37.org	1
202.32.219.43	ns2.dc.ctc.ad.jp	28
213.248.216.1	awsdns-16.co.uk	1
13.230.125.104	ns2.dc.ctc.ad.jp	1
205.251.192.165	ns-1321.awsdns-37.org	28
162.159.26.71	b.d-53.jp	1
210.138.20.112	b.d-53.jp	1
162.159.27.34	a.d-53.jp	1
162.159.27.34	a.d-53.net	1
13.230.125.104	ns2.dc.ctc.ad.jp	28
162.159.27.34	ns018-a4j8cjalqsdc7e9m.a.d-53.jp	28
202.32.219.52	ns018-a4j8cjalqsdc7e9m.a.d-53.net	28
13.230.125.104	ns2.dc.ctc.ad.jp	1
202.32.219.52	ns013-bei8fvvc09t758i3.b.d-53.jp	1
162.159.26.71	ns013-bei8fvvc09t758i3.b.d-53.jp	1
202.32.219.52	ns018-a4j8cjalqsdc7e9m.a.d-53.jp	1
13.230.125.104	ns2.dc.ctc.ad.jp	28
210.138.20.112	a.d-53.info	1
210.138.20.112	ns018-a4j8cjalqsdc7e9m.a.d-53.info	28
205.251.198.195	ns-27.awsdns-03.com	1
162.159.27.34	ns012-5tu3le3iluf43idc.5.d-53.jp	1
210.138.20.112	ns018-a4j8cjalqsdc7e9m.a.d-53.info	1
205.251.192.4	ns-27.awsdns-03.com	28
210.138.20.112	ns013-bei8fvvc09t758i3.b.d-53.info	28
210.138.20.112	ns012-5tu3le3iluf43idc.5.d-53.info	28
199.19.56.1	awsdns-37.org	1
205.251.192.27	ap-northeast-1.elb.amazonaws.com	1
192.26.92.30	awsdns-56.net	1
192.52.178.30	awsdns-56.net	1
205.251.196.40	ns-1321.awsdns-37.org	1
205.251.193.249	ns-967.awsdns-56.net	28
213.248.220.1	awsdns-16.co.uk	1
205.251.198.101	ns-1321.awsdns-37.org	1
162.159.26.71	ns012-5tu3le3iluf43idc.5.d-53.net	28
205.251.195.144	ns-1670.awsdns-16.co.uk	28
205.251.198.195	ns-27.awsdns-03.com	28
205.251.196.131	ns-27.awsdns-03.com	28
192.43.172.30	awsdns-58.net	1
205.251.194.231	ns-1325.awsdns-37.org	1
205.251.196.40	ns-1325.awsdns-37.org	1
192.26.92.30	awsdns-58.net	1
192.35.51.30	awsdns-06.com	1
192.54.112.30	awsdns-06.com	1
205.251.199.184	ns-967.awsdns-56.net	1
202.32.219.52	ns013-bei8fvvc09t758i3.b.d-53.jp	28
205.251.197.45	WWW-ELB-EXT-1997305994.ap-northeast-1.elb.amazonaws.com	1
205.251.199.184	ns-967.awsdns-56.net	1
205.251.195.60	ns-982.awsdns-58.net	28
162.159.26.71	ns018-a4j8cjalqsdc7e9m.a.d-53.net	1
205.251.199.20	ns-1670.awsdns-16.co.uk	1
162.159.27.34	ns013-bei8fvvc09t758i3.b.d-53.jp	28
205.251.198.198	ns-54.awsdns-06.com	1
205.251.196.134	ns-54.awsdns-06.com	1
205.251.193.251	ns-982.awsdns-58.net	1
205.251.194.70	ns-54.awsdns-06.com	28
205.251.196.40	ns-1325.awsdns-37.org	28
205.251.198.101	ns-1325.awsdns-37.org	28
210.138.20.112	ns018-a4j8cjalqsdc7e9m.a.d-53.net	1
205.251.195.60	ns-982.awsdns-58.net	1
205.251.198.198	ns-54.awsdns-06.com	28
210.138.20.112	ns018-a4j8cjalqsdc7e9m.a.d-53.net	1
210.138.20.112	ns018-a4j8cjalqsdc7e9m.a.d-53.net	1
205.251.198.198	ns-54.awsdns-06.com	28
205.251.193.251	ns-982.awsdns-58.net	1

WWW.CHUKYO-U.AC.JP

harden-referral-path: yes / qname-minimisation: no / module-config: "validator iterator" / disable-edns-do: no
385〜549行

	ログ省略

1.0-63.6.42.150.in-addr.arpa ptr

harden-referral-path: no / qname-minimisation: no / module-config: "iterator" / disable-edns-do: yes
112行 (qname-minimisation: yes だと 132行) 

193.0.14.129    <Root>  2
193.0.14.129    1.0-63.6.42.150.in-addr.arpa    12
199.180.182.53  1.0-63.6.42.150.in-addr.arpa    12
192.203.230.10  apnic.authdns.ripe.net  28
198.41.0.4      ns3.lacnic.net  1
192.5.5.241     rirns.arin.net  28
192.5.5.241     apnic.authdns.ripe.net  1
198.41.0.4      rirns.arin.net  1
198.41.0.4      ns3.lacnic.net  28
192.12.94.30    apnic.authdns.ripe.net  28
192.42.93.30    apnic.authdns.ripe.net  1
192.5.6.30      rirns.arin.net  1
192.35.51.30    rirns.arin.net  28
192.5.6.30      ns3.lacnic.net  28
192.33.14.30    ns3.lacnic.net  1
193.0.9.7       apnic.authdns.ripe.net  28
204.61.216.50   rirns.arin.net  1
198.41.0.4      a.lactld.org    28
199.7.91.13     a.lactld.org    1
190.112.52.35   ns3.lacnic.net  1
190.112.52.35   ns3.lacnic.net  28
199.253.249.53  1.0-63.6.42.150.in-addr.arpa    12
199.249.120.1   a.lactld.org    1
199.19.57.1     a.lactld.org    28
202.12.27.33    ssdns-tld.nic.cl        1
202.12.27.33    ssdns-tld.nic.cl        28
200.0.68.10     a.lactld.org    1
200.0.68.10     a.lactld.org    28
194.146.106.34  ssdns-tld.nic.cl        1
200.16.112.16   ssdns-tld.nic.cl        28
199.212.0.108   rirns.arin.net  28
199.253.249.53  apnic.authdns.ripe.net  1
192.33.4.12     ns1.hs.ctc.jp   1
198.97.190.53   dns-x.sinet.ad.jp       1
192.203.230.10  dns-x.sinet.ad.jp       28
192.112.36.4    ns1.hs.ctc.jp   28
202.12.30.131   g.dns.jp        28
202.12.30.131   dns-x.sinet.ad.jp       1
203.119.1.1     dns-x.sinet.ad.jp       28
210.138.175.244 ns1.hs.ctc.jp   28
150.100.0.54    dns-x.sinet.ad.jp       28
13.230.125.104  ns1.hs.ctc.jp   28
203.119.1.1     ns013-bei8fvvc09t758i3.b.d-53.jp        28
192.112.36.4    ns013-bei8fvvc09t758i3.b.d-53.info      28
192.5.5.241     ns013-bei8fvvc09t758i3.b.d-53.info      1
210.138.175.244 ns013-bei8fvvc09t758i3.b.d-53.jp        1
192.33.14.30    ns.iij-dns.net  28
192.26.92.30    ns.iij-dns.net  1
162.159.26.71   ns013-bei8fvvc09t758i3.b.d-53.jp        1
192.58.128.30   ns.iij-dns.biz  1
192.203.230.10  ns.iij-dns.biz  28
162.159.26.71   ns013-bei8fvvc09t758i3.b.d-53.jp        28
199.254.31.1    ns013-bei8fvvc09t758i3.b.d-53.info      1
199.254.49.1    ns013-bei8fvvc09t758i3.b.d-53.info      28
37.209.196.13   ns.iij-dns.biz  28
210.138.20.112  ns.iij-dns.net  1
162.159.27.34   ns.iij-dns.net  28
210.138.20.112  ns013-bei8fvvc09t758i3.b.d-53.info      1
204.74.105.1    ns.iij-dns.biz  1
210.138.175.244 g.dns.jp        28
203.119.1.1     dns-x.sinet.ad.jp       1
162.159.27.34   ns013-bei8fvvc09t758i3.b.d-53.info      28
162.159.27.34   ns.iij-dns.biz  28
203.119.1.4     nsg.dns.jp      28
210.138.175.245 g.dns.jp        28
150.100.0.54    dns-x.sinet.ad.jp       1
150.100.18.10   1.0-63.6.42.150.in-addr.arpa    12
156.154.100.5   ns1.hs.ctc.jp   1
202.12.30.131   ns3.suzuki.sist.chukyo-u.ac.jp  28
192.12.94.30    ns013-bei8fvvc09t758i3.b.d-53.net       28
156.154.100.5   ns3.suzuki.sist.chukyo-u.ac.jp  1
192.26.92.30    ns013-bei8fvvc09t758i3.b.d-53.net       1
156.154.100.5   ns4.suzuki.sist.chukyo-u.ac.jp  28
162.159.27.93   ns1.hs.ctc.jp   1
203.119.1.1     ns4.suzuki.sist.chukyo-u.ac.jp  1
203.119.1.1     ns2.dc.ctc.ad.jp        28
156.154.100.5   ns2.dc.ctc.ad.jp        1
210.138.20.112  ns013-bei8fvvc09t758i3.b.d-53.net       1
202.32.219.52   ns017-q6ki79ff6obptvq8.q.d-53.info      28
162.159.27.34   ns017-q6ki79ff6obptvq8.q.d-53.info      1
13.230.125.104  ns1.hs.ctc.jp   1
192.48.79.30    ns017-q6ki79ff6obptvq8.q.d-53.net       1
192.5.6.30      ns017-q6ki79ff6obptvq8.q.d-53.net       28
210.138.20.112  ns013-bei8fvvc09t758i3.b.d-53.net       28
13.230.125.104  ns2.dc.ctc.ad.jp        28
210.138.20.112  ns012-5tu3le3iluf43idc.5.d-53.net       28
162.159.26.71   ns012-5tu3le3iluf43idc.5.d-53.net       1
202.32.219.52   ns012-5tu3le3iluf43idc.5.d-53.jp        1
210.138.20.112  ns012-5tu3le3iluf43idc.5.d-53.jp        28
13.230.125.104  ns2.dc.ctc.ad.jp        1
218.216.179.154 ns4.suzuki.sist.chukyo-u.ac.jp  1
218.216.179.154 ns3.suzuki.sist.chukyo-u.ac.jp  28
218.216.179.154 ns4.suzuki.sist.chukyo-u.ac.jp  28
218.216.179.154 ns3.suzuki.sist.chukyo-u.ac.jp  1
210.138.20.112  ns017-q6ki79ff6obptvq8.q.d-53.net       28
210.138.175.244 dns-b.iij.ad.jp 28
203.119.1.1     dns-c.iij.ad.jp 1
150.100.6.8     dns-b.iij.ad.jp 1
210.138.175.244 dns-c.iij.ad.jp 28
162.159.26.71   ns.iij-dns.biz  1
210.130.0.5     dns-b.iij.ad.jp 28
210.130.0.5     dns-c.iij.ad.jp 1
210.130.1.5     dns-c.iij.ad.jp 28
210.130.0.5     dns-b.iij.ad.jp 1
210.138.20.111  ns3.suzuki.sist.chukyo-u.ac.jp  28
150.42.6.2      ns3.suzuki.sist.chukyo-u.ac.jp  28
210.138.20.111  ns4.suzuki.sist.chukyo-u.ac.jp  1
202.32.219.51   ns4.suzuki.sist.chukyo-u.ac.jp  28
14.192.44.1     ns4.suzuki.sist.chukyo-u.ac.jp  1
150.42.6.2      ns4.suzuki.sist.chukyo-u.ac.jp  28
150.42.6.4      1.0-63.6.42.150.in-addr.arpa    12
162.159.26.71   ns017-q6ki79ff6obptvq8.q.d-53.net       1

1.0-63.6.42.150.in-addr.arpa ptr

harden-referral-path: yes / qname-minimisation: no / module-config: "iterator" / disable-edns-do: yes

568行で SERVFAIL ...

unbound[12394:0] debug: request has exceeded the maximum number of nxdomain nameserver lookups (5) with 6

... これ? ... NXNSAttack対策で引けなくなったドメイン名 (IIJ 島村充)

... いや違うかも ... DNSViz

Warnings
42.150.in-addr.arpa to 0-63.6.42.150.in-addr.arpa:
The following NS name(s) were found in the authoritative NS RRset, but not in the delegation NS RRset (i.e., in the 42.150.in-addr.arpa zone):
ns4.0-63.6.42.150.in-addr.arpa, ns3.0-63.6.42.150.in-addr.arpa See RFC 1034, Sec. 4.2.2.

% dig ns 0-63.6.42.150.in-addr.arpa @ns1.hs.ctc.jp +norec +noall +auth ...(下記の NS 名が許されなかった)
0-63.6.42.150.in-addr.arpa. 86400 IN NS	ns3.suzuki.sist.chukyo-u.ac.jp.
0-63.6.42.150.in-addr.arpa. 86400 IN NS	ns4.suzuki.sist.chukyo-u.ac.jp.

% dig ns 0-63.6.42.150.in-addr.arpa @ns3.suzuki.sist.chukyo-u.ac.jp +norec +noall +ans 
0-63.6.42.150.in-addr.arpa. 86400 IN NS	ns3.0-63.6.42.150.in-addr.arpa.
0-63.6.42.150.in-addr.arpa. 86400 IN NS	ns4.0-63.6.42.150.in-addr.arpa.