For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

MW1's avatar
MW1
Icon for Cirrus rankCirrus
Feb 08, 2012

Post GTM 1500 upgrade 9.3.xx to 10.2.3 - recursive lookup fails

All,

 

is anyone aware of any issues issues relating to loosing the ability to perform recursive lookups against a GTM following an upgrade to 10.2.3 ? I have upgraded my 1500 from 9.3.0 to 10.2.3 with the latest hotfix. The upgrade appeared to go without too much of an issue however, while I can resolve names in the zones held locally recursive get "Query refused".

 

 

I've checked the named.conf and recursive is set to yes.

 

 

Thanks in advance

 

 

Matt

 

4 Replies

  • Just as an update this only effects remote lookups, performing an nslookup against itself works for records not held local
  • Have you checked the ACL list and expanded it to allow the remote IP's you mentioned?
  • You might also want to check this out:

     

    https://support.f5.com/kb/en-us/solutions/public/7000/000/sol7054.html?sr=19217238

     

     

    and here is an article that discusses the ACL's:

     

    https://support.f5.com/kb/en-us/solutions/public/7000/000/sol7055.html?sr=19217238
  • Just to advise after speaking with support they advised :

     

     

     

    I talked to other engineers and the recommendation is if you have "recursive yes" in the configuration, the udp profile must be changed to > 30 seconds. The other option is not to enable recursion.

     

     

    I have built a couple of linux/bind servers to handle my needs in the meantime so have not validated this.