Havard Eidnes via bind-users <bind-users@lists.isc.org> wrote: > > If it was due to validation failure, I would have thought that it > would be more persistent than only last for 10 minutes.
Looking for vaguely plausible causes I guess what might have happened is there was a DNSKEY lookup failure (transient network problem?), so validator.c:fetch_callback_dnskey() returned DNS_R_BROKENCHAIN, so the DNSKEY query was added to the bad cache. After that happens, validation attempts failed for lame-ttl seconds because of the dns_resolver_getbadcache() check in validator.c:view_find(). Tony. -- f.anthony.n.finch <d...@dotat.at> http://dotat.at/ West Forties, Cromarty, Forth, Tyne, Dogger: Variable, mainly northerly, 2 to 4. Slight or moderate. Fog patches in Forth and Tyne. Moderate or good, occasionally very poor in Forth and Tyne. _______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
