> On 15 Mar 2023, at 02:08, Alexandra Yang <draya...@gmail.com> wrote:
>
> Hi Group,
>
> I wonder if anyone can shed some light on this, our nameserver(BIND 9.16.37
> )keeps giving error on resolving gpo.gov and ns3.gpo.gov, here are the errors:
>
> Mar 14 10:23:32 ipam-dns-in-1 named[3713]: validating gpo.gov/SOA: got
> insecure response; parent indicates it should be secure
For some reason you are not getting signed responses. Are you using a
forwarder?
> Mar 14 10:23:32 ipam-dns-in-1 named[3713]: no valid RRSIG resolving
> 'ns3.gpo.gov/DS/IN': 162.140.254.200#53
> Mar 14 10:23:32 ipam-dns-in-1 named[3713]: broken trust chain resolving
> 'ns3.gpo.gov/A/IN': 162.140.15.100#53
>
> While I checked the DNSSEC of this domain I can't seem to find any problem
> could cause above error, anyone else see issue with resolving gpo.gov ?
>
> Thanks!!
>
> Sandra
> --
> Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from
> this list
>
> ISC funds the development of this software with paid support subscriptions.
> Contact us at https://www.isc.org/contact/ for more information.
>
>
> bind-users mailing list
> bind-users@lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
--
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org
--
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from
this list
ISC funds the development of this software with paid support subscriptions.
Contact us at https://www.isc.org/contact/ for more information.
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
