Hi Badli, On Sun, Apr 09, 2023 at 07:59:32AM +0000, Badli Al Rashid wrote: > I got a temporary failure resolving deb.debian.org and > www.debian.org since last week thursday. I can resolve other sites > like www.kernel.org and others. > > When I switch to other DNS servers I can resolve www.debian.org.
Any clue in the logs of your bind9 resolver? If you are able to install "delv", what does that say? $ delv -t cname deb.debian.org ; fully validated deb.debian.org. 3567 IN CNAME debian.map.fastlydns.net. deb.debian.org. 3567 IN RRSIG CNAME 8 3 3600 20230512040858 20230402034640 32728 debian.org. rFqk+TkAJPOXTbQl8irQJyMGjsL8yXMxFgxglzGC+7GaydpbQGEYaiOE FLHKy4dPshKq0pq5O8l+hw/gG3dgWg+fYkskltkGJyk8VNBnbgTM3Szm M2QjRR7x7hKitr61YrUkVCpZCroiKtZfat/0l42EWV24FewvatX9mBge VYzlUSrOchLHC7TjBOpxyA7Ta6ll4YIDDgMSZi4HxMMhjPdzGs2H/o8D CrKUmSE9VBhRoclczsBbMENUftKR0XOl It does seem like your ;local resolver is at fault when it comes to DNSSEC. Cheers, Andy -- https://bitfolk.com/ -- No-nonsense VPS hosting