Hi Badli,

On Sun, Apr 09, 2023 at 07:59:32AM +0000, Badli Al Rashid wrote:
> I got a temporary failure resolving deb.debian.org and
> www.debian.org since last week thursday. I can resolve other sites
> like www.kernel.org and others.
> 
> When I switch to other DNS servers I can resolve www.debian.org.

Any clue in the logs of your bind9 resolver?

If you are able to install "delv", what does that say?

$ delv -t cname deb.debian.org
; fully validated
deb.debian.org.         3567    IN      CNAME   debian.map.fastlydns.net.
deb.debian.org.         3567    IN      RRSIG   CNAME 8 3 3600 20230512040858 
20230402034640 32728 debian.org. 
rFqk+TkAJPOXTbQl8irQJyMGjsL8yXMxFgxglzGC+7GaydpbQGEYaiOE 
FLHKy4dPshKq0pq5O8l+hw/gG3dgWg+fYkskltkGJyk8VNBnbgTM3Szm 
M2QjRR7x7hKitr61YrUkVCpZCroiKtZfat/0l42EWV24FewvatX9mBge 
VYzlUSrOchLHC7TjBOpxyA7Ta6ll4YIDDgMSZi4HxMMhjPdzGs2H/o8D 
CrKUmSE9VBhRoclczsBbMENUftKR0XOl

It does seem like your ;local resolver is at fault when it comes to
DNSSEC.

Cheers,
Andy

-- 
https://bitfolk.com/ -- No-nonsense VPS hosting

Reply via email to