Re: BIND dnssec issue

2016-11-06 Thread Mark Andrews
As you failed to copy the names no one else can do that. Mark > -- > > Respectfully > Mahdi A. Mahdi > > > From: Mark Andrews <ma...@isc.org> > Sent: Monday, November 7, 2016 12:17:21 AM > To: Mahdi Adnan > Cc: bind-users@

Re: BIND dnssec issue

2016-11-06 Thread Mark Andrews
First check your system clocks and make sure they are correct. 'date -u' will show the time in UTC. Here in Australia we are 11 hours in front of UTC so where I run 'date; date -u' I get: Mon 7 Nov 2016 07:42:33 EST Sun 6 Nov 2016 20:42:33 UTC 'dig +cd +dnssec' will let you see the RRSIG

BIND dnssec issue

2016-11-06 Thread Mahdi Adnan
Hello, We have several Bind recursive servers and all of them stop responding to queries at 10:00 PM daily for 4 minutes starting from November 1st with the following error in the logs; "SOA: got insecure response; parent indicates it should be secure" "DNSKEY: verify failed due to bad