Re: Strange log messages

2020-04-23 Thread Tony Finch
Lars Kollstedt wrote: > One of the arpa-Nameservers 192.5.5.241, 2001:500:2::c which is the C-Root- > Server is shown to be not responsive for queries over UDP by DNSviz for a long > time. This is due to a stupid peering disagreement between a couple of very stubborn tier 1 transit providers.

Re: Strange log messages

2020-04-23 Thread Lars Kollstedt
Hi Tony, hi List, on Mittwoch, 22. April 2020 12:27:27 CEST Tony Finch wrote: > Older versions of BIND can fall back to non-DNSSEC queries for DNSSEC > zones. This can be more common if there is network disruption (I don't > know if the CenturyLink fibre cut issues have been resolved yet...) One

Re: Strange log messages

2020-04-22 Thread Tony Finch
Lars Kollstedt wrote: > > what do the following messages in loose combination mean?: > > Apr 22 09:23:01 resolver1 named[1201]: validating ip6.arpa/SOA: got insecure > response; parent indicates it should be secure This means there is a DS record for ip6.arpa in the .arpa zone, but there were

Strange log messages

2020-04-22 Thread Lars Kollstedt
Hi, what do the following messages in loose combination mean?: Apr 22 09:23:01 resolver1 named[1201]: validating ip6.arpa/SOA: got insecure response; parent indicates it should be secure [...] Apr 22 09:32:23 resolver1 named[1201]: validating in-addr.arpa/SOA: got insecure response; parent