BIND dnssec issue

2016-11-06 Thread Mahdi Adnan
Hello, We have several Bind recursive servers and all of them stop responding to queries at 10:00 PM daily for 4 minutes starting from November 1st with the following error in the logs; "SOA: got insecure response; parent indicates it should be secure" "DNSKEY: verify failed due to bad

RE: RRL BIND Recursive

2016-10-19 Thread Mahdi Adnan
spectfully Mahdi A. Mahdi > Subject: Re: RRL BIND Recursive > To: bind-users@lists.isc.org > From: cat...@isc.org > Date: Wed, 19 Oct 2016 10:05:10 +0100 > > On 18/10/2016 07:37, Mahdi Adnan wrote: > > Hi, > > > > I have a few servers running a re

RRL BIND Recursive

2016-10-18 Thread Mahdi Adnan
Hi,I have a few servers running a recursive DNS bind service, i configured one of the servers to limit the rate of requests.my configuration is:rate-limit { log-only yes; errors-per-second 8; nxdomains-per-second 8; ipv4-prefix-length 32;As soon as i apply these changes my server drop 90% of