Re: how do I diagnose dnssec/unbound issues?

2015-06-27 Thread Paul Wouters
Try using unbound-host which uses the same configuration file? Otherwise grep the logs for unbound or possibly increase verbosity to 2 or 3 in the conf file. If it happens again and you are comfortable with it, you can run unbound-control dump to get the full DNS cache which could tell what's g

how do I diagnose dnssec/unbound issues?

2015-06-26 Thread Matthew Miller
Okay, so... I enabled unbound and the dnssec-trigger package as outlined on the change page. It seems to mostly work, but, today: $ host www.boingboing.net Host www.boingboing.net not found: 2(SERVFAIL) $ host www.boingboing.net 8.8.8.8 Using domain server: Name: 8.8.8.8 Address: 8