On 25/03/2020 20:56, Havard Eidnes wrote:
My caching dns failed unexpectedly today, apparently I was not alone:
https://www.mail-archive.com/bind-users@lists.isc.org/msg28624.html
From ISC: "We apparently let our signatures on dlv.isc.org expire."
Ouch!
I fixed this temporarily by
> My caching dns failed unexpectedly today, apparently I was not alone:
> https://www.mail-archive.com/bind-users@lists.isc.org/msg28624.html
> From ISC: "We apparently let our signatures on dlv.isc.org expire."
Ouch!
> I fixed this temporarily by adding:
> dnssec-accept-expired yes;
> Which
On Wed, 25 Mar 2020, ya...@sdf.org wrote:
> Another user on the ISC list suggested setting
> dnssec-lookaside no;
> Which also feels risky.
Comment out or remove the NetBSD provided configuration for that in
named.conf.
> And generically ISC suggested all users remove the dlv.isc.org zone
My caching dns failed unexpectedly today, apparently I was not alone:
https://www.mail-archive.com/bind-users@lists.isc.org/msg28624.html
>From ISC: "We apparently let our signatures on dlv.isc.org expire."
I fixed this temporarily by adding:
dnssec-accept-expired yes;
Which feels risky...
