BIND dnssec issue
Mahdi Adnan
mahdi.adnan at outlook.com
Sun Nov 6 20:06:43 UTC 2016
Hello,
We have several Bind recursive servers and all of them stop responding to queries at 10:00 PM daily for 4 minutes starting from November 1st with the following error in the logs;
"SOA: got insecure response; parent indicates it should be secure"
"DNSKEY: verify failed due to bad signature (keyid=56467): RRSIG has expired"
"dlv.isc.org SOA: got insecure response; parent indicates it should be secure"
servers running different versions of BIND (9.9 and 910) but all are up to date.
anyone have any idea about this issue ?
Thanks
--
Respectfully
Mahdi A. Mahdi
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20161106/7fe1e830/attachment.html>
More information about the bind-users
mailing list