Bind failures following update/reboot w/ 9.18.1

[Philip Prindeville]

> On May 14, 2022, at 12:35 AM, Matus UHLAR - fantomas <uhlar at fantomas.sk> wrote:
> 
> On 13.05.22 10:06, Philip Prindeville wrote:
>> After rebooting my OpenWRT router with Bind 9.18.1 yesterday, I started seeing a lot of:
>> 
>> 
>> May 12 19:24:06 OpenWrt named[11061]: validating ./NS: no valid signature found
>> May 12 19:24:06 OpenWrt named[11061]: validating net/DS: no valid signature found
>> May 12 19:24:06 OpenWrt named[11061]: no valid RRSIG resolving './NS/IN': 192.203.230.10#53
>> May 12 19:24:06 OpenWrt named[11061]: no valid RRSIG resolving 'net/DS/IN': 8.8.4.4#53
>> May 12 19:24:06 OpenWrt named[11061]: validating com/DS: no valid signature found
>> May 12 19:24:06 OpenWrt named[11061]: no valid RRSIG resolving 'com/DS/IN': 8.8.4.4#53
>> May 12 19:24:06 OpenWrt named[11061]: validating net/DS: no valid signature found
>> May 12 19:24:06 OpenWrt named[11061]: no valid RRSIG resolving 'net/DS/IN': 66.232.64.10#53
>> May 12 19:24:06 OpenWrt named[11061]: validating com/DS: no valid signature found
>> May 12 19:24:06 OpenWrt named[11061]: no valid RRSIG resolving 'com/DS/IN': 66.232.64.10#53
> 
> doesn't your ISP block or intercept DNS queries?


My MSP does many stupid things (like not allowing business customers to own their own modems, or residential customers to own static IP address blocks), but that's not one of them...

-Philip


> 
> -- 
> Matus UHLAR - fantomas, uhlar at fantomas.sk ; http://www.fantomas.sk/
> Warning: I wish NOT to receive e-mail advertising to this address.
> Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
> - Holmes, what kind of school did you study to be a detective?
> - Elementary, Watkins.  -- Daffy Duck & Porky Pig
> -- 
> Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list
> 
> ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information.
> 
> 
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users