dnssec-analyzer.verisignlabs.com aaaa lookup fail

Lee ler762 at gmail.com
Fri Apr 26 23:35:31 UTC 2024


dig dnssec-analyzer.verisignlabs.com aaaa

gives me a SERVFAIL & this in the bind errors_log file:

$ grep dnssec-analyzer.verisignlabs.com named-errors.log | tail -1
26-Apr-2024 19:28:37.600 query-errors: info: client @0x7f384488e3c0
127.0.0.1#47121 (dnssec-analyzer.verisignlabs.com): query failed
(failure) for dnssec-analyzer.verisignlabs.com/IN/AAAA at query.c:7471


Is that because of the insecure delegation shown at
  https://dnsviz.net/d/dnssec-analyzer.verisignlabs.com/dnssec/
and me having "dnssec-validation auto;" in named.conf?

Thanks
Lee

(still struggling to understand this stuff)


More information about the bind-users mailing list