Re: BIND dnssec issue

; MSG SIZE rcvd: 525 > > > > > as for the messages, i only got these messages during the period of 4 > minutes from 10:00 PM to 10:04 PM. You need to be checking the records listed in the log messages. As you failed to copy the names no one else can do that. Mark > -- >

Re: BIND dnssec issue

bind-users@lists.isc.org Subject: Re: BIND dnssec issue First check your system clocks and make sure they are correct. 'date -u' will show the time in UTC. Here in Australia we are 11 hours in front of UTC so where I run 'date; date -u' I get: Mon 7 Nov 2016 07:42:33 EST

Re: BIND dnssec issue

First check your system clocks and make sure they are correct. 'date -u' will show the time in UTC. Here in Australia we are 11 hours in front of UTC so where I run 'date; date -u' I get: Mon 7 Nov 2016 07:42:33 EST Sun 6 Nov 2016 20:42:33 UTC 'dig +cd +dnssec' will let you see the RRSIG inc

BIND dnssec issue

Hello, We have several Bind recursive servers and all of them stop responding to queries at 10:00 PM daily for 4 minutes starting from November 1st with the following error in the logs; "SOA: got insecure response; parent indicates it should be secure" "DNSKEY: verify failed due to bad signa