Re: [Pdns-users] DNSSEC-Problems on g.root-servers.net?

2018-09-17 Thread Christian Renner
>> >> The real problem seems to be in .ch. > > It indeed does look like h.nic.ch is currently serving invalid denial of > existence proofs. I think you’re right, thanks to both of you! I’ll contact SWITCH (the guys behind .ch) about the issue. Thanks again & regards Christian signature.asc D

[Pdns-users] DNSSEC-Problems on g.root-servers.net?

2018-09-17 Thread Christian Renner
Hi Since about 20 hours we see many dnssec validation errors on all of our pdns recursors. A few recent examples: Sep 17 10:12:37 ac-rns2 pdns_recursor[24059]: Answer to onba.zkb.ch|A for 178.22.104.86:36796 validates as Bogus Sep 17 10:12:25 ac-rns2 pdns_recursor[24059]: Answer to cdn.migros.c

Re: [Pdns-users] Problems resolving specific domain with pdns_recursor 4

2017-07-20 Thread Christian Renner
> http://dnsviz.net/d/bankofsingapore.com/dnssec/ > it looks rather wild Yes, really wild. Thanks for pointing me to the right direction! Regards Christian ___ Pdns-users mailing list Pdns-users@mailman.powerdns.com https://mailman.powerdns.com/mailman/

[Pdns-users] Problems resolving specific domain with pdns_recursor 4

2017-07-20 Thread Christian Renner
Hi We currently face issues in resolving bankofsingapore.com with all our PDNS 4 installations (4.0.4 and 4.0.6). Sometimes resolving works, sometimes not (retrieving servfail): root@icarus:~# rec_control wipe-cache bankofsingapore.com; dig ns bankofsingapore.com +short wiped 1 records, 0 nega