Re: non-working DNSSEC after network outage
Crist Clark <[email protected]>
| Newsgroups | gmane.network.dns.bind9.user,gmane.network.dns.bind.user |
|---|---|
| Message-ID | <CAAcrURKcif4x+g6W=GObZ-ZiJa_1YBKgGu0RDshyd0qipvdH6A@mail.gmail.com> |
Best practice is not to cache the root, but mirror it (RFC 8806). Mirroring
and writing it to a local file would have prevented this. Something like,
zone "." {
type mirror;
file "/var/cache/bind/root.mirror";
};
On Thu, Aug 20, 2026 at 9:51 PM Marco Moock <[email protected]> wrote:
> Am 20.08.26 um 23:02 schrieb Mark Andrews:
> > Note named would have recovered on its own when the external link came
> back up. There is very short cache of validation failures that needs to
> time out before this is completed.
>
> That did not work for me. Only a restart did it. Internet connection was
> working properly for about a day.
>
> --
> Gruß
> Marco
>
> Junk-Mail bitte an [email protected]
> --
> Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
> from this list.
>
--
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list.