Re: SERVFAIL IPv6 debugging

2023-01-19 Thread Greg Choules via bind-users
Hi Bruce. There's potentially a bunch of things to note here. DNS conversations are independent of each other. The dig to your own server (dig -6 ec.europa.eu) may be over v4 or v6. But the subsequent queries that server makes (if any) may be over v4, or v6, or both. It depends how your server is c

Re: SERVFAIL IPv6 debugging

2023-01-19 Thread Sanjai Gandhi K via bind-users
Hi Bruce, Kindly Check the actual root cause for this "SERVFAIL" error from the following log messages of your system. /var/log/messages With Regards. K.Sanjai Gandhi. - Original Message - From: "Bruce Duncan" To: bind-users@lists.isc.org Sent: Wednesday, January 18, 2023 6:01:32 PM S

Re: [KASP] Key rollover

2023-01-19 Thread Matthijs Mekking
Hi Adrien, Without any logs or key **state** files, I can't really tell what is going on. My only gut feeling is that you have never signaled BIND 9 that the DS has been published. You can run 'rndc dnssec -checkds -key 12345 published example.com' or set up parental-agents to do it for you.