Re: DNSSec Setup ARM Manual vs KB article on adding inline-signing for non-dynamic zones

2023-07-24 Thread Matthijs Mekking
On 7/24/23 20:14, E R wrote: As if DNSSec is not confusing enough...It seems the ARM manual that matches my release is out of step with the web site.  I followed the "Easy-Start Guide for Signing Authoritative Zones" in the ARM manual after manually signing my test zone for my starting point.

Re: DNSSec Setup ARM Manual vs KB article on adding inline-signing for non-dynamic zones

2023-07-24 Thread Ondřej Surý
Well, you didn’t say which version of ARM did you follow. Your ARM needs to match the BIND 9 version - you need to ask RH for the matching ARM. And of course, if you find discrepancies between the BIND 9 version as provided by ISC and matching ARM as provided by ISC, we would be happy to fix it.

DNSSec Setup ARM Manual vs KB article on adding inline-signing for non-dynamic zones

2023-07-24 Thread E R
As if DNSSec is not confusing enough...It seems the ARM manual that matches my release is out of step with the web site. I followed the "Easy-Start Guide for Signing Authoritative Zones" in the ARM manual after manually signing my test zone for my starting point. The ARM says you ONLY need to spe

interpretation of timeout errors from forwarders

2023-07-24 Thread Olaf Hering
Hello, in the logs I see occasionally entries like this, for various remote zones: 2023-07-24T08:37:30.531Z query-errors: info: client @0x7feaf40cd570 1.2.3.4#45736 (push.services.mozilla.com): query failed (timed out) for push.services.mozilla.com/IN/A at query.c:7465 The named version 9.16.4