Re: dnsviz.net: has errors; select the "Denial of existence" DNSSEC option to see them.

Hi Taavi, It seems I was blind and didn't see the button. Problem solved. Iterations set to 0 and salt to null. Everything green now at DNSviz. Best regards Hans -- On 07.02.25 17:05, Taavi Eomäe wrote: Hi, If you select the "Denial of existence" under options, then you will see the exac

dnsviz.net: has errors; select the "Denial of existence" DNSSEC option to see them.

Dear All, I realized that dnsviz.net is showing me 5 errors for some domain names, even some which do not exist. This is not only for one domain. I see this for some domains I manage. I am running BIND 9.18.34-dev (Extended Support Version) This is for example such an error message at dnsvi

Re: different serial number in SOA on different interfaces

on the firewall. This bad guy is doing a bad caching. It's only a caching server and obviously it doesn't care about the TTL. Flushing the cache solves the issue. Many thanks for your expertise. Kind regards Hans -- On 06.11.24 06:41, Nick Tait via bind-users wrote: On 06/11/2

Re: different serial number in SOA on different interfaces

might like to consider using a shorter TTL value on either individual records or all records, and/or the negative response caching TTL (5th parameter in the SOA record)? Nick. On 3/11/2024 11:28 pm, Hans Mayer via bind-users wrote: Dear All, I am running BIND 9.18.32-dev (Extended Support Ve

different serial number in SOA on different interfaces

Dear All, I am running BIND 9.18.32-dev (Extended Support Version) running on Linux x86_64 6.1.0-25-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.106-3 (2024-08-26) This server has several interfaces based on docker but in general a physical interface "eno1" and a loopback interface "lo". Both in