Re: BIND dnssec issue

2016-11-06 Thread Mahdi Adnan
08:57:33 AST 2016 ;; MSG SIZE rcvd: 525 as for the messages, i only got these messages during the period of 4 minutes from 10:00 PM to 10:04 PM. -- Respectfully Mahdi A. Mahdi From: Mark Andrews Sent: Monday, November 7, 2016 12:17:21 AM To: Mahdi Adnan Cc:

BIND dnssec issue

2016-11-06 Thread Mahdi Adnan
Hello, We have several Bind recursive servers and all of them stop responding to queries at 10:00 PM daily for 4 minutes starting from November 1st with the following error in the logs; "SOA: got insecure response; parent indicates it should be secure" "DNSKEY: verify failed due to bad signa

RE: RRL BIND Recursive

2016-10-19 Thread Mahdi Adnan
Respectfully Mahdi A. Mahdi > Subject: Re: RRL BIND Recursive > To: bind-users@lists.isc.org > From: cat...@isc.org > Date: Wed, 19 Oct 2016 10:05:10 +0100 > > On 18/10/2016 07:37, Mahdi Adnan wrote: > > Hi, > > > > I have a few servers running a recu

RRL BIND Recursive

2016-10-17 Thread Mahdi Adnan
Hi,I have a few servers running a recursive DNS bind service, i configured one of the servers to limit the rate of requests.my configuration is:rate-limit { log-only yes; errors-per-second 8; nxdomains-per-second 8; ipv4-prefix-length 32;As soon as i apply these changes my server drop 90% of the