Re: "bad cache-hit" or "bad-cache hit"

2024-04-16 Thread Mark Andrews
It a hold down cache on bad lookups. The timeout is 10 minutes. To prove whether a zone is secure or not DS records at delegations in the chain are looked up. Sometimes that fails. This cache records that failure. -- Mark Andrews > On 17 Apr 2024, at 07:03, John Thurston wrote: > >  > Loo

Re: bad cache hit

2011-11-25 Thread Bryton
On 11/25/2011 03:19 PM, Tony Finch wrote: > Bryton wrote: >> I wonder if anyone has ever got the error > In my logs I have some of this: > > 25-Nov-2011 11:23:00.332 dnssec: info: validating @0xabe00470: uofk.edu MX: > bad cache hit (uofk.edu/DNSKEY) > > Which is fairly nicely explained by this:

Re: bad cache hit

2011-11-25 Thread Tony Finch
Bryton wrote: > > I wonder if anyone has ever got the error In my logs I have some of this: 25-Nov-2011 11:23:00.332 dnssec: info: validating @0xabe00470: uofk.edu MX: bad cache hit (uofk.edu/DNSKEY) Which is fairly nicely explained by this: http://dnsviz.net/d/uofk.edu/dnssec/ Tony. -- f.a

Re: ? bad cache hit (eduftcdnsp01.ed.gov/DS)

2011-05-27 Thread Carlos Vicente
Hi Jim, We are seeing the same thing. The problem is an incorrectly signed zone (missing RRSIG records) at ed.gov. See: http://dnssec-debugger.verisignlabs.com/www.ed.gov http://dnsviz.net/d/www.ed.gov/dnssec/ cv On Fri, May 27, 2011 at 12:09 PM, Jim Glassford wrote: > Hi, > > Running BIND 9.7

Re: ? bad cache hit (eduftcdnsp01.ed.gov/DS)

2011-05-27 Thread Casey Deccio
On Fri, May 27, 2011 at 12:09 PM, Jim Glassford wrote: > Starting today got reports of unable to reach some student ad sites such as > studentloans.gov > > There are problems with this and related sites. Specifically RRSIGs are not being returned with some RRsets, resulting in a broken chain of