ote:
>
>
> Looking in my logs today, I found a confusing line:
>
> validating cran.rproject.org/SOA: bad cache hit (rproject.org/DS)
>
> I was trying to figure out what was wrong with my cache, and how BIND might
> be able to determine that a cache hit is bad. To do that, it wo
Looking in my logs today, I found a confusing line:
validating cran.rproject.org/SOA: bad cache hit (rproject.org/DS)
I was trying to figure out what was wrong with my cache, and how BIND
might be able to determine that a cache hit is bad. To do that, it would
need to retrieve the current
tions: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: *SERVFAIL,* id: 17070
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
2. named.log
There are many bad cache hit logs.
dnssec: view internal: validating nikkei225jp.com/SOA: bad cache hit
(com/DS)
I
Havard Eidnes via bind-users wrote:
>
> If it was due to validation failure, I would have thought that it
> would be more persistent than only last for 10 minutes.
Looking for vaguely plausible causes I guess what might have happened is
there was a DNSKEY lookup failure (transient network problem
>> [...] There are two invocations of dns_resolver_addbadcache() in
>> lib/dns/resolver.c, with fairly complicated preconditions to reach
>> each of those two points.
>
> I've had a very quick look at the code, and it looks to me like one
> case is due to lack of authoritative server IP addresses,
Havard Eidnes via bind-users wrote:
>
> Looking at the code in BIND 9.14.10 (BIND 9.16.2 doesn't appear to be
> significantly different in this regard), there appears to be a "cache
> of bad records" implemented by lib/dns/badcache.c. There are two
> invocations of dns_resolver_addbadcache() in l
Hi,
we got reports about a temporary resolution failure for some names
under norid.no this morning. Digging through the logs, the first
instance appears to be
Apr 24 08:35:02 resolver named[244]: validating zabbix-test.norid.no/CNAME: bad
cache hit (norid.no/DNSKEY)
and a couple of minutes
On 11/25/2011 03:19 PM, Tony Finch wrote:
> Bryton wrote:
>> I wonder if anyone has ever got the error
> In my logs I have some of this:
>
> 25-Nov-2011 11:23:00.332 dnssec: info: validating @0xabe00470: uofk.edu MX:
> bad cache hit (uofk.edu/DNSKEY)
>
> Which is fair
Bryton wrote:
>
> I wonder if anyone has ever got the error
In my logs I have some of this:
25-Nov-2011 11:23:00.332 dnssec: info: validating @0xabe00470: uofk.edu MX: bad
cache hit (uofk.edu/DNSKEY)
Which is fairly nicely explained by this:
http://dnsviz.net/d/uofk.edu/dnssec/
SOA: bad
cache hit (zone/DNSKEY)
25-Nov-2011 09:16:09.111 debug 3: validator @0xb93ccf28:
dns_validator_destroy
But after sometime again i get good results with no error
I wonder if anyone has ever got the error
I have checked dig +cd and i get answers perfectly so I suppose its
dnssec issue
and
vd: 37
~in dnssec log file;
27-May-2011 15:06:00.097 dnssec: info: validating @0x7ff40c023520:
eduftcdnsp01.ed.gov A: bad cache hit (eduftcdnsp01.ed.gov/DS)
With the checking disabled;
# dig eduftcdnsp01.ed.gov +cd
; <<>> DiG 9.7.0-P2-RedHat-9.7.0-5.P2.el6_0.1 <<>>
ed
;; Query time: 550 msec
> ;; SERVER: 127.0.0.1#53(127.0.0.1)
> ;; WHEN: Fri May 27 15:06:00 2011
> ;; MSG SIZE rcvd: 37
>
>
> ~in dnssec log file;
> 27-May-2011 15:06:00.097 dnssec: info: validating @0x7ff40c023520:
> eduftcdnsp01.ed.gov A: bad cache hit (eduftcdnsp01.ed.gov
On Fri, May 27, 2011 at 12:09 PM, Jim Glassford wrote:
> Starting today got reports of unable to reach some student ad sites such as
> studentloans.gov
>
>
There are problems with this and related sites. Specifically RRSIGs are not
being returned with some RRsets, resulting in a broken chain of
Fri May 27 15:06:00 2011
;; MSG SIZE rcvd: 37
~in dnssec log file;
27-May-2011 15:06:00.097 dnssec: info: validating @0x7ff40c023520:
eduftcdnsp01.ed.gov A: bad cache hit (eduftcdnsp01.ed.gov/DS)
With the checking disabled;
# dig eduftcdnsp01.ed.gov +cd
; <<>> DiG 9.7.0-P2-RedHat
14 matches
Mail list logo
