Re: dnssec-lookaside auto key expiration

2020-03-25 Thread Mark Andrews
> On 26 Mar 2020, at 08:04, Havard Eidnes via bind-users > wrote: > >> This was an accident - we did *not* do this on purpose - but infact, >> this is a good time for anyone who still has dlv.isc.org configured >> to REMOVE it from your BIND configuration. > > This advice may be misunderstood

Re: dnssec-lookaside auto key expiration

2020-03-25 Thread Havard Eidnes via bind-users
> This was an accident - we did *not* do this on purpose - but infact, > this is a good time for anyone who still has dlv.isc.org configured > to REMOVE it from your BIND configuration. This advice may be misunderstood. Use of dlv.isc.org is usually implied, not explicitly stated in named.conf, t

Re: dnssec-lookaside auto key expiration

2020-03-25 Thread Victoria Risk
We apparently let our signatures on dlv.isc.org expire. We are fixing it now. We apologize for this. This was an accident - we did *not* do this on purpose - but infact, this is a good time for anyone who still has dlv.isc.org configured to REMOVE it from your BIND configuration. The zone is em

dnssec-lookaside auto key expiration

2020-03-25 Thread Drew Weaver
Hello, I unfortunately got hit by the key expiration or whatever just happened about an hour ago that caused the "dnssec-lookaside auto" command to crush all of our DNS queries. I realize that it wasn't doing anything but we left the command in there because it had been in there and in the doc