hhs.gov resolvers broken, or BIND misconfigured?

We have a mystery. We're running a recursive resolver on RHEL6, using the latest RHEL-provided BIND package, bind-9.8.2-0.37.rc1.el6_7.6. The recursive resolver only has an IPv4 interface; it does not have an IPv6 interface. DNSSEC is enabled (by default). Our recursive resolver periodically re

what does "max-ncache-ttl 0;" mean?

man pages for named.conf says "max-ncache-ttl " and only talks about default values and max values - no mention of minimum-value. Does "max-ncache-ttl 0;" mean never cache negative queries (queries resulting in NXDOMAIN) or does it mean cache negative queries forever? Too lazy to test this opt

RE: what does "max-ncache-ttl 0;" mean?

http://www.google.com/search?q=max-ncache-ttl+0 John -Original Message- From: bind-users-boun...@lists.isc.org [mailto:bind-users-boun...@lists.isc.org] On Behalf Of blrmaani Sent: Wednesday, March 02, 2016 1:13 AM To: comp-protocols-dns-b...@isc.org Subject: what does "max-ncache-ttl 0;

Re: what does "max-ncache-ttl 0;" mean?

max-ncache-ttl sets the maximum time (in seconds) for which the server will cache negative (NXDOMAIN) answers (positives are defined by max-cache-ttl ). The default max-ncache-ttl is 10800 seconds (3 hours). max-ncache-ttl cannot exceed 7 days and will be silently truncated to 7 days if set to a

RE: what does "max-ncache-ttl 0;" mean?

Now quote your source. ;) From: bind-users-boun...@lists.isc.org [mailto:bind-users-boun...@lists.isc.org] On Behalf Of A. Renald Niswady Sent: Wednesday, March 02, 2016 1:23 AM To: blrmaani Cc: comp-protocols-dns-b...@isc.org Subject: Re: what does "max-ncache-ttl 0;" mean? max-ncache-ttl sets

Re: what does "max-ncache-ttl 0;" mean?

hehehe, http://www.zytrax.com/books/dns/ch7/hkpng.html#max-ncache-ttl i found zytrax site is really helpful Regards -Renald- - Original Message - From: "John W. Blue" To: "A. Renald Niswady" , "blrmaani" Cc: comp-protocols-dns-b...@isc.org Sent: Wednesday, March 2, 2016 2:2