special solution needed please

2020-12-20 Thread Walter H.
Hello, I'm using BIND as a caching resolver and also a authoritative DNS server for a '.home.arpa' local used domain; I have two BINDs, one as a master and the other as a slave; also two views are used, because there are some zones e.g. 100.168.192.in-addr.arpa  or some public zones that a 'r

Re: Forwarded lookup failing on no valid RRSIG

2020-12-20 Thread Matthew Pounsett
On Fri, 18 Dec 2020 at 18:08, Nicolas Bock wrote: > Thanks Mark. Am I correct then that I need to either convince the > administrator of that DNS to enable DNSSEC or configure my DNS with > `dnssec-validation = no`? > The upstream administrator isn't required to be validating DNSSEC for this to

Re: Forwarded lookup failing on no valid RRSIG

2020-12-20 Thread Mark Andrews
> On 21 Dec 2020, at 06:04, Matthew Pounsett wrote: > > > > On Fri, 18 Dec 2020 at 18:08, Nicolas Bock wrote: > Thanks Mark. Am I correct then that I need to either convince the > administrator of that DNS to enable DNSSEC or configure my DNS with > `dnssec-validation = no`? > > The upstr

issue with domain forwarding

2020-12-20 Thread Frank
   Hi, Just to let everyone know that I have solved my issue by upgrading to bind-9.16.10.  It is working fine now. -- sysadm cronomagic.com e-mail ve2...@canasoft.net POWERED BY LINUX ___ Please visit https://lists.isc.org/mailman/listinfo

Re: special solution needed please

2020-12-20 Thread Mark Andrews
Firstly, read your logs, they will most probably tell you what is going wrong. Secondly, use TSIG between primary and secondary to select views for zone transfers. It is much more reliable. Thirdly, errors are almost always typos. Using the documentation prefix hides these. You are not writi