Skip to content
GitLab
Projects Groups Snippets
  • /
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Sign in / Register
  • BIND BIND
  • Project information
    • Project information
    • Activity
    • Labels
    • Members
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributors
    • Graph
    • Compare
  • Issues 572
    • Issues 572
    • List
    • Boards
    • Service Desk
    • Milestones
  • Merge requests 111
    • Merge requests 111
  • CI/CD
    • CI/CD
    • Pipelines
    • Jobs
    • Schedules
  • Deployments
    • Deployments
    • Environments
    • Releases
  • Packages and registries
    • Packages and registries
    • Container Registry
  • Monitor
    • Monitor
    • Incidents
  • Analytics
    • Analytics
    • Value stream
    • CI/CD
    • Repository
  • Wiki
    • Wiki
  • Snippets
    • Snippets
  • Activity
  • Graph
  • Create a new issue
  • Jobs
  • Commits
  • Issue Boards
Collapse sidebar
  • ISC Open Source ProjectsISC Open Source Projects
  • BINDBIND
  • Issues
  • #1242
Closed
Open
Issue created Sep 22, 2019 by Ghost User@ghost

DNS query failed if I turned on DNSSec

Summary

Dear, sir

I repeatedly encounter this issue. I use my BIND 9 DNS service as a resolver only and it does not provider DNS hosting service.

However, if I turned on the DNSSec query function in the configuration file, after some time of working (several days to nearly two weeks), the DNS resolving service will fail.

Once I restarted the BIND9 service, DNS resolving function gets back to normal. But later for a duration (days to weeks), it stops to working again.

I enabled the DNSSec querying function by this two lines in the ./bind/named.conf.options file.

dnssec-enable yes;
dnssec-validation auto;

Error output

aaa@bbb:~$ nslookup baidu.com Server: 127.0.0.53 Address: 127.0.0.53#53

** server can't find baidu.com: SERVFAIL

BIND version used

bind9: Installed: 1:9.11.3+dfsg-1ubuntu1.8 Candidate: 1:9.11.3+dfsg-1ubuntu1.9

Notice

My named.conf.options settings is published at Github here, https://github.com/TomHsiung/bind/blob/master/named.conf.options

Edited Sep 22, 2019 by Ghost User
Assignee
Assign to
Time tracking