On Sunday 30 November 2014 11:59:16 Karl E. Jorgensen wrote: > Hi > > On Sun, Nov 30, 2014 at 12:26:36PM +0100, Rainer Dorsch wrote: > > Hi Pascal, > > > > On Sunday 30 November 2014 11:15:41 Pascal Hambourg wrote: > > > Hello, > > > > > > Rainer Dorsch a écrit : > > > > I run bind9 locally and noticed that bind9 sometimes needs a restart > > > > after > > > > suspend. > > > > > > Why ? Not running, not resolving, errors... ? > > > > bind9 does not respond. > > > > See e.g. the dig command from my previous post > > > > blackbox:~# dig heise.de > > ^Cblackbox:~# > > That was well hidden :-) > > Any related messages in /var/log/daemon.log ?
Indeed there are a number of entries in there, these are the entries right after restart: Nov 30 10:10:49 blackbox named[24198]: clients-per-query decreased to 12 Nov 30 10:10:50 blackbox console-kit-daemon[2055]: WARNING: Error waiting for native console 56 activation: Resource temporarily unavailable Nov 30 10:10:50 blackbox named[24198]: validating @0xb3f5c0d0: . NS: got insecure response; parent indicates it should be secure Nov 30 10:10:50 blackbox named[24198]: error (insecurity proof failed) resolving './NS/IN': 192.168.178.1#53 Nov 30 10:10:50 blackbox named[24198]: error (network unreachable) resolving './NS/IN': 2001:503:c27::2:30#53 Nov 30 10:10:50 blackbox named[24198]: managed-keys-zone: No DNSKEY RRSIGs found for '.': success Nov 30 10:10:50 blackbox named[24198]: validating @0xb3a00018: . NS: no valid signature found Nov 30 10:10:50 blackbox named[24198]: error (no valid RRSIG) resolving './NS/IN': 199.7.91.13#53 Nov 30 10:10:50 blackbox named[24198]: validating @0xb3a00018: . NS: no valid signature found Nov 30 10:10:50 blackbox named[24198]: error (no valid RRSIG) resolving './NS/IN': 199.7.83.42#53 Nov 30 10:10:50 blackbox named[24198]: validating @0xb3a00018: . NS: no valid signature found Nov 30 10:10:50 blackbox named[24198]: error (no valid RRSIG) resolving './NS/IN': 192.36.148.17#53 Nov 30 10:10:50 blackbox named[24198]: validating @0xb3a00018: . NS: no valid signature found Nov 30 10:10:50 blackbox named[24198]: error (no valid RRSIG) resolving './NS/IN': 192.5.5.241#53 Nov 30 10:10:50 blackbox named[24198]: validating @0xb3a00018: . NS: no valid signature found Nov 30 10:10:50 blackbox named[24198]: error (no valid RRSIG) resolving './NS/IN': 198.41.0.4#53 Nov 30 10:10:50 blackbox colord: device removed: sysfs-(null) Nov 30 10:10:50 blackbox colord: device removed: sysfs-(null) Nov 30 10:10:50 blackbox named[24198]: validating @0xb3a00018: . NS: no valid signature found Nov 30 10:10:50 blackbox named[24198]: error (no valid RRSIG) resolving './NS/IN': 193.0.14.129#53 Nov 30 10:10:50 blackbox named[24198]: validating @0xb3a00018: . NS: no valid signature found Nov 30 10:10:50 blackbox named[24198]: error (no valid RRSIG) resolving './NS/IN': 202.12.27.33#53 Nov 30 10:10:50 blackbox named[24198]: validating @0xb3a00018: . NS: no valid signature found Nov 30 10:10:50 blackbox named[24198]: error (no valid RRSIG) resolving './NS/IN': 192.33.4.12#53 Nov 30 10:10:50 blackbox named[24198]: error (network unreachable) resolving './NS/IN': 2001:500:1::803f:235#53 Nov 30 10:10:50 blackbox colord: device removed: sysfs-asus-Nexus_7 Nov 30 10:10:51 blackbox named[24198]: error (chase DS servers) resolving 'com/DS/IN': 192.168.178.1#53 Nov 30 10:10:51 blackbox named[24198]: validating @0xb3f40ff0: . NS: no valid signature found Nov 30 10:10:51 blackbox named[24198]: error (no valid RRSIG) resolving './NS/IN': 192.112.36.4#53 Nov 30 10:10:51 blackbox named[24198]: validating @0xb3f40ff0: . NS: no valid signature found Nov 30 10:10:51 blackbox named[24198]: error (no valid RRSIG) resolving './NS/IN': 192.228.79.201#53 Nov 30 10:10:51 blackbox named[24198]: validating @0xb3a00018: . NS: no valid signature found Nov 30 10:10:51 blackbox named[24198]: error (no valid RRSIG) resolving './NS/IN': 192.203.230.10#53 Nov 30 10:10:51 blackbox named[24198]: validating @0xb3f40ff0: . NS: no valid signature found Nov 30 10:10:51 blackbox named[24198]: error (no valid RRSIG) resolving './NS/IN': 192.58.128.30#53 Nov 30 10:10:51 blackbox named[24198]: error (network unreachable) resolving './NS/IN': 2001:500:2d::d#53 Nov 30 10:10:51 blackbox named[24198]: error (network unreachable) resolving './NS/IN': 2001:500:3::42#53 Nov 30 10:10:51 blackbox named[24198]: error (network unreachable) resolving './NS/IN': 2001:7fe::53#53 Nov 30 10:10:51 blackbox named[24198]: error (network unreachable) resolving './NS/IN': 2001:500:2f::f#53 Nov 30 10:10:51 blackbox named[24198]: error (network unreachable) resolving './NS/IN': 2001:503:ba3e::2:30#53 Nov 30 10:10:51 blackbox named[24198]: error (network unreachable) resolving './NS/IN': 2001:7fd::1#53 Nov 30 10:10:51 blackbox named[24198]: error (network unreachable) resolving './NS/IN': 2001:dc3::35#53 Nov 30 10:10:51 blackbox named[24198]: error (no valid RRSIG) resolving 'arpa/DS/IN': 192.168.178.1#53 Nov 30 10:10:51 blackbox named[24198]: validating @0xb3f40ff0: arpa DS: no valid signature found Nov 30 10:10:51 blackbox named[24198]: error (no valid RRSIG) resolving 'arpa/DS/IN': 192.58.128.30#53 Nov 30 10:10:51 blackbox named[24198]: error (network unreachable) resolving 'arpa/DS/IN': 2001:500:2d::d#53 Nov 30 10:10:51 blackbox named[24198]: error (network unreachable) resolving 'arpa/DS/IN': 2001:503:ba3e::2:30#53 Nov 30 10:10:51 blackbox named[24198]: error (network unreachable) resolving 'arpa/DS/IN': 2001:500:2f::f#53 Nov 30 10:10:51 blackbox named[24198]: error (network unreachable) resolving 'arpa/DS/IN': 2001:7fe::53#53 Nov 30 10:10:51 blackbox named[24198]: error (network unreachable) resolving 'arpa/DS/IN': 2001:7fd::1#53 Nov 30 10:10:51 blackbox named[24198]: error (network unreachable) resolving 'arpa/DS/IN': 2001:dc3::35#53 Nov 30 10:10:51 blackbox named[24198]: validating @0xb3f40ff0: arpa DS: no valid signature found Nov 30 10:10:51 blackbox named[24198]: error (no valid RRSIG) resolving 'arpa/DS/IN': 199.7.83.42#53 Nov 30 10:10:51 blackbox named[24198]: validating @0xb3f40ff0: . NS: no valid signature found Nov 30 10:10:51 blackbox named[24198]: error (no valid RRSIG) resolving './NS/IN': 128.63.2.53#53 Nov 30 10:10:51 blackbox named[24198]: error (no valid DS) resolving 'chat.facebook.com/AAAA/IN': 192.168.178.1#53 Nov 30 10:10:51 blackbox named[24198]: error (no valid DS) resolving 'chat.facebook.com/A/IN': 192.168.178.1#53 Nov 30 10:10:51 blackbox named[24198]: validating @0xb3f5c0d0: arpa DS: no valid signature found Nov 30 10:10:51 blackbox named[24198]: error (no valid RRSIG) resolving 'arpa/DS/IN': 192.33.4.12#53 Nov 30 10:10:51 blackbox named[24198]: error (chase DS servers) resolving 'com/DS/IN': 192.168.178.1#53 Nov 30 10:10:51 blackbox named[24198]: validating @0xb3f40ff0: . NS: got insecure response; parent indicates it should be secure Nov 30 10:10:51 blackbox named[24198]: error (insecurity proof failed) resolving './NS/IN': 192.168.178.1#53 But after restart when bind9 is working, I still see similar entries: Nov 30 15:19:40 blackbox named[2322]: validating @0xb4072230: . NS: got insecure response; parent indicates it should be secure Nov 30 15:19:40 blackbox named[2322]: error (insecurity proof failed) resolving './NS/IN': 192.168.178.1#53 Nov 30 15:19:40 blackbox named[2322]: validating @0xb408b998: org SOA: got insecure response; parent indicates it should be secure Nov 30 15:19:40 blackbox named[2322]: error (no valid RRSIG) resolving 'libraw.org/DS/IN': 192.168.178.1#53 Nov 30 15:20:14 blackbox named[2322]: validating @0xb4072230: 239.in- addr.arpa SOA: got insecure response; parent indicates it should be secure Nov 30 15:20:15 blackbox named[2322]: validating @0xb3709648: 239.in- addr.arpa SOA: got insecure response; parent indicates it should be secure Nov 30 15:20:15 blackbox named[2322]: error (no valid RRSIG) resolving '255.239.in-addr.arpa/DS/IN': 192.168.178.1#53 Nov 30 15:20:15 blackbox named[2322]: validating @0xb4a48968: 239.in-addr.arpa DNSKEY: got insecure response; parent indicates it should be secure Nov 30 15:20:15 blackbox named[2322]: error (insecurity proof failed) resolving '239.in-addr.arpa/DNSKEY/IN': 192.168.178.1#53 Nov 30 15:20:16 blackbox named[2322]: validating @0xb4a48968: 239.in- addr.arpa SOA: got insecure response; parent indicates it should be secure Nov 30 15:20:16 blackbox named[2322]: error (no valid RRSIG) resolving '255.255.239.in-addr.arpa/DS/IN': 192.168.178.1#53 Nov 30 15:20:16 blackbox named[2322]: validating @0xb4a48968: 239.in- addr.arpa SOA: got insecure response; parent indicates it should be secure Nov 30 15:20:16 blackbox named[2322]: error (no valid RRSIG) resolving '250.255.255.239.in-addr.arpa/DS/IN': 192.168.178.1#53 Nov 30 15:20:16 blackbox named[2322]: error (insecurity proof failed) resolving '250.255.255.239.in-addr.arpa/PTR/IN': 192.168.178.1#53 Nov 30 15:21:53 blackbox named[2322]: validating @0xb404f900: . NS: got insecure response; parent indicates it should be secure Nov 30 15:21:53 blackbox named[2322]: error (insecurity proof failed) resolving './NS/IN': 192.168.178.1#53 Nov 30 15:21:53 blackbox named[2322]: error (network unreachable) resolving './NS/IN': 2001:503:c27::2:30#53 Nov 30 15:21:53 blackbox named[2322]: error (network unreachable) resolving './NS/IN': 2001:500:2f::f#53 Nov 30 15:21:53 blackbox named[2322]: error (no valid RRSIG) resolving 'blackbox/DS/IN': 192.168.178.1#53 Nov 30 15:21:53 blackbox named[2322]: error (insecurity proof failed) resolving 'blackbox/AAAA/IN': 192.168.178.1#53 Nov 30 15:21:53 blackbox named[2322]: error (network unreachable) resolving 'blackbox/AAAA/IN': 2001:503:c27::2:30#53 Nov 30 15:21:53 blackbox named[2322]: error (network unreachable) resolving 'blackbox/AAAA/IN': 2001:500:2f::f#53 So not sure if the entries at the beginning are really meaningful. Thanks, Rainer -- Rainer Dorsch http://bokomoko.de/ -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org/1449422.mBHhz0mVS4@blackbox
