Re: Zone 126.0.0.1 has 0 SOIA records
Please open a ticket at https://gitlab.isc.org/ for this. The zone file is being updated and re-written when it shouldn’t be. We will want more details from you. > On 13 Apr 2021, at 08:19, @lbutlr wrote: > > On 12 Apr 2021, at 07:04, Matthijs Mekking wrote: >> Perhaps inspect the zone file? > > Ah, since it is named localhost-reverse.db I assumed it was not plain txtm > but some db format. > FILE > $ORIGIN . > $TTL 3600 ; 1 hour > 0.ip6.arpa IN SOA localhost. nobody.localhost. ( >48 ; serial >86400 ; refresh (1 day) >43200 ; retry (12 hours) >604800 ; expire (1 week) >10800 ; minimum (3 hours) >) >NS localhost. >CDS 0 0 0 ( >00 ) >CDNSKEY 0 3 0 ( >AA== >) ; ZSK; alg = 0 ; key id = 768 > $ORIGIN 0.0.0.ip6.arpa. > 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0 PTR localhost. > 1 PTR localhost. > FILE > > That looks… very wrong. I wonder what happened. OK, storing that file from > backup too. > >> Also the CDS/CDNSKEY consistency checks stick out. Perhaps remove them from >> the unsigned zone files? > > Yeah, I don't know what happened to these files; they should be the default > ones FreeBSD makes )they are, now, once again) > > Thank you so much, I would never have found that. > > -- > Keep Virginia clean...throw your trash into Maryland. > > ___ > Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe > from this list > > ISC funds the development of this software with paid support subscriptions. > Contact us at https://www.isc.org/contact/ for more information. > > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: Zone 126.0.0.1 has 0 SOIA records
On 12 Apr 2021, at 07:04, Matthijs Mekking wrote: > Perhaps inspect the zone file? Ah, since it is named localhost-reverse.db I assumed it was not plain txtm but some db format. >>>FILE $ORIGIN . $TTL 3600 ; 1 hour 0.ip6.arpa IN SOA localhost. nobody.localhost. ( 48 ; serial 86400 ; refresh (1 day) 43200 ; retry (12 hours) 604800 ; expire (1 week) 10800 ; minimum (3 hours) ) NS localhost. CDS 0 0 0 ( 00 ) CDNSKEY 0 3 0 ( AA== ) ; ZSK; alg = 0 ; key id = 768 $ORIGIN 0.0.0.ip6.arpa. 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0 PTR localhost. 1 PTR localhost. FILE That looks… very wrong. I wonder what happened. OK, storing that file from backup too. > Also the CDS/CDNSKEY consistency checks stick out. Perhaps remove them from > the unsigned zone files? Yeah, I don't know what happened to these files; they should be the default ones FreeBSD makes )they are, now, once again) Thank you so much, I would never have found that. -- Keep Virginia clean...throw your trash into Maryland. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: Zone 126.0.0.1 has 0 SOIA records
Perhaps inspect the zone file? Also the CDS/CDNSKEY consistency checks stick out. Perhaps remove them from the unsigned zone files? Best regards, Matthijs On 12-04-2021 14:52, @lbutlr wrote: I restored a backup of my named.conf after a little bit of an oops. The file is the same exact file as it was yesterday, bt on starting bind I get: named[24161] named[24161] BIND 9 is maintained by Internet Systems Consortium, named[24161] Inc. (ISC), a non-profit 501(c)(3) public-benefit named[24161] corporation. Support and training for BIND 9 are named[24161] available at https://www.isc.org/support named[24161] named[24161] command channel listening on 127.0.0.1#953 named[24161] zone localhost/IN: CDS/CDNSKEY consistency checks failed named[24161] zone localhost/IN: not loaded due to errors. named[24161] /usr/local/etc/namedb/working/localhost-reverse.db:3: ignoring out-of-zone data (0.ip6.arpa) named[24161] /usr/local/etc/namedb/working/localhost-reverse.db:17: ignoring out-of-zone data (1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa) named[24161] /usr/local/etc/namedb/working/localhost-reverse.db:18: ignoring out-of-zone data (1.0.0.0.ip6.arpa) named[24161] zone 127.in-addr.arpa/IN: has 0 SOA records named[24161] zone 127.in-addr.arpa/IN: has no NS records named[24161] zone 127.in-addr.arpa/IN: not loaded due to errors. named[24161] zone 0.ip6.arpa/IN: CDS/CDNSKEY consistency checks failed named[24161] zone 0.ip6.arpa/IN: not loaded due to errors. named[24161] all zones loaded named[24161] DNS format error from 82.192.82.228#53 resolving 112.242.54.110.in-addr.arpa/PTR for 65.121.55.44#55292: Name in-addr.arpa (SOA) not subdomain of zone 242.54.110.in-addr.arpa -- invalid response named[24161] DNS format error from 82.192.82.228#53 resolving 112.242.54.110.in-addr.arpa/PTR for 127.0.0.1#27795: Name in-addr.arpa (SOA) not subdomain of zone 242.54.110.in-addr.arpa -- invalid response This last repeats periodically Stoping and starting named don't clear the error, but named appears to be fine (checking domains returns expected results). Key files are updating every hour as expected. The secondary servers are in sync… ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Zone 126.0.0.1 has 0 SOIA records
I restored a backup of my named.conf after a little bit of an oops. The file is the same exact file as it was yesterday, bt on starting bind I get: named[24161] named[24161] BIND 9 is maintained by Internet Systems Consortium, named[24161] Inc. (ISC), a non-profit 501(c)(3) public-benefit named[24161] corporation. Support and training for BIND 9 are named[24161] available at https://www.isc.org/support named[24161] named[24161] command channel listening on 127.0.0.1#953 named[24161] zone localhost/IN: CDS/CDNSKEY consistency checks failed named[24161] zone localhost/IN: not loaded due to errors. named[24161] /usr/local/etc/namedb/working/localhost-reverse.db:3: ignoring out-of-zone data (0.ip6.arpa) named[24161] /usr/local/etc/namedb/working/localhost-reverse.db:17: ignoring out-of-zone data (1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa) named[24161] /usr/local/etc/namedb/working/localhost-reverse.db:18: ignoring out-of-zone data (1.0.0.0.ip6.arpa) named[24161] zone 127.in-addr.arpa/IN: has 0 SOA records named[24161] zone 127.in-addr.arpa/IN: has no NS records named[24161] zone 127.in-addr.arpa/IN: not loaded due to errors. named[24161] zone 0.ip6.arpa/IN: CDS/CDNSKEY consistency checks failed named[24161] zone 0.ip6.arpa/IN: not loaded due to errors. named[24161] all zones loaded named[24161] DNS format error from 82.192.82.228#53 resolving 112.242.54.110.in-addr.arpa/PTR for 65.121.55.44#55292: Name in-addr.arpa (SOA) not subdomain of zone 242.54.110.in-addr.arpa -- invalid response named[24161] DNS format error from 82.192.82.228#53 resolving 112.242.54.110.in-addr.arpa/PTR for 127.0.0.1#27795: Name in-addr.arpa (SOA) not subdomain of zone 242.54.110.in-addr.arpa -- invalid response This last repeats periodically Stoping and starting named don't clear the error, but named appears to be fine (checking domains returns expected results). Key files are updating every hour as expected. The secondary servers are in sync… -- "Life is one damned kitten after another." Mehitabel the Alley Cat ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users