RE: DNSSEC Error Log - named[4132]: managed-keys-zone/“externals”: Unable to fetch DNSKEY set '.': timed out

2019-08-06 Thread Tony Finch
LeBlanc, Daniel James wrote: > > Our authoritative servers are not sending notifies anywhere, and we use > only IPs within the config file (Ansible managed) so I wouldn’t expect > that any NS records are being resolved. You need to have `notify no` or `notify explicit` in the authoritative view,

RE: DNSSEC Error Log - named[4132]: managed-keys-zone/“externals”: Unable to fetch DNSKEY set '.': timed out

2019-08-06 Thread LeBlanc, Daniel James
ell Canada -Original Message- From: Tony Finch [mailto:d...@dotat.at] Sent: August-05-19 11:21 AM To: LeBlanc, Daniel James Cc: ML BIND Users (bind-users@lists.isc.org); Lavigne-Giroux, Simon Subject: [EXT]Re: DNSSEC Error Log - named[4132]: managed-keys-zone/“externals”: Unable to fetch

Re: DNSSEC Error Log - named[4132]: managed-keys-zone/“externals”: Unable to fetch DNSKEY set '.': timed out

2019-08-05 Thread Tony Finch
LeBlanc, Daniel James wrote: > > This is occurring only on my authoritative servers and only for the view > that I do not have recursion enabled for (the “externals” view; the > “internals” view has recursion enabled and it is working). It's curious that trust anchor maintenance works for one vie

DNSSEC Error Log - named[4132]: managed-keys-zone/“externals”: Unable to fetch DNSKEY set '.': timed out

2019-08-02 Thread LeBlanc, Daniel James
Hello All. I am receiving the following log entry a couple of times per hour on my ISC BIND 9.14.0 VMs: named[4132]: managed-keys-zone/“externals”: Unable to fetch DNSKEY set '.': timed out This is occurring only on my authoritative servers and only for the view that I do not have recursion e