Loads of logs "validation failure" for non-DNSSEC signed zones, probably due to RPZ

[Fredrik Pettai via Unbound-users]

Hi,

After upgrading to Unbound 1.21.0, I see loads of logs like:

Aug 27 07:50:59 resolver unbound: [1387:f] info: validation failure <domain. A 
IN>: key for validation domain. is marked as invalid because of a previous
Aug 27 07:50:59 resolver unbound: [1387:a] info: validation failure <domain. A 
IN>: key for validation domain. is marked as invalid because of a previous
Aug 27 07:50:59 resolver unbound: [1387:2] info: validation failure <domain. A 
IN>: key for validation domain. is marked as invalid because of a previous

And most of the domains aren’t even DNSSEC signed.

I put some details over here:
https://github.com/NLnetLabs/unbound/issues/1130

Re,
/P

signature.asc
Description: Message signed with OpenPGP