On 2026/05/14 01:13:18 Tom Bartel wrote:
Support Intelligence acknowledges that the DBL is not signed
currently. They've removed all the DNSSEC from the zone for the moment,
until they can sign the zone. Keep an eye on it, and if I get word it's in
place, I'll post here.
Hi Tom & J.,
Thank you for having raised this thread as I was wondering since a while the
root cause of these DNS errors in my logs.
DNSSEC validation is also enabled on my server:
grep dnssec-validation /usr/local/etc/namedb/named.conf.options
dnssec-validation auto;
Based on my logs (low activity mx), this issue started on Apr 21 10:40:30 CEST
(UTC+2).
Example of errors generated :
May 15 21:49:57 icecube named[33909]: DNS format error from 38.130.107.11#53 resolving a.support-intelligence.net/AAAA for
<unknown>: unrelated SOA dob.support-intelligence.net in a.support-intelligence.net authority section
May 15 21:49:57 icecube named[33909]: DNS format error from 38.130.107.11#53 resolving a.support-intelligence.net/AAAA for
<unknown>: invalid response
May 15 21:49:57 icecube named[33909]: FORMERR resolving
'a.support-intelligence.net/AAAA/IN': 38.130.107.11#53
May 15 21:49:57 icecube named[33909]: DNS format error from 38.130.107.11#53 resolving b.support-intelligence.net/AAAA for
<unknown>: unrelated SOA dob.support-intelligence.net in b.support-intelligence.net authority section
May 15 21:49:57 icecube named[33909]: DNS format error from 38.130.107.11#53 resolving b.support-intelligence.net/AAAA for
<unknown>: invalid response
May 15 21:49:57 icecube named[33909]: FORMERR resolving
'b.support-intelligence.net/AAAA/IN': 38.130.107.11#53
I hope they'll be able to resolve this issue :-)
Kind regards,
Arnaud.
