Bind9 / Named Question

C M Reinehr cmr at amsent.com
Mon Sep 19 13:25:01 PDT 2016


Thanks to all in advance!

I set up a new server last month -- Debian v8.5 (Jessie) -- running Bind9 (1:9.9.5.dfsg-9+deb8u5).
I copied the configuration files from an older server and everything seems to be operating normally
except for one irritating behavior.

I also am running logcheck and every hour of the day, day in & day out, I receive the following messages:

System Events
=-=-=-=-=-=-=
Sep 19 14:10:52 Vingolf named[1063]: validating @0x7f98ac067600: consent.truste.com A: no valid signature found
Sep 19 14:10:52 Vingolf named[1063]: validating @0x7f98b0079120: consent.truste.com AAAA: no valid signature found
Sep 19 14:13:20 Vingolf named[1063]: validating @0x7f98a4056ed0: choices-or.truste.com A: no valid signature found
Sep 19 14:13:20 Vingolf named[1063]: validating @0x7f98a4057b60: choices.truste.com A: no valid signature found
Sep 19 14:27:14 Vingolf named[1063]: validating @0x7f98b49258f0: choices.truste.com AAAA: no valid signature found
Sep 19 14:27:14 Vingolf named[1063]: validating @0x7f98b0079120: choices.truste.com A: no valid signature found
Sep 19 14:27:16 Vingolf named[1063]: validating @0x7f989c06ee50: choices-or.truste.com AAAA: no valid signature found
Sep 19 14:27:16 Vingolf named[1063]: validating @0x7f989c070770: choices-or.truste.com A: no valid signature found

Always the same named domains. Some times fewer & some times more, but 24 hours a day these
messages are being logged.

Can anyone explain what program is triggering these attempts to validate these domains & why there
is a problem.

I have added the following statements in my named.conf.options file:

	dnssec-enable yes;

	dnssec-validation auto;

	dnssec-lookaside auto;

Originally, it contained only the statement dnssec-validation yes; Changing made no difference.

Cheers & thanks, again!

-- 
C M Reinehr
----
Linux distribution Debian v8.5, "Jessie"
------
"The most difficult subjects can be explained to the most slow-witted man if he has not formed any idea of them already; but the simplest thing cannot be made clear to the most intelligent man if he is firmly persuaded that he knows already, without a shadow of a doubt, what is laid before him." -- Leo Tolstoy
--------



More information about the Linux-users mailing list