Bind9 / Named Question
C M Reinehr
cmr at amsent.com
Mon Sep 19 13:25:01 PDT 2016
Thanks to all in advance!
I set up a new server last month -- Debian v8.5 (Jessie) -- running Bind9 (1:9.9.5.dfsg-9+deb8u5).
I copied the configuration files from an older server and everything seems to be operating normally
except for one irritating behavior.
I also am running logcheck and every hour of the day, day in & day out, I receive the following messages:
System Events
=-=-=-=-=-=-=
Sep 19 14:10:52 Vingolf named[1063]: validating @0x7f98ac067600: consent.truste.com A: no valid signature found
Sep 19 14:10:52 Vingolf named[1063]: validating @0x7f98b0079120: consent.truste.com AAAA: no valid signature found
Sep 19 14:13:20 Vingolf named[1063]: validating @0x7f98a4056ed0: choices-or.truste.com A: no valid signature found
Sep 19 14:13:20 Vingolf named[1063]: validating @0x7f98a4057b60: choices.truste.com A: no valid signature found
Sep 19 14:27:14 Vingolf named[1063]: validating @0x7f98b49258f0: choices.truste.com AAAA: no valid signature found
Sep 19 14:27:14 Vingolf named[1063]: validating @0x7f98b0079120: choices.truste.com A: no valid signature found
Sep 19 14:27:16 Vingolf named[1063]: validating @0x7f989c06ee50: choices-or.truste.com AAAA: no valid signature found
Sep 19 14:27:16 Vingolf named[1063]: validating @0x7f989c070770: choices-or.truste.com A: no valid signature found
Always the same named domains. Some times fewer & some times more, but 24 hours a day these
messages are being logged.
Can anyone explain what program is triggering these attempts to validate these domains & why there
is a problem.
I have added the following statements in my named.conf.options file:
dnssec-enable yes;
dnssec-validation auto;
dnssec-lookaside auto;
Originally, it contained only the statement dnssec-validation yes; Changing made no difference.
Cheers & thanks, again!
--
C M Reinehr
----
Linux distribution Debian v8.5, "Jessie"
------
"The most difficult subjects can be explained to the most slow-witted man if he has not formed any idea of them already; but the simplest thing cannot be made clear to the most intelligent man if he is firmly persuaded that he knows already, without a shadow of a doubt, what is laid before him." -- Leo Tolstoy
--------
More information about the Linux-users
mailing list