<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto"><div></div><div style="direction: inherit;"><br></div><div><br>On Sep 19, 2016, at 5:42 PM, James McDonald via Linux-users <<a href="mailto:linux-users@linux-sxs.org">linux-users@linux-sxs.org</a>> wrote:<br><br></div><blockquote type="cite"><div><div dir="ltr">Sorry I just hit send with out reading... you've done all that... apologies<div><br></div><div>When I copy config files from one version to another I usually do a diff on the files as installed to see if there is something missing between the config files as installed and what I copied over... </div><div><br></div><div>So I usually grab the latest package and extract the contents of the deb and then do a compare...</div><div><br></div><div>May not be helpful, but just an idea.</div><div style="direction: inherit;"><br></div></div></div></blockquote><div style="direction: inherit;"><br></div><div style="direction: inherit;">+1</div><div style="direction: inherit;"><br></div><div style="direction: inherit;"><br></div><div style="direction: inherit;"><br></div><blockquote type="cite"><div><div class="gmail_extra"><br><div class="gmail_quote">On 20 September 2016 at 07:39, James McDonald <span dir="ltr"><<a href="mailto:james@jmits.com.au" target="_blank">james@jmits.com.au</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><a href="https://jackson-brain.com/bind-configuration-and-dnssec-validating-no-signature-found/" target="_blank">https://jackson-brain.com/<wbr>bind-configuration-and-dnssec-<wbr>validating-no-signature-found/</a><br><div><span style="color:rgb(27,27,27);font-family:"courier new",courier,monospace;font-size:15.6px;line-height:26.52px;white-space:nowrap;background-color:rgb(232,232,232)">dnssec-validation auto;</span><br></div><div><span style="color:rgb(27,27,27);font-family:"courier new",courier,monospace;font-size:15.6px;line-height:26.52px;white-space:nowrap;background-color:rgb(232,232,232)"><br></span></div><div><span style="color:rgb(27,27,27);font-family:"courier new",courier,monospace;font-size:15.6px;line-height:26.52px;white-space:nowrap;background-color:rgb(232,232,232)"><br></span></div></div><div class="gmail_extra"><div><div class="h5"><br><div class="gmail_quote">On 20 September 2016 at 06:25, C M Reinehr via Linux-users <span dir="ltr"><<a href="mailto:linux-users@linux-sxs.org" target="_blank">linux-users@linux-sxs.org</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Thanks to all in advance!<br>
<br>
I set up a new server last month -- Debian v8.5 (Jessie) -- running Bind9 (1:9.9.5.dfsg-9+deb8u5).<br>
I copied the configuration files from an older server and everything seems to be operating normally<br>
except for one irritating behavior.<br>
<br>
I also am running logcheck and every hour of the day, day in & day out, I receive the following messages:<br>
<br>
System Events<br>
=-=-=-=-=-=-=<br>
Sep 19 14:10:52 Vingolf named[1063]: validating @0x7f98ac067600: <a href="http://consent.truste.com" rel="noreferrer" target="_blank">consent.truste.com</a> A: no valid signature found<br>
Sep 19 14:10:52 Vingolf named[1063]: validating @0x7f98b0079120: <a href="http://consent.truste.com" rel="noreferrer" target="_blank">consent.truste.com</a> AAAA: no valid signature found<br>
Sep 19 14:13:20 Vingolf named[1063]: validating @0x7f98a4056ed0: <a href="http://choices-or.truste.com" rel="noreferrer" target="_blank">choices-or.truste.com</a> A: no valid signature found<br>
Sep 19 14:13:20 Vingolf named[1063]: validating @0x7f98a4057b60: <a href="http://choices.truste.com" rel="noreferrer" target="_blank">choices.truste.com</a> A: no valid signature found<br>
Sep 19 14:27:14 Vingolf named[1063]: validating @0x7f98b49258f0: <a href="http://choices.truste.com" rel="noreferrer" target="_blank">choices.truste.com</a> AAAA: no valid signature found<br>
Sep 19 14:27:14 Vingolf named[1063]: validating @0x7f98b0079120: <a href="http://choices.truste.com" rel="noreferrer" target="_blank">choices.truste.com</a> A: no valid signature found<br>
Sep 19 14:27:16 Vingolf named[1063]: validating @0x7f989c06ee50: <a href="http://choices-or.truste.com" rel="noreferrer" target="_blank">choices-or.truste.com</a> AAAA: no valid signature found<br>
Sep 19 14:27:16 Vingolf named[1063]: validating @0x7f989c070770: <a href="http://choices-or.truste.com" rel="noreferrer" target="_blank">choices-or.truste.com</a> A: no valid signature found<br>
<br>
Always the same named domains. Some times fewer & some times more, but 24 hours a day these<br>
messages are being logged.<br>
<br>
Can anyone explain what program is triggering these attempts to validate these domains & why there<br>
is a problem.<br>
<br>
I have added the following statements in my named.conf.options file:<br>
<br>
dnssec-enable yes;<br>
<br>
dnssec-validation auto;<br>
<br>
dnssec-lookaside auto;<br>
<br>
Originally, it contained only the statement dnssec-validation yes; Changing made no difference.<br>
<br>
Cheers & thanks, again!<br>
<span><font color="#888888"><br>
--<br>
C M Reinehr<br>
----<br>
Linux distribution Debian v8.5, "Jessie"<br>
------<br>
"The most difficult subjects can be explained to the most slow-witted man if he has not formed any idea of them already; but the simplest thing cannot be made clear to the most intelligent man if he is firmly persuaded that he knows already, without a shadow of a doubt, what is laid before him." -- Leo Tolstoy<br>
--------<br>
<br>
______________________________<wbr>_________________<br>
Linux-users mailing list<br>
<a href="mailto:Linux-users@linux-sxs.org" target="_blank">Linux-users@linux-sxs.org</a><br>
<a href="http://mailman.celestial.com/mailman/listinfo/linux-users" rel="noreferrer" target="_blank">http://mailman.celestial.com/m<wbr>ailman/listinfo/linux-users</a><br>
</font></span></blockquote></div><br><br clear="all"><div><br></div></div></div><span class="HOEnZb"><font color="#888888">-- <br><div data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div style="font-size:12.8000001907349px"><span style="font-size:12.8000001907349px">James McDonald IT Services</span></div><div style="font-size:12.8000001907349px"><span style="font-size:12.8000001907349px">11/79 Earl St, Kew, VIC, 3101</span><br><span></span></div><div style="font-size:12.8000001907349px"><div style="font-size:12.8000001907349px">Mob.: <a href="tel:%2B61%20428%20964%20633" value="+61428964633" target="_blank">+61 428 964 633</a><br></div><div style="font-size:12.8000001907349px">Email: <a href="mailto:james@jmits.com.au" target="_blank">james@jmits.com.au</a></div><div style="font-size:12.8000001907349px">ABN: 84 008 812 322</div></div></div></div></div></div></div></div></div></div></div></div>
</font></span></div>
</blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div style="font-size:12.8000001907349px"><span style="font-size:12.8000001907349px">James McDonald IT Services</span></div><div style="font-size:12.8000001907349px"><span style="font-size:12.8000001907349px">11/79 Earl St, Kew, VIC, 3101</span><br><span></span></div><div style="font-size:12.8000001907349px"><div style="font-size:12.8000001907349px">Mob.: +61 428 964 633<br></div><div style="font-size:12.8000001907349px">Email: <a href="mailto:james@jmits.com.au" target="_blank">james@jmits.com.au</a></div><div style="font-size:12.8000001907349px">ABN: 84 008 812 322</div></div></div></div></div></div></div></div></div></div></div></div>
</div>
</div></blockquote><blockquote type="cite"><div><span>_______________________________________________</span><br><span>Linux-users mailing list</span><br><span><a href="mailto:Linux-users@linux-sxs.org">Linux-users@linux-sxs.org</a></span><br><span><a href="http://mailman.celestial.com/mailman/listinfo/linux-users">http://mailman.celestial.com/mailman/listinfo/linux-users</a></span><br></div></blockquote></body></html>