Hello :D
I'm having problems with named...
did not make any changes or updates ...
but now it stopped working on some sites , do not know if the provider can be wrong, but I've been checking the logs, and I think it might be something with the dnssec or even to bind
following logs and details:
did not make any changes or updates ...
but now it stopped working on some sites , do not know if the provider can be wrong, but I've been checking the logs, and I think it might be something with the dnssec or even to bind
following logs and details:
[root@cdf-server /]# rpm -q bind dnssec-conf
bind-9.6.2-4.P2.fc11.i586
dnssec-conf-1.21-1.fc11.noarch
==================================================================
[root@cdf-server /]# ping www.uol.com.br
ping: unknown host www.uol.com.br
tail -f var log messages:
Jul 27 13:35:46 cdf-server named[5939]: validating @0xb361c178: br DNSKEY: unable to find a DNSKEY which verifies the DNSKEY RRset and also matches one of specified trusted-keys for 'br'
Jul 27 13:35:46 cdf-server named[5939]: validating @0xb361c178: br DNSKEY: please check the 'trusted-keys' for 'br' in named.conf.
Jul 27 13:35:46 cdf-server named[5939]: no valid KEY resolving 'br/DNSKEY/IN': 200.219.159.10#53
Jul 27 13:35:46 cdf-server named[5939]: validating @0xb3419c48: br DNSKEY: unable to find a DNSKEY which verifies the DNSKEY RRset and also matches one of specified trusted-keys for 'br'
Jul 27 13:35:46 cdf-server named[5939]: validating @0xb3419c48: br DNSKEY: please check the 'trusted-keys' for 'br' in named.conf.
Jul 27 13:35:46 cdf-server named[5939]: no valid KEY resolving 'br/DNSKEY/IN': 200.192.232.10#53
Jul 27 13:35:46 cdf-server named[5939]: validating @0xb3738498: br DNSKEY: unable to find a DNSKEY which verifies the DNSKEY RRset and also matches one of specified trusted-keys for 'br'
Jul 27 13:35:46 cdf-server named[5939]: validating @0xb3738498: br DNSKEY: please check the 'trusted-keys' for 'br' in named.conf.
Jul 27 13:35:46 cdf-server named[5939]: no valid KEY resolving 'br/DNSKEY/IN': 200.160.0.10#53
Jul 27 13:35:46 cdf-server named[5939]: validating @0xb3738498: br DNSKEY: unable to find a DNSKEY which verifies the DNSKEY RRset and also matches one of specified trusted-keys for 'br'
Jul 27 13:35:46 cdf-server named[5939]: validating @0xb3738498: br DNSKEY: please check the 'trusted-keys' for 'br' in named.conf.
Jul 27 13:35:46 cdf-server named[5939]: no valid KEY resolving 'br/DNSKEY/IN': 200.189.40.10#53
Jul 27 13:35:46 cdf-server named[5939]: validating @0xb3419c48: br DNSKEY: unable to find a DNSKEY which verifies the DNSKEY RRset and also matches one of specified trusted-keys for 'br'
Jul 27 13:35:46 cdf-server named[5939]: validating @0xb3419c48: br DNSKEY: please check the 'trusted-keys' for 'br' in named.conf.
Jul 27 13:35:46 cdf-server named[5939]: no valid KEY resolving 'br/DNSKEY/IN': 200.229.248.10#53
Jul 27 13:35:47 cdf-server named[5939]: validating @0xb3215920: br DNSKEY: unable to find a DNSKEY which verifies the DNSKEY RRset and also matches one of specified trusted-keys for 'br'
Jul 27 13:35:47 cdf-server named[5939]: validating @0xb3215920: br DNSKEY: please check the 'trusted-keys' for 'br' in named.conf.
Jul 27 13:35:47 cdf-server named[5939]: no valid KEY resolving 'br/DNSKEY/IN': 200.219.154.10#53
Jul 27 13:35:47 cdf-server named[5939]: network unreachable resolving 'br/DNSKEY/IN': 2001:12ff::10#53
Jul 27 13:35:47 cdf-server named[5939]: network unreachable resolving 'br/DNSKEY/IN': 2001:12f8:1::10#53
Jul 27 13:35:47 cdf-server named[5939]: broken trust chain resolving 'www.uol.com.br/A/IN': 200.221.11.98#53
==================================================================
[root@cdf-server /]# /etc/init.d/named restart
Stopping named: [ OK ]
Starting named: [ OK ]
tail -f var log messages
Jul 27 13:38:34 cdf-server named[5939]: received control channel command 'stop'
Jul 27 13:38:34 cdf-server named[5939]: shutting down: flushing changes
Jul 27 13:38:34 cdf-server named[5939]: stopping command channel on 127.0.0.1#953
Jul 27 13:38:34 cdf-server named[5939]: stopping command channel on ::1#953
Jul 27 13:38:34 cdf-server named[5939]: no longer listening on 127.0.0.1#53
Jul 27 13:38:34 cdf-server named[5939]: no longer listening on 186.204.99.13#53
Jul 27 13:38:34 cdf-server named[5939]: no longer listening on 192.168.5.1#53
Jul 27 13:38:34 cdf-server named[5939]: no longer listening on 192.168.8.10#53
Jul 27 13:38:34 cdf-server named[5939]: no longer listening on ::1#53
Jul 27 13:38:34 cdf-server named[5939]: exiting
Jul 27 13:38:35 cdf-server named[6100]: starting BIND 9.6.2-P2-RedHat-9.6.2-4.P2.fc11 -u named
Jul 27 13:38:35 cdf-server named[6100]: built with '--build=i386-redhat-linux-gnu' '--host=i386-redhat-linux-gnu' '--target=i586-redhat-linux-gnu' '--program-prefix=' '--prefix=/usr' '--exec-prefix=/usr' '--bindir=/usr/bin' '--sbindir=/usr/sbin' '--sysconfdir=/etc' '--datadir=/usr/share' '--includedir=/usr/include' '--libdir=/usr/lib' '--libexecdir=/usr/libexec' '--sharedstatedir=/var/lib' '--mandir=/usr/share/man' '--infodir=/usr/share/info' '--with-libtool' '--localstatedir=/var' '--enable-threads' '--enable-ipv6' '--with-pic' '--disable-static' '--disable-openssl-version-check' '--with-dlz-ldap=yes' '--with-dlz-postgres=yes' '--with-dlz-mysql=yes' '--with-dlz-filesystem=yes' '--with-gssapi=yes' '--disable-isc-spnego' 'build_alias=i386-redhat-linux-gnu' 'host_alias=i386-redhat-linux-gnu' 'target_alias=i586-redhat-linux-gnu' 'CFLAGS= -O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -m32 -march=i586 -mtune=generic -fasynchronous-unwind-tables' 'CPPFLAGS= -DDIG_SIGCHASE'
Jul 27 13:38:35 cdf-server named[6100]: adjusted limit on open files from 65536 to 1048576
Jul 27 13:38:35 cdf-server named[6100]: found 4 CPUs, using 4 worker threads
Jul 27 13:38:35 cdf-server named[6100]: using up to 4096 sockets
Jul 27 13:38:35 cdf-server named[6100]: loading configuration from '/etc/named.conf'
Jul 27 13:38:35 cdf-server named[6100]: using default UDP/IPv4 port range: [1024, 65535]
Jul 27 13:38:35 cdf-server named[6100]: using default UDP/IPv6 port range: [1024, 65535]
Jul 27 13:38:35 cdf-server named[6100]: listening on IPv4 interface lo, 127.0.0.1#53
Jul 27 13:38:35 cdf-server named[6100]: listening on IPv4 interface eth1, 186.204.99.13#53
Jul 27 13:38:35 cdf-server named[6100]: listening on IPv4 interface eth0, 192.168.5.1#53
Jul 27 13:38:35 cdf-server named[6100]: listening on IPv4 interface tap0, 192.168.8.10#53
Jul 27 13:38:35 cdf-server named[6100]: listening on IPv6 interface lo, ::1#53
Jul 27 13:38:35 cdf-server named[6100]: automatic empty zone: 127.IN-ADDR.ARPA
Jul 27 13:38:35 cdf-server named[6100]: automatic empty zone: 254.169.IN-ADDR.ARPA
Jul 27 13:38:35 cdf-server named[6100]: automatic empty zone: 2.0.192.IN-ADDR.ARPA
Jul 27 13:38:35 cdf-server named[6100]: automatic empty zone: 255.255.255.255.IN-ADDR.ARPA
Jul 27 13:38:35 cdf-server named[6100]: automatic empty zone: 0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.ARPA
Jul 27 13:38:35 cdf-server named[6100]: automatic empty zone: D.F.IP6.ARPA
Jul 27 13:38:35 cdf-server named[6100]: automatic empty zone: 8.E.F.IP6.ARPA
Jul 27 13:38:35 cdf-server named[6100]: automatic empty zone: 9.E.F.IP6.ARPA
Jul 27 13:38:35 cdf-server named[6100]: automatic empty zone: A.E.F.IP6.ARPA
Jul 27 13:38:35 cdf-server named[6100]: automatic empty zone: B.E.F.IP6.ARPA
Jul 27 13:38:35 cdf-server named[6100]: command channel listening on 127.0.0.1#953
Jul 27 13:38:35 cdf-server named[6100]: command channel listening on ::1#953
Jul 27 13:38:35 cdf-server named[6100]: the working directory is not writable
Jul 27 13:38:35 cdf-server named[6100]: zone 0.in-addr.arpa/IN: NS '0.in-addr.arpa' has no address records (A or AAAA)
Jul 27 13:38:35 cdf-server named[6100]: zone 0.in-addr.arpa/IN: loaded serial 0
Jul 27 13:38:35 cdf-server named[6100]: zone 1.0.0.127.in-addr.arpa/IN: NS '1.0.0.127.in-addr.arpa' has no address records (A or AAAA)
Jul 27 13:38:35 cdf-server named[6100]: zone 1.0.0.127.in-addr.arpa/IN: loaded serial 0
Jul 27 13:38:35 cdf-server named[6100]: zone 5.168.192.in-addr.arpa/IN: loaded serial 2009034333
Jul 27 13:38:35 cdf-server named[6100]: zone 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa/IN: NS '1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa' has no address records (A or AAAA)
Jul 27 13:38:35 cdf-server named[6100]: zone 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa/IN: loaded serial 0
Jul 27 13:38:35 cdf-server named[6100]: zone geribello.com.br/IN: loaded serial 2009080309
Jul 27 13:38:35 cdf-server named[6100]: zone localhost.localdomain/IN: loaded serial 0
Jul 27 13:38:35 cdf-server named[6100]: zone localhost/IN: loaded serial 0
Jul 27 13:38:35 cdf-server named[6100]: running
Jul 27 13:38:36 cdf-server named[6100]: network unreachable resolving 'www.fotolog.com.br/A/IN': 2001:12ff::10#53
Jul 27 13:38:36 cdf-server named[6100]: network unreachable resolving 'ns1.fotolog.com/AAAA/IN': 2001:503:ba3e::2:30#53
Jul 27 13:38:36 cdf-server named[6100]: network unreachable resolving 'ns2.fotolog.com/AAAA/IN': 2001:503:a83e::2:30#53
Jul 27 13:38:36 cdf-server named[6100]: network unreachable resolving 'ns1.fotolog.net/A/IN': 2001:500:2f::f#53
Jul 27 13:38:36 cdf-server named[6100]: network unreachable resolving 'dlv.isc.org/DLV/IN': 2001:500:b::1#53
Jul 27 13:38:36 cdf-server named[6100]: network unreachable resolving 'ns2.fotolog.net/AAAA/IN': 2001:503:231d::2:30#53
Jul 27 13:38:36 cdf-server named[6100]: network unreachable resolving 'dlv.isc.org/DLV/IN': 2001:500:71::30#53
Jul 27 13:38:36 cdf-server named[6100]: network unreachable resolving 'ns.isc.afilias-nst.info/AAAA/IN': 2001:500:1::803f:235#53
Jul 27 13:38:36 cdf-server named[6100]: network unreachable resolving 'ns.isc.afilias-nst.info/AAAA/IN': 2001:dc3::35#53
Jul 27 13:38:36 cdf-server named[6100]: network unreachable resolving 'ns.isc.afilias-nst.info/AAAA/IN': 2001:503:c27::2:30#53
Jul 27 13:38:36 cdf-server named[6100]: network unreachable resolving 'ns.isc.afilias-nst.info/AAAA/IN': 2001:7fd::1#53
Jul 27 13:38:36 cdf-server named[6100]: network unreachable resolving 'ns.isc.afilias-nst.info/AAAA/IN': 2001:500:19::1#53
Jul 27 13:38:37 cdf-server named[6100]: network unreachable resolving 'ns.isc.afilias-nst.info/A/IN': 2001:500:41::1#53
Jul 27 13:38:37 cdf-server named[6100]: network unreachable resolving 'ns.isc.afilias-nst.info/AAAA/IN': 2001:500:7::79#53
Jul 27 13:38:37 cdf-server named[6100]: network unreachable resolving 'ns.isc.afilias-nst.info/AAAA/IN': 2001:500:8::79#53
Jul 27 13:38:37 cdf-server named[6100]: network unreachable resolving 'ns.isc.afilias-nst.info/A/IN': 2001:500:6::79#53
Jul 27 13:38:37 cdf-server named[6100]: network unreachable resolving 'pdns3.ultradns.org/A/IN': 2001:500:e::1#53
Jul 27 13:38:37 cdf-server named[6100]: network unreachable resolving 'pdns4.ultradns.org/AAAA/IN': 2001:500:c::1#53
Jul 27 13:38:37 cdf-server named[6100]: network unreachable resolving 'pdns4.ultradns.org/AAAA/IN': 2001:500:48::1#53
Jul 27 13:38:37 cdf-server named[6100]: validating @0xb3718648: br DNSKEY: unable to find a DNSKEY which verifies the DNSKEY RRset and also matches one of specified trusted-keys for 'br'
Jul 27 13:38:37 cdf-server named[6100]: validating @0xb3718648: br DNSKEY: please check the 'trusted-keys' for 'br' in named.conf.
Jul 27 13:38:37 cdf-server named[6100]: no valid KEY resolving 'br/DNSKEY/IN': 200.192.232.10#53
Jul 27 13:38:37 cdf-server named[6100]: validating @0xb34094b0: br DNSKEY: unable to find a DNSKEY which verifies the DNSKEY RRset and also matches one of specified trusted-keys for 'br'
Jul 27 13:38:37 cdf-server named[6100]: validating @0xb34094b0: br DNSKEY: please check the 'trusted-keys' for 'br' in named.conf.
Jul 27 13:38:37 cdf-server named[6100]: no valid KEY resolving 'br/DNSKEY/IN': 200.229.248.10#53
Jul 27 13:38:37 cdf-server named[6100]: validating @0xb3202478: br DNSKEY: unable to find a DNSKEY which verifies the DNSKEY RRset and also matches one of specified trusted-keys for 'br'
Jul 27 13:38:37 cdf-server named[6100]: validating @0xb3202478: br DNSKEY: please check the 'trusted-keys' for 'br' in named.conf.
Jul 27 13:38:37 cdf-server named[6100]: no valid KEY resolving 'br/DNSKEY/IN': 200.219.154.10#53
Jul 27 13:38:37 cdf-server named[6100]: validating @0xb3403480: br DNSKEY: unable to find a DNSKEY which verifies the DNSKEY RRset and also matches one of specified trusted-keys for 'br'
Jul 27 13:38:37 cdf-server named[6100]: validating @0xb3403480: br DNSKEY: please check the 'trusted-keys' for 'br' in named.conf.
Jul 27 13:38:37 cdf-server named[6100]: no valid KEY resolving 'br/DNSKEY/IN': 200.219.159.10#53
Jul 27 13:38:37 cdf-server named[6100]: validating @0xb4248968: br DNSKEY: unable to find a DNSKEY which verifies the DNSKEY RRset and also matches one of specified trusted-keys for 'br'
Jul 27 13:38:37 cdf-server named[6100]: validating @0xb4248968: br DNSKEY: please check the 'trusted-keys' for 'br' in named.conf.
Jul 27 13:38:37 cdf-server named[6100]: no valid KEY resolving 'br/DNSKEY/IN': 200.189.40.10#53
Jul 27 13:38:37 cdf-server named[6100]: validating @0xb3202478: br DNSKEY: unable to find a DNSKEY which verifies the DNSKEY RRset and also matches one of specified trusted-keys for 'br'
Jul 27 13:38:37 cdf-server named[6100]: validating @0xb3202478: br DNSKEY: please check the 'trusted-keys' for 'br' in named.conf.
Jul 27 13:38:37 cdf-server named[6100]: no valid KEY resolving 'br/DNSKEY/IN': 200.160.0.10#53
Jul 27 13:38:37 cdf-server named[6100]: network unreachable resolving 'br/DNSKEY/IN': 2001:12f8:1::10#53
Jul 27 13:38:37 cdf-server named[6100]: network unreachable resolving 'br/DNSKEY/IN': 2001:12ff::10#53
Jul 27 13:38:37 cdf-server named[6100]: broken trust chain resolving 'com.br/DS/IN': 200.160.0.10#53
Jul 27 13:38:37 cdf-server named[6100]: no valid DS resolving 'www.fotolog.com.br/A/IN': 204.74.66.253#53
Jul 27 13:38:38 cdf-server named[6100]: validating @0xb3716bc8: br DNSKEY: unable to find a DNSKEY which verifies the DNSKEY RRset and also matches one of specified trusted-keys for 'br'
Jul 27 13:38:38 cdf-server named[6100]: validating @0xb3716bc8: br DNSKEY: please check the 'trusted-keys' for 'br' in named.conf.
Jul 27 13:38:38 cdf-server named[6100]: no valid KEY resolving 'br/DNSKEY/IN': 200.192.232.10#53
Jul 27 13:38:38 cdf-server named[6100]: validating @0xb3402478: br DNSKEY: unable to find a DNSKEY which verifies the DNSKEY RRset and also matches one of specified trusted-keys for 'br'
Jul 27 13:38:38 cdf-server named[6100]: validating @0xb3402478: br DNSKEY: please check the 'trusted-keys' for 'br' in named.conf.
Jul 27 13:38:38 cdf-server named[6100]: no valid KEY resolving 'br/DNSKEY/IN': 200.219.159.10#53
Jul 27 13:38:38 cdf-server named[6100]: validating @0xb3603248: br DNSKEY: unable to find a DNSKEY which verifies the DNSKEY RRset and also matches one of specified trusted-keys for 'br'
Jul 27 13:38:38 cdf-server named[6100]: validating @0xb3603248: br DNSKEY: please check the 'trusted-keys' for 'br' in named.conf.
Jul 27 13:38:38 cdf-server named[6100]: no valid KEY resolving 'br/DNSKEY/IN': 200.189.40.10#53
Jul 27 13:38:38 cdf-server named[6100]: validating @0xb320db80: br DNSKEY: unable to find a DNSKEY which verifies the DNSKEY RRset and also matches one of specified trusted-keys for 'br'
Jul 27 13:38:38 cdf-server named[6100]: validating @0xb320db80: br DNSKEY: please check the 'trusted-keys' for 'br' in named.conf.
Jul 27 13:38:38 cdf-server named[6100]: no valid KEY resolving 'br/DNSKEY/IN': 200.160.0.10#53
Jul 27 13:38:38 cdf-server named[6100]: validating @0xb3404488: br DNSKEY: unable to find a DNSKEY which verifies the DNSKEY RRset and also matches one of specified trusted-keys for 'br'
Jul 27 13:38:38 cdf-server named[6100]: validating @0xb3404488: br DNSKEY: please check the 'trusted-keys' for 'br' in named.conf.
Jul 27 13:38:38 cdf-server named[6100]: no valid KEY resolving 'br/DNSKEY/IN': 200.229.248.10#53
Jul 27 13:38:38 cdf-server named[6100]: validating @0xb3715bc0: br DNSKEY: unable to find a DNSKEY which verifies the DNSKEY RRset and also matches one of specified trusted-keys for 'br'
Jul 27 13:38:38 cdf-server named[6100]: validating @0xb3715bc0: br DNSKEY: please check the 'trusted-keys' for 'br' in named.conf.
Jul 27 13:38:38 cdf-server named[6100]: no valid KEY resolving 'br/DNSKEY/IN': 200.219.154.10#53
Jul 27 13:38:38 cdf-server named[6100]: network unreachable resolving 'br/DNSKEY/IN': 2001:12ff::10#53
Jul 27 13:38:38 cdf-server named[6100]: network unreachable resolving 'br/DNSKEY/IN': 2001:12f8:1::10#53
Jul 27 13:38:38 cdf-server named[6100]: broken trust chain resolving 'www.fotolog.com.br/A/IN': 204.74.67.253#53
Jul 27 13:38:38 cdf-server named[6100]: validating @0xb3709b60: br DNSKEY: unable to find a DNSKEY which verifies the DNSKEY RRset and also matches one of specified trusted-keys for 'br'
Jul 27 13:38:38 cdf-server named[6100]: validating @0xb3709b60: br DNSKEY: please check the 'trusted-keys' for 'br' in named.conf.
Jul 27 13:38:38 cdf-server named[6100]: no valid KEY resolving 'br/DNSKEY/IN': 200.160.0.10#53
Jul 27 13:38:38 cdf-server named[6100]: validating @0xb38e8d18: br DNSKEY: unable to find a DNSKEY which verifies the DNSKEY RRset and also matches one of specified trusted-keys for 'br'
Jul 27 13:38:38 cdf-server named[6100]: validating @0xb38e8d18: br DNSKEY: please check the 'trusted-keys' for 'br' in named.conf.
Jul 27 13:38:38 cdf-server named[6100]: no valid KEY resolving 'br/DNSKEY/IN': 200.189.40.10#53
Jul 27 13:38:38 cdf-server named[6100]: validating @0xb34074a0: br DNSKEY: unable to find a DNSKEY which verifies the DNSKEY RRset and also matches one of specified trusted-keys for 'br'
Jul 27 13:38:38 cdf-server named[6100]: validating @0xb34074a0: br DNSKEY: please check the 'trusted-keys' for 'br' in named.conf.
Jul 27 13:38:38 cdf-server named[6100]: no valid KEY resolving 'br/DNSKEY/IN': 200.192.232.10#53
Jul 27 13:38:38 cdf-server named[6100]: validating @0xb3715bc0: br DNSKEY: unable to find a DNSKEY which verifies the DNSKEY RRset and also matches one of specified trusted-keys for 'br'
Jul 27 13:38:38 cdf-server named[6100]: validating @0xb3715bc0: br DNSKEY: please check the 'trusted-keys' for 'br' in named.conf.
Jul 27 13:38:38 cdf-server named[6100]: no valid KEY resolving 'br/DNSKEY/IN': 200.229.248.10#53
Jul 27 13:38:38 cdf-server named[6100]: validating @0xb38e8d18: br DNSKEY: unable to find a DNSKEY which verifies the DNSKEY RRset and also matches one of specified trusted-keys for 'br'
Jul 27 13:38:38 cdf-server named[6100]: validating @0xb38e8d18: br DNSKEY: please check the 'trusted-keys' for 'br' in named.conf.
Jul 27 13:38:38 cdf-server named[6100]: no valid KEY resolving 'br/DNSKEY/IN': 200.219.159.10#53
Jul 27 13:38:39 cdf-server named[6100]: validating @0xb3715bc0: br DNSKEY: unable to find a DNSKEY which verifies the DNSKEY RRset and also matches one of specified trusted-keys for 'br'
Jul 27 13:38:39 cdf-server named[6100]: validating @0xb3715bc0: br DNSKEY: please check the 'trusted-keys' for 'br' in named.conf.
Jul 27 13:38:39 cdf-server named[6100]: no valid KEY resolving 'br/DNSKEY/IN': 200.219.154.10#53
Jul 27 13:38:39 cdf-server named[6100]: network unreachable resolving 'br/DNSKEY/IN': 2001:12ff::10#53
Jul 27 13:38:39 cdf-server named[6100]: network unreachable resolving 'br/DNSKEY/IN': 2001:12f8:1::10#53
Jul 27 13:38:39 cdf-server named[6100]: broken trust chain resolving 'www.fotolog.com.br/A/IN': 204.74.66.253#53
Jul 27 13:38:39 cdf-server named[6100]: network unreachable resolving 'net.dlv.isc.org/DLV/IN': 2001:500:60::29#53
Jul 27 13:38:39 cdf-server named[6100]: network unreachable resolving 'net.dlv.isc.org/DLV/IN': 2001:502:ad09::23#53
Jul 27 13:38:39 cdf-server named[6100]: network unreachable resolving 'net.dlv.isc.org/DLV/IN': 2001:500:71::29#53
Jul 27 13:38:39 cdf-server named[6100]: network unreachable resolving 'net.dlv.isc.org/DLV/IN': 2001:4f8:0:2::20#53
Jul 27 13:38:40 cdf-server named[6100]: network unreachable resolving 'a899.g.akamai.net.dlv.isc.org/DLV/IN': 2001:502:2eda::23#53
Jul 27 13:38:40 cdf-server named[6100]: network unreachable resolving 'a899.g.akamai.net.dlv.isc.org/DLV/IN': 2001:500:2c::254#53
Jul 27 13:38:48 cdf-server named[6100]: network unreachable resolving 'za.akadns.org/A/IN': 2001:500:40::1#53
Jul 27 13:38:48 cdf-server named[6100]: network unreachable resolving 'zb.akadns.org/AAAA/IN': 2001:500:40::1#53
Jul 27 13:38:48 cdf-server named[6100]: network unreachable resolving 'zc.akadns.org/A/IN': 2001:500:40::1#53
Jul 27 13:38:48 cdf-server named[6100]: network unreachable resolving 'za.akadns.org/A/IN': 2001:500:f::1#53
Jul 27 13:38:48 cdf-server named[6100]: network unreachable resolving 'zc.akadns.org/AAAA/IN': 2001:500:f::1#53
==================================================================
[root@cdf-server etc]# cat named.conf
//
// named.conf
options {
listen-on port 53 { any; };
listen-on-v6 port 53 { ::1; };
directory "/var/named";
dump-file "/var/named/data/cache_dump.db";
statistics-file "/var/named/data/named_stats.txt";
memstatistics-file "/var/named/data/named_mem_stats.txt";
allow-query { any; };
recursion yes;
dnssec-enable yes;
dnssec-validation yes;
dnssec-lookaside . trust-anchor dlv.isc.org.;
};
logging {
channel default_debug {
file "data/named.run";
severity dynamic;
};
};
zone "." IN {
type hint;
file "named.ca";
};
include "/etc/named.rfc1912.zones";
include "/etc/pki/dnssec-keys//named.dnssec.keys";
include "/etc/pki/dnssec-keys//dlv/dlv.isc.org.conf";
### Zona Geribello.
zone "geribello.com.br" {
type slave;
masters { 192.168.0.2; };
allow-notify { 192.168.0.2; };
# allow-update { 192.168.0.2; };
file "slaves/db.geribello.com.br";
};
zone "5.168.192.in-addr.arpa" {
type master;
file "slaves/db.5.168.192";
};
==================================================================
[root@cdf-server named]# cat named.ca
; <<>> DiG 9.5.0b2 <<>> +bufsize=1200 +norec NS . @a.root-servers.net
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 34420
;; flags: qr aa; QUERY: 1, ANSWER: 13, AUTHORITY: 0, ADDITIONAL: 20
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;. IN NS
;; ANSWER SECTION:
. 518400 IN NS M.ROOT-SERVERS.NET.
. 518400 IN NS A.ROOT-SERVERS.NET.
. 518400 IN NS B.ROOT-SERVERS.NET.
. 518400 IN NS C.ROOT-SERVERS.NET.
. 518400 IN NS D.ROOT-SERVERS.NET.
. 518400 IN NS E.ROOT-SERVERS.NET.
. 518400 IN NS F.ROOT-SERVERS.NET.
. 518400 IN NS G.ROOT-SERVERS.NET.
. 518400 IN NS H.ROOT-SERVERS.NET.
. 518400 IN NS I.ROOT-SERVERS.NET.
. 518400 IN NS J.ROOT-SERVERS.NET.
. 518400 IN NS K.ROOT-SERVERS.NET.
. 518400 IN NS L.ROOT-SERVERS.NET.
;; ADDITIONAL SECTION:
A.ROOT-SERVERS.NET. 3600000 IN A 198.41.0.4
A.ROOT-SERVERS.NET. 3600000 IN AAAA 2001:503:ba3e::2:30
B.ROOT-SERVERS.NET. 3600000 IN A 192.228.79.201
C.ROOT-SERVERS.NET. 3600000 IN A 192.33.4.12
D.ROOT-SERVERS.NET. 3600000 IN A 128.8.10.90
E.ROOT-SERVERS.NET. 3600000 IN A 192.203.230.10
F.ROOT-SERVERS.NET. 3600000 IN A 192.5.5.241
F.ROOT-SERVERS.NET. 3600000 IN AAAA 2001:500:2f::f
G.ROOT-SERVERS.NET. 3600000 IN A 192.112.36.4
H.ROOT-SERVERS.NET. 3600000 IN A 128.63.2.53
H.ROOT-SERVERS.NET. 3600000 IN AAAA 2001:500:1::803f:235
I.ROOT-SERVERS.NET. 3600000 IN A 192.36.148.17
J.ROOT-SERVERS.NET. 3600000 IN A 192.58.128.30
J.ROOT-SERVERS.NET. 3600000 IN AAAA 2001:503:c27::2:30
K.ROOT-SERVERS.NET. 3600000 IN A 193.0.14.129
K.ROOT-SERVERS.NET. 3600000 IN AAAA 2001:7fd::1
L.ROOT-SERVERS.NET. 3600000 IN A 199.7.83.42
M.ROOT-SERVERS.NET. 3600000 IN A 202.12.27.33
M.ROOT-SERVERS.NET. 3600000 IN AAAA 2001:dc3::35
;; Query time: 147 msec
;; SERVER: 198.41.0.4#53(198.41.0.4)
;; WHEN: Mon Feb 18 13:29:18 2008
;; MSG SIZE rcvd: 615
==================================================================
I can not see what could be wrong, but I dont have dns for two days...
plz any help??
Marcelo Moretti
-- users mailing list users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines