[Dnssec-trigger] bugs.debian.org validation failure

Paul Wouters paul at nohats.ca
Thu Sep 18 17:32:20 UTC 2014


On Thu, 18 Sep 2014, Chuck Anderson wrote:

> Why is unbound showing a validation failure when dnsviz.net shows everything is good?

dnsviz.net is not using the resolvers/forwarders you are using?

> Sep 18 12:07:34 system unbound: [2399:1] info: validation failure bugs.debian.org. AAAA IN

> # unbound-control list_forwards
> . IN forward: 130.215.32.18 130.215.39.18 130.215.5.18

Try not using those forwards? eg:

unbound-control reload
unbound-control forward_add . 8.8.8.8

Then try again? If that works, go back to the original forwarders and
see if the problem returns. If so, possibly crank up the verbosity: in
unbound.conf so you get more information about why it failed validation.

Paul



More information about the dnssec-trigger mailing list