Intermittent failures resolving .org domains in BIND 9.7.0 with DLV enabled

Roy Badami roy at gnomon.org.uk
Wed Apr 14 22:20:17 UTC 2010


On Sun, Mar 28, 2010 at 11:48:37PM +0100, I wrote:
> A couple of weeks ago I upgraded my BINDs to 9.7.0 and enabled DLV.
> 
> This is my first time attemting to validate DNSSEC; however, I've been
> seeing intermittent failures to resolve domains under .org which have
> been frequent enough to force me to disable DLV again (hence
> effectively disabling DNSSEC since I have no other trust anchors
> configured).

Well, FWIW I upgraded to 9.7.0-P1 and tried enabling DLV again and
I've seen no repeat of the DNSSEC name resolution issues so far; it's
early days yet (only been running DLV for three days) but certainly
looking promissing.

    -roy



More information about the bind-users mailing list