Servfail on Bind -9.16.1

julien soula julien.soula at univ-lille.fr
Sun Nov 22 13:31:56 UTC 2020


On Sat, Nov 21, 2020 at 03:20:26PM -0600, upen wrote:
> .../...
> default.log:21-Nov-2020 15:11:18.008 client @0x7fb6a800c0a0 127.0.0.1#33706
> (www.facebook.com): query failed (broken trust chain) for
> www.facebook.com/IN/A at query.c:6883
> dnssec.log:21-Nov-2020 15:11:18.008 validating www.facebook.com/CNAME: bad
> cache hit (com/DS)
> lame-servers.log:21-Nov-2020 15:11:18.008 broken trust chain resolving '
> www.facebook.com/A/IN': 129.134.31.12#53

it seems to be an error in dnssec. So I suppose that "dig +nodnssec
...." works.

May be "dig +trace facebook.com" will give you more hints.

sincerly,
-- 
Julien


More information about the bind-users mailing list