non-working DNSSEC after network outage

Marco Moock mm at dorfdsl.de
Thu Aug 20 18:25:44 UTC 2026


Hello!

Yesterday I had a power outage and the server running named was online 
before the internet connection was, so it tried to resolve queries, but 
failed.

This led to messages like

[794]: no valid RRSIG resolving './DNSKEY/IN': 2001:500:a8::e#53
[794]: no valid RRSIG resolving './DNSKEY/IN': 2001:500:1::53#53
[794]: no valid RRSIG resolving './DNSKEY/IN': 202.12.27.33#53
[794]: no valid RRSIG resolving './DNSKEY/IN': 192.58.128.30#53
[794]: no valid RRSIG resolving './DNSKEY/IN': 192.33.4.12#53
[794]: no valid RRSIG resolving './DNSKEY/IN': 192.5.5.241#53
[794]: no valid RRSIG resolving './DNSKEY/IN': 192.203.230.10#53
[794]: no valid RRSIG resolving './DNSKEY/IN': 198.41.0.4#53
[794]: no valid RRSIG resolving './DNSKEY/IN': 192.36.148.17#53
[794]: no valid RRSIG resolving './DNSKEY/IN': 170.247.170.2#53
[794]: no valid RRSIG resolving './DNSKEY/IN': 199.7.91.13#53

And they were cached until I restarted named, as no queries were 
answered anymore.

Is that intended behavior and how can I change this?

-- 
kind regards
Marco

Junk-Mail bitte an trashcan at stinkedores.dorfdsl.de

-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature.asc
Type: application/pgp-signature
Size: 665 bytes
Desc: OpenPGP digital signature
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20260820/99421a85/attachment.sig>


More information about the bind-users mailing list