<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal">Ok, so it’s not the OS upgrade causing this as I’m now seeing it on both my slaves. I was only seeing it on ns2 yesterday afternoon when I posted this but it’s now on ns3 this morning as well. The master ns1 is not showing this issue in
the logs!<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I will compare the config between the master and the slaves to see if I can see what’s different between them apart from the obvious!<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span lang="RO" style="font-size:12.0pt">Andy Baker<o:p></o:p></span></p>
<p class="MsoNormal"><b><span lang="RO"><o:p> </o:p></span></b></p>
<p class="MsoNormal"><b><span lang="RO">IT Technical Lead </span></b><span lang="RO">| SIIL Corporate IT</span><span lang="EN-GB" style="font-family:"Times New Roman",serif"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="RO">Tel: </span><span lang="EN-GB" style="color:#666666">+974-44838733,
</span>Direct: <span lang="EN-GB" style="color:#666666">+974-44485711</span><span lang="RO">|
</span><span lang="EN-GB">Fax:<span style="color:#666666"> +974-44838732</span></span><span lang="EN-GB" style="font-family:"Times New Roman",serif"><o:p></o:p></span></p>
<p class="MsoNormal"><b><span lang="EN-GB" style="color:red">Salam International Investments Ltd.
</span></b><span lang="EN-GB" style="font-family:"Times New Roman",serif"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:9.0pt;color:#666666">Maysaloun Street - West Bay | Salam Plaza Tower, 3rd Floor</span><span lang="EN-GB" style="font-size:9.0pt;color:#1F497D">
</span><span lang="EN-GB" style="font-size:9.0pt;color:#666666">| PO Box: 15224, Doha – Qatar</span><span lang="EN-GB" style="font-size:9.0pt;color:#1F497D">
</span><span lang="EN-GB" style="font-family:"Times New Roman",serif"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:9.0pt;color:#666666">E-mail: a.baker@salaminternational.com</span><span lang="RO" style="font-size:9.0pt">|<span style="color:#666666">
</span></span><span lang="EN-GB" style="font-size:9.0pt;color:#666666">Website: <a href="http://www.salaminternational.com/" title="http://www.salaminternational.com/">
<span style="color:#666666">www.salaminternational.com</span></a></span><span lang="EN-GB" style="font-family:"Times New Roman",serif"><o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b>From:</b> Felipe Agnelli Barbosa <no.molas@gmail.com> <br>
<b>Sent:</b> Tuesday, February 22, 2022 8:46 PM<br>
<b>To:</b> Andrew Baker <a.baker@salaminternational.com><br>
<b>Cc:</b> bind-users@lists.isc.org<br>
<b>Subject:</b> Re: Recent upgrade<o:p></o:p></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div>
<p class="MsoNormal">Could you confirm that you didn't have any connectivity problems before and now?<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">[]s<o:p></o:p></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div>
<p class="MsoNormal">Em ter., 22 de fev. de 2022 às 10:08, Andrew Baker via bind-users <<a href="mailto:bind-users@lists.isc.org">bind-users@lists.isc.org</a>> escreveu:<o:p></o:p></p>
</div>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in">
<div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">I’ve just upgraded the first of my redundant slave DNS servers from Debian 10.11 (bind 9.11) to Debian 11.2 (bind 9.16). Upgrade seemed to go smoothly but I’m now seeing the below
in the bind logs<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">22-Feb-2022 14:54:59.745 lame-servers: info: timed out resolving '<a href="http://ns4.he.net/AAAA/IN" target="_blank">ns4.he.net/AAAA/IN</a>': 1.1.1.1#53<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">22-Feb-2022 14:54:59.745 lame-servers: info: network unreachable resolving '<a href="http://ns4.he.net/AAAA/IN" target="_blank">ns4.he.net/AAAA/IN</a>': 2001:500:200::b#53<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">22-Feb-2022 14:54:59.745 lame-servers: info: network unreachable resolving '<a href="http://ns4.he.net/AAAA/IN" target="_blank">ns4.he.net/AAAA/IN</a>': 2001:500:9f::42#53<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">22-Feb-2022 14:54:59.745 lame-servers: info: network unreachable resolving '<a href="http://ns4.he.net/AAAA/IN" target="_blank">ns4.he.net/AAAA/IN</a>': 2001:500:2d::d#53<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">22-Feb-2022 14:55:07.155 dnssec: warning: managed-keys-zone: Unable to fetch DNSKEY set '.': timed out<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">If I run a nslookup against any of the time out’s in the logs, it works and delivers both the ipv4 and ipv6 address<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">I’ve done some reading on the issue and so far, found that I can add a couple of lines to /etc/sysctl.conf and named.conf to disable ipv6 but I’d much rather get the system to handle
ipv6 properly and am looking for your advice on this. <o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">Thanks in advance
<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="RO" style="font-size:12.0pt">Andy Baker</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><b><span lang="RO"> </span></b><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
</div>
</div>
<p class="MsoNormal">-- <br>
Visit <a href="https://lists.isc.org/mailman/listinfo/bind-users" target="_blank">
https://lists.isc.org/mailman/listinfo/bind-users</a> to unsubscribe from this list<br>
<br>
ISC funds the development of this software with paid support subscriptions. Contact us at
<a href="https://www.isc.org/contact/" target="_blank">https://www.isc.org/contact/</a> for more information.<br>
<br>
<br>
bind-users mailing list<br>
<a href="mailto:bind-users@lists.isc.org" target="_blank">bind-users@lists.isc.org</a><br>
<a href="https://lists.isc.org/mailman/listinfo/bind-users" target="_blank">https://lists.isc.org/mailman/listinfo/bind-users</a><o:p></o:p></p>
</blockquote>
</div>
<p class="MsoNormal"><br clear="all">
<o:p></o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<p class="MsoNormal">-- <o:p></o:p></p>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt">" A dúvida é o principio da sabedoria "<o:p></o:p></p>
</div>
</div>
</div>
</body>
</html>