Portál AbcLinuxu, 9. listopadu 2025 14:35
May 20 22:13:18 frosty-GA-MA790XT-UD4P named[1211]: error (insecurity proof failed) resolving './NS/IN': 198.41.0.4#53 May 20 22:13:24 frosty-GA-MA790XT-UD4P named[1211]: success resolving 'ssl.gstatic.com/A' (in 'gstatic.com'?) after reducing the advertised EDNS UDP packet size to 512 octets May 20 22:13:25 frosty-GA-MA790XT-UD4P named[1211]: success resolving 'www.google.com/A' (in 'google.com'?) after reducing the advertised EDNS UDP packet size to 512 octets May 20 22:14:02 frosty-GA-MA790XT-UD4P named[1211]: validating @0x7f91f4408f60: . NS: got insecure response; parent indicates it should be secure May 20 22:14:02 frosty-GA-MA790XT-UD4P named[1211]: error (insecurity proof failed) resolving './NS/IN': 192.112.36.4#53 May 20 22:14:25 frosty-GA-MA790XT-UD4P named[1211]: validating @0x7f91fc27f5e0: . SOA: got insecure response; parent indicates it should be secure May 20 22:14:25 frosty-GA-MA790XT-UD4P named[1211]: success resolving './NS' (in '.'?) after reducing the advertised EDNS UDP packet size to 512 octets May 20 22:14:25 frosty-GA-MA790XT-UD4P named[1211]: error (insecurity proof failed) resolving 'nette/A/IN': 192.5.5.241#53 May 20 22:14:25 frosty-GA-MA790XT-UD4P named[1211]: success resolving 'nette/A' (in '.'?) after disabling EDNS May 20 22:14:34 frosty-GA-MA790XT-UD4P named[1211]: success resolving 'www.google-analytics.com/A' (in 'google-analytics.com'?) after disabling EDNS May 20 22:14:52 frosty-GA-MA790XT-UD4P named[1211]: validating @0x7f91fc3fbfc0: . NS: got insecure response; parent indicates it should be secure May 20 22:14:52 frosty-GA-MA790XT-UD4P named[1211]: error (insecurity proof failed) resolving './NS/IN': 193.0.14.129#53
May 16 18:32:54 frosty-GA-MA790XT-UD4P named[1190]: error (network unreachable) resolving 'local/SOA/IN': 192.58.128.30#53 May 16 18:38:19 frosty-GA-MA790XT-UD4P named[1190]: success resolving 'plus.google.com/A' (in 'google.com'?) after disabling EDNSA kompletní výpisy jsou na pastebin:
Edit /etc/bind/named.conf.options
Add this at the bottom (outside of the options clause):
server ::/0 {
edns no;
};
server 0.0.0.0/0 {
edns no;
};
mi nefungovalo, respektive poté již se nepřipojím vůbec. Nyní jsem tedy zkusil:
/etc/bind/named.conf.options
options {
directory "/var/cache/bind";
// If there is a firewall between you and nameservers you want
// to talk to, you may need to fix the firewall to allow multiple
// ports to talk. See http://www.kb.cert.org/vuls/id/800113
// If your ISP provided one or more IP addresses for stable
// nameservers, you probably want to use them as forwarders.
// Uncomment the following block, and insert the addresses replacing
// the all-0's placeholder.
forwarders {
202.148.202.3;
8.8.8.8;
8.8.8.4;
};
auth-nxdomain no; # conform to RFC1035
listen-on-v6 { any; };
};
a uvidím, opět to vypadá, že se to na chvíli chytlo, ale zase jak to vydrží ;|
dnssec-validation no;(z auto na no) A v logu to již vypadá dobře a web zatím také snad, ale uvidíme, už by konečně mohlo :)
Tiskni
Sdílej:
ISSN 1214-1267, (c) 1999-2007 Stickfish s.r.o.