Portál AbcLinuxu, 10. května 2025 13:32
May 20 22:13:18 frosty-GA-MA790XT-UD4P named[1211]: error (insecurity proof failed) resolving './NS/IN': 198.41.0.4#53 May 20 22:13:24 frosty-GA-MA790XT-UD4P named[1211]: success resolving 'ssl.gstatic.com/A' (in 'gstatic.com'?) after reducing the advertised EDNS UDP packet size to 512 octets May 20 22:13:25 frosty-GA-MA790XT-UD4P named[1211]: success resolving 'www.google.com/A' (in 'google.com'?) after reducing the advertised EDNS UDP packet size to 512 octets May 20 22:14:02 frosty-GA-MA790XT-UD4P named[1211]: validating @0x7f91f4408f60: . NS: got insecure response; parent indicates it should be secure May 20 22:14:02 frosty-GA-MA790XT-UD4P named[1211]: error (insecurity proof failed) resolving './NS/IN': 192.112.36.4#53 May 20 22:14:25 frosty-GA-MA790XT-UD4P named[1211]: validating @0x7f91fc27f5e0: . SOA: got insecure response; parent indicates it should be secure May 20 22:14:25 frosty-GA-MA790XT-UD4P named[1211]: success resolving './NS' (in '.'?) after reducing the advertised EDNS UDP packet size to 512 octets May 20 22:14:25 frosty-GA-MA790XT-UD4P named[1211]: error (insecurity proof failed) resolving 'nette/A/IN': 192.5.5.241#53 May 20 22:14:25 frosty-GA-MA790XT-UD4P named[1211]: success resolving 'nette/A' (in '.'?) after disabling EDNS May 20 22:14:34 frosty-GA-MA790XT-UD4P named[1211]: success resolving 'www.google-analytics.com/A' (in 'google-analytics.com'?) after disabling EDNS May 20 22:14:52 frosty-GA-MA790XT-UD4P named[1211]: validating @0x7f91fc3fbfc0: . NS: got insecure response; parent indicates it should be secure May 20 22:14:52 frosty-GA-MA790XT-UD4P named[1211]: error (insecurity proof failed) resolving './NS/IN': 193.0.14.129#53
May 16 18:32:54 frosty-GA-MA790XT-UD4P named[1190]: error (network unreachable) resolving 'local/SOA/IN': 192.58.128.30#53 May 16 18:38:19 frosty-GA-MA790XT-UD4P named[1190]: success resolving 'plus.google.com/A' (in 'google.com'?) after disabling EDNSA kompletní výpisy jsou na pastebin:
Edit /etc/bind/named.conf.options Add this at the bottom (outside of the options clause): server ::/0 { edns no; }; server 0.0.0.0/0 { edns no; };mi nefungovalo, respektive poté již se nepřipojím vůbec. Nyní jsem tedy zkusil: /etc/bind/named.conf.options
options { directory "/var/cache/bind"; // If there is a firewall between you and nameservers you want // to talk to, you may need to fix the firewall to allow multiple // ports to talk. See http://www.kb.cert.org/vuls/id/800113 // If your ISP provided one or more IP addresses for stable // nameservers, you probably want to use them as forwarders. // Uncomment the following block, and insert the addresses replacing // the all-0's placeholder. forwarders { 202.148.202.3; 8.8.8.8; 8.8.8.4; }; auth-nxdomain no; # conform to RFC1035 listen-on-v6 { any; }; };a uvidím, opět to vypadá, že se to na chvíli chytlo, ale zase jak to vydrží ;|
dnssec-validation no;(z auto na no) A v logu to již vypadá dobře a web zatím také snad, ale uvidíme, už by konečně mohlo :)
Tiskni
Sdílej:
ISSN 1214-1267, (c) 1999-2007 Stickfish s.r.o.