[Cialug] BIND failure due to dnssec

[David Champion]

The setting you need to disable is the "dnssec-lookaside auto;" comment it
out with "//" at the start of the line.

-dc


On Wed, Mar 25, 2020 at 12:47 PM David Champion <dchamp1337 at gmail.com>
wrote:

> FYI if you have a problem with your older BIND servers, there was an issue
> with the dnssec key signing due to coronavirus delays, you may need to
> disable the dnssec settings in your /etc/named.conf (don't break your
> chroot jail) until it gets resolved (pun).
>
> See:
>
> https://glitchlist.com/2020/03/25/covid-19-problems-for-signed-internet-dns-root-zones/
>
> -dc
>
>