ISC BIND 9 breakage?

Wed Mar 25 18:17:08 UTC 2020

Yeah, looks like that comment should have been updated to “harmless until…”

Owen


> On Mar 25, 2020, at 10:32 , Drew Weaver <drew.weaver at thenap.com> wrote:
> 
> We just left the dnssec-lookaside auto; configuration in there. Probably because it specifically says in the documentation from ISC that it won't hurt anything to leave it in there...
> 
> # Configuring "dnssec-lookaside auto;" to activate this key is
>        # harmless
> 
> Guess not?
> 
> Thanks,
> -Drew
> 
> 
> 
> 
> -----Original Message-----
> From: Stephane Bortzmeyer <bortzmeyer at nic.fr> 
> Sent: Wednesday, March 25, 2020 1:27 PM
> To: Drew Weaver <drew.weaver at thenap.com>
> Cc: 'nanog at nanog.org' <nanog at nanog.org>
> Subject: Re: ISC BIND 9 breakage?
> 
> On Wed, Mar 25, 2020 at 05:18:49PM +0000,  Drew Weaver <drew.weaver at thenap.com> wrote  a message of 97 lines which said:
> 
>> Did anyone else on CentOS 6 just have some DNS resolvers totally fall over?
> 
> dlv.isc.org signatures just expired.
> 
>>        # NOTE: The ISC DLV zone is being phased out as of February
>>        2017;
> 
> And yet some people still use it, it seems.