ISC BIND 9 breakage?

Thu Mar 26 12:54:34 UTC 2020

Nick Hilliard wrote:

> forgot to re-sign the zone on dlv.isc.org or forgot to remove 
> dnssec-lookaside from the config?
>
> Not kidding here.  People need to take responsibility for their 
> configurations.

Anyone running BIND provided with CentOS 6 has a release from ~2012 (bind 9.8.2) and it is understandable why their documentation is out-of-date (like OP).

To get more recent bugs and fixes from ISC directly, install from ISC's copr:

https://copr.fedorainfracloud.org/coprs/isc/bind-esv/

On CentOS 7 I needed to install dnf and yum-plugin-copr first. I don't see these in the usual places for CentOS 6, so getting copr sources enabled is the first challenge.

ISC sources for other distros:
https://www.isc.org/blogs/bind-9-packages/

Mike