[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]
Re: bin/51313: named caching server timeouts
The following reply was made to PR bin/51313; it has been noted by GNATS.
From: Havard Eidnes <he%NetBSD.org@localhost>
Cc: gnats-bugs%NetBSD.org@localhost, netbsd-bugs%netbsd.org@localhost
Subject: Re: bin/51313: named caching server timeouts
Date: Fri, 06 Apr 2018 15:14:36 +0200 (CEST)
> Here are some snippets from /var/log/messages as well as from packet =
> on the client-serving (interior) and internet-facing (exterior) inter=
> of my NetBSD firewall, showing a query for pool.ntp.org, which:
> 1) Appears to have succeded, returning a response to the caching serv=
> 2) Results in ServFail being returned to the interior client, after a=
That would be identical to the sort of failure you would get if
DNSSEC validation for the looked-up name fails.
However, when looked at from my vantage point, neither ntp.org
nor pool.ntp.org do not appear to be DNSSEC-signed.
Keying pool.ntp.org into dnsviz.net reveals a few warnings,
but nothing catastrophic I think.
Main Index |
Thread Index |