Severe DNS Problems, 6.2-RELEASE, BIND 9.5.2

[Matthew Seaman]

george+freebsd at m5p.com wrote:
> I'm having severe DNS problems.  I'm running 6.2-RELEASE, and I upgraded
> to the bind9 port (after cvsup) on July 14.  Starting yesterday morning,
> DNS became very, very slow.  If I repeated a "dig" command three or four
> times, I could get an answer after 20-30 seconds.  This morning I cvsupped
> again and installed the bind95 port.  Still very, very slow.  I will
> probably shift my server to a FreeBSD 7.0 system this weekend, but I
> would like very much to understand what's going on.

Did you configure DLV (DNSSEC Look-aside Validation)?  If so, you were 
probably bitten by the ISC key timing out.  Key roll-over was scheduled 
for the month leading up to Tuesday 21st.

Get the new key from: https://secure.isc.org/ops/dlv/index.php#dlv_key

	Cheers,

	Matthew

-- 
Dr Matthew J Seaman MA, D.Phil.                   7 Priory Courtyard
                                                  Flat 3
PGP: http://www.infracaninophile.co.uk/pgpkey     Ramsgate
                                                  Kent, CT11 9PW

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 258 bytes
Desc: OpenPGP digital signature
Url : http://lists.freebsd.org/pipermail/freebsd-hackers/attachments/20081024/103a41b1/signature.pgp