☰

DNS 日志中有很多错误

tag-icon • tag-icon domain-name-system
DNS 日志中有很多错误

我的 DNS 日志中有很多错误：

Mar 18 17:26:38 server named[3240]: validating @0x2aacec5b18e0: com NS: got insecure response; parent indicates it should be secure
Mar 18 17:26:38 server named[3240]: error (insecurity proof failed) resolving 'com/NS/IN': 2001:470:20::2#53
Mar 18 17:26:38 server named[3240]: validating @0x2aace80c3cc0: com NS: got insecure response; parent indicates it should be secure
Mar 18 17:26:38 server named[3240]: error (insecurity proof failed) resolving 'com/NS/IN': 74.82.42.42#53
Mar 18 17:26:38 server named[3240]: error (chase DS servers) resolving 'addthisedge.com/DS/IN': 74.82.42.42#53
Mar 18 17:26:38 server named[3240]: validating @0x2aacec5cba60: com NS: got insecure response; parent indicates it should be secure
Mar 18 17:26:38 server named[3240]: error (insecurity proof failed) resolving 'com/NS/IN': 2001:470:20::2#53
Mar 18 17:26:38 server named[3240]: validating @0x2aace80c3cc0: com NS: got insecure response; parent indicates it should be secure
Mar 18 17:26:38 server named[3240]: error (insecurity proof failed) resolving 'com/NS/IN': 74.82.42.42#53

它们不会影响我的 DNS 操作，它们是什么意思？我设置了 2 个转发器，它们有关系吗？

答案1

这些消息与 DNSSEC 有关，表明您的解析器正在尝试使用它，但遇到了阻碍。请阅读您使用的 BIND 版本的手册以了解更多信息，并了解如何正确配置它（或在必要时禁用它）。

相关内容