Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I've got lots of errors in my DNS log:

Mar 18 17:26:38 server named[3240]: validating @0x2aacec5b18e0: com NS: got insecure response; parent indicates it should be secure
Mar 18 17:26:38 server named[3240]: error (insecurity proof failed) resolving 'com/NS/IN': 2001:470:20::2#53
Mar 18 17:26:38 server named[3240]: validating @0x2aace80c3cc0: com NS: got insecure response; parent indicates it should be secure
Mar 18 17:26:38 server named[3240]: error (insecurity proof failed) resolving 'com/NS/IN': 74.82.42.42#53
Mar 18 17:26:38 server named[3240]: error (chase DS servers) resolving 'addthisedge.com/DS/IN': 74.82.42.42#53
Mar 18 17:26:38 server named[3240]: validating @0x2aacec5cba60: com NS: got insecure response; parent indicates it should be secure
Mar 18 17:26:38 server named[3240]: error (insecurity proof failed) resolving 'com/NS/IN': 2001:470:20::2#53
Mar 18 17:26:38 server named[3240]: validating @0x2aace80c3cc0: com NS: got insecure response; parent indicates it should be secure
Mar 18 17:26:38 server named[3240]: error (insecurity proof failed) resolving 'com/NS/IN': 74.82.42.42#53

They do not affect my DNS operation, what does them mean? I've set up 2 forwarders, do they matter?

share|improve this question

1 Answer 1

They're messages relating to DNSSEC, and the fact that your resolver is trying to work with it but being stymied. Read the manual for your version of BIND to find out more, and for information on how to configure it correctly (or disable it, if necessary).

share|improve this answer
    
I've disabled auto validation and the errors now disappeared –  Michael Tsang Mar 18 '12 at 10:06

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.