Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I recently upgraded my Fedora 10 server to Fedora 11 and am getting the following error in my DNS/named config.

named[27685]: not insecure resolving 'fedoraproject.org/A/IN: 212.104.130.65#53

This only shows for certain addresses some are resolved fine and I can ping and browse to them fine, while others produce the error above.

This is my named.conf file

acl trusted-servers { 192.168.1.10;  };

options {
directory "/var/named";
forwarders {212.104.130.9 ; 212.104.130.65; };
forward only; 

    allow-transfer {
    	127.0.0.1;
};
#   dnssec-enable yes;
#   dnssec-validation yes;
#   dnssec-lookaside . trust-anchor dlv.isc.org.;



};




# Forward Zone for hughes.lan domain
zone "funkygoth" IN {
        type master;
        file "funkygoth.zone";
allow-transfer { trusted-servers; };
};

# Reverse Zone for hughes.lan domain
zone "1.168.192.in-addr.arpa" IN {
        type master;
        file "1.168.192.zone";
};

include "/etc/named.dnssec.keys";
include "/etc/pki/dnssec-keys/dlv/dlv.isc.org.conf";
include "/etc/pki/dnssec-keys//named.dnssec.keys";
include "/etc/pki/dnssec-keys//dlv/dlv.isc.org.conf";

Anyone know what I have set wrong here?

share|improve this question
    
Just a side note...why using a rolling distro as fedora as a server? Why arent you using a more stable release? Centos? Debian? Ubuntu/LTS? Suse (whats the name of the long support distro...?) –  elcuco Jul 13 '09 at 19:40
    
I only use Fedora because I like it and have used it before, could you recommend an alternative similar distro to use. Probably the subject of a new question. –  Funky Si Jul 14 '09 at 11:49
    
There's really no reason not to use Fedora if you're willing to deal with the faster upgrade cycle (which runs into significantly less cruft on a server than a desktop). The longterm alternative for Fedora is probably CentOS. CentOS is essentially Red Hat Enterprise Linux with all the branding stripped out and Fedora is the upstream for RHEL. –  Ophidian Sep 8 '09 at 0:20
    
I also wouldn't characterize Fedora as a "rolling release", as opposed to something like Gentoo. –  Ophidian Sep 8 '09 at 0:20
    
I WOULD CHARACTERIZE FEDROA AS A ROLLING RELEASE. I am using it now, and every two weeks I have a new kernel, every two days I have an updated which recommends rebooting the system, they upgrade major versions in the same release (KDE 4.2 -> KDE 4.3) and more. I just can't use it for 4 weeks without being completely sure that it's the same machine I made. It changed so much faster. –  elcuco Sep 9 '09 at 9:17

1 Answer 1

up vote 3 down vote accepted

Looks like a DNSSEC problem but is commented in your config file. You need to check if is enabled for Bind:

dnssec-configure -s -b

DNSSEC has been included in Fedora 11: http://fedoraproject.org/wiki/Features/DNSSEC

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.