Re: BIND: managed-keys-zone: Unable to fetch DNSKEY set '.': timed out

[Jeremy Ardley <jeremy@ardley.org>]

On 13/3/23 16:19, local10 wrote:
> Mar 13, 2023, 07:25 by jeremy@ardley.org:
>
> > Try
> >
> > netstat -tulpnW | grep 53
> >
> > and see what's listening
> Bind seems to be listening on 127.0.0.1 port 53.
>
> I don't have netstat installed and can't easily install it as aptitude can't resolve Debian server's name to an IP, so the following is what I tried:
>
>
> # telnet -4 127.0.0.1 53
> Trying 127.0.0.1...
> Connected to 127.0.0.1.
> Escape character is '^]'.
> ^]
> telnet> quit
> Connection closed.
> #
> #
> # systemctl stop  named.service
> #
> #
> # telnet -4 127.0.0.1 53
> Trying 127.0.0.1...
> telnet: Unable to connect to remote host: Connection refused
> #
> #
> # systemctl restart  named.service
> #
> #
> # telnet -4 127.0.0.1 53
> Trying 127.0.0.1...
> Connected to 127.0.0.1.
> Escape character is '^]'.
> ^]
> telnet> quit
> Connection closed.
> #
Sorry. Last message was garbled. Try this in /etc/bind/named.conf.options

options {
        // other configuration options ...
        debug 1;
        logging {
                channel debug_log {
                        file "/var/log/bind9/debug.log" versions 3 size 5m;
                        severity dynamic;
                        print-time yes;
                        print-severity yes;
                        print-category yes;
                };
                category default {
                        debug_log;
                };
        };
};

also try setting /etc/resolv.conf to your ISP DNS servers - at least to 
get software updates


>
--
Jeremy
(Lists)