Re: BIND: managed-keys-zone: Unable to fetch DNSKEY set '.': timed out

[Casey Deccio <casey@deccio.net>]

On Mar 13, 2023, at 12:08 AM, local10 <local10@tutanota.com> wrote:

I have  a local caching DNS server that was working fine for a long time but today, all of a sudden, it stopped resolving queries.

More info: https://pastebin.com/iW5YeXgS

Any ideas? Thanks

Based on what I saw in the logs, your resolver is having trouble reaching the internet.  It shows problems with both the priming query (./NS) and the trust query (./DNSKEY).  Could you try running the following?

$ dig +norec @198.41.0.4 . NS

$ dig +norec @2001:503:ba3e::2:30 . NS

$ dig +norec @198.41.0.4 . DNSKEY

$ dig +norec @2001:503:ba3e::2:30 . DNSKEY

These manually send the same queries to the internet that your resolver is attempting.

Cheers,

Casey