On Sun, 9 Apr 2023, Badli Al Rashid wrote:
Hi All, Gooday everybody. Anyone having temporary failure when running apt update with own bind local resolver ? I got a temporary failure resolving deb.debian.org and www.debian.org since last week thursday. I can resolve other sites like www.kernel.org and others. When I switch to other DNS servers I can resolve www.debian.org. The command dig with +cd option I was able to resolve dwb.debian.org and www.debian.org. I am using bullseye bind packages and then upgraded to bind to sury to test. It is still the same.
I've also been having severe problems resolving debian.org domains.
I've now turned off dnssec validation on my bind server.
//========================================================================
// If BIND logs error messages about the root key being expired,
// you will need to update your keys. See
// https://www.isc.org/bind-keys
//========================================================================
dnssec-validation no;
Tim.