Ist das jetzt mit den Standardeinstellungen von Keyhelp unbedenklich oder besteht hier Handlungsbedarf?
Debian 10.10 (64-bit)
Kernel 4.19.0-17-amd64
Keyhelp 21.1 (Build 2252)
KVM Virtualisierung
Code: Select all
Sep 3 17:41:20 meinserver named[576]: client @0x7f42ec0c7430 193.23.164.10#40034 (nDCZS7.98596a23.n97.vp2.v4.dnsdrakkarv4.com): query (cache) 'nDCZS7.98596a23.n97.vp2.v4.dnsdrakkarv4.com/A/IN' denied
Sep 3 17:41:21 meinserver named[576]: validating dnsdrakkarv4.com/DNSKEY: verify failed due to bad signature (keyid=56105): RRSIG has expired
Sep 3 17:41:21 meinserver named[576]: validating dnsdrakkarv4.com/DNSKEY: no valid signature found (DS)
Sep 3 17:41:21 meinserver named[576]: no valid RRSIG resolving 'dnsdrakkarv4.com/DNSKEY/IN': 95.217.212.142#53
Sep 3 17:41:21 meinserver named[576]: validating dnsdrakkarv4.com/DNSKEY: verify failed due to bad signature (keyid=56105): RRSIG has expired
Sep 3 17:41:21 meinserver named[576]: validating dnsdrakkarv4.com/DNSKEY: no valid signature found (DS)
Sep 3 17:41:21 meinserver named[576]: broken trust chain resolving 'v4.dnsdrakkarv4.com/DS/IN': 95.217.212.142#53
Sep 3 17:41:21 meinserver named[576]: broken trust chain resolving 'v4.dnsdrakkarv4.com/DNSKEY/IN': 95.217.3.73#53
Sep 3 17:41:21 meinserver named[576]: broken trust chain resolving 'nDCZS7.98596a23.s97.vp2.v4.dnsdrakkarv4.com/A/IN': 95.217.3.73#53
Sep 3 17:50:12 meinserver named[576]: client @0x7f42ec10ffd0 193.23.164.10#4307 (FZUlWj.98596a23.nf.n97.vp2.v6.dnsdrakkarv4.com): query (cache) 'FZUlWj.98596a23.nf.n97.vp2.v6.dnsdrakkarv4.com/A/IN' denied
Sep 3 17:50:13 meinserver named[576]: validating v6.dnsdrakkarv4.com/DS: bad cache hit (dnsdrakkarv4.com/DNSKEY)
Sep 3 17:50:13 meinserver named[576]: broken trust chain resolving 'v6.dnsdrakkarv4.com/DS/IN': 95.217.212.142#53
Sep 3 17:50:13 meinserver named[576]: broken trust chain resolving 'v6.dnsdrakkarv4.com/DNSKEY/IN': 2a01:4f9:c010:42a9::1#53
Sep 3 17:50:13 meinserver named[576]: broken trust chain resolving 'FZUlWj.98596a23.nf.s97.vp2.v6.dnsdrakkarv4.com/A/IN': 2a01:4f9:c010:42a9::1#53