In the past few evenings, my network connectivity has been compromised.
Last night I narrowed it down to DNS. The UTM would nor could not resolve DNS despite changes to the DNS forwarders, rebooting etc....
I just added DNSsec to the config. How might I troubleshoot this or find the root cause?
Yes, I looked at the logs. They didn't seem to show me anything interesting.
2017:12:06-23:00:19 wahine named[4610]: received SIGHUP signal to reload zones 2017:12:06-23:00:19 wahine named[4610]: loading configuration from '//etc/named.conf' 2017:12:06-23:00:19 wahine named[4610]: unable to open '//etc/bind.keys' using built-in keys 2017:12:06-23:00:19 wahine named[4610]: sizing zone task pool based on 94 zones 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view norpz: 16.172.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view norpz: 17.172.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view norpz: 18.172.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view norpz: 19.172.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view norpz: 64.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view norpz: 65.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view norpz: 66.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view norpz: 67.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view norpz: 68.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view norpz: 69.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view norpz: 70.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view norpz: 71.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view norpz: 72.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view norpz: 73.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view norpz: 74.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view norpz: 75.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view norpz: 76.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view norpz: 77.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view norpz: 78.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view norpz: 79.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view norpz: 80.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view norpz: 81.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view norpz: 82.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view norpz: 83.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view norpz: 84.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view norpz: 85.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view norpz: 86.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view norpz: 87.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view norpz: 88.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view norpz: 89.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view norpz: 90.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view norpz: 91.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view norpz: 92.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view norpz: 93.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view norpz: 94.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view norpz: 95.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view norpz: 96.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view norpz: 97.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view norpz: 98.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view norpz: 99.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view norpz: 100.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view norpz: 101.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view norpz: 102.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view norpz: 103.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view norpz: 104.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view norpz: 105.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view norpz: 106.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view norpz: 107.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view norpz: 108.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view norpz: 109.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view norpz: 110.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view norpz: 111.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view norpz: 112.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view norpz: 113.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view norpz: 114.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view norpz: 115.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view norpz: 116.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view norpz: 117.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view norpz: 118.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view norpz: 119.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view norpz: 120.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view norpz: 121.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view norpz: 122.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view norpz: 123.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view norpz: 124.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view norpz: 125.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view norpz: 126.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view norpz: 127.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view norpz: 0.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view norpz: 127.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view norpz: 254.169.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view norpz: 2.0.192.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view norpz: 100.51.198.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view norpz: 113.0.203.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view norpz: 255.255.255.255.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view norpz: 0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view norpz: D.F.IP6.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view norpz: 8.E.F.IP6.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view norpz: 9.E.F.IP6.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view norpz: A.E.F.IP6.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view norpz: B.E.F.IP6.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view norpz: 8.B.D.0.1.0.0.2.IP6.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view norpz: EMPTY.AS112.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view default: 16.172.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view default: 17.172.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view default: 18.172.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view default: 19.172.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view default: 64.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view default: 65.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view default: 66.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view default: 67.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view default: 68.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view default: 69.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view default: 70.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view default: 71.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view default: 72.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view default: 73.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view default: 74.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view default: 75.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view default: 76.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view default: 77.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view default: 78.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view default: 79.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view default: 80.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view default: 81.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view default: 82.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view default: 83.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view default: 84.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view default: 85.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view default: 86.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view default: 87.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view default: 88.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view default: 89.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view default: 90.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view default: 91.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view default: 92.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view default: 93.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view default: 94.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view default: 95.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view default: 96.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view default: 97.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view default: 98.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view default: 99.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view default: 100.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view default: 101.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view default: 102.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view default: 103.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view default: 104.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view default: 105.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view default: 106.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view default: 107.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view default: 108.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view default: 109.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view default: 110.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view default: 111.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view default: 112.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view default: 113.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view default: 114.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view default: 115.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view default: 116.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view default: 117.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view default: 118.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view default: 119.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view default: 120.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view default: 121.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view default: 122.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view default: 123.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view default: 124.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view default: 125.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view default: 126.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view default: 127.100.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view default: 0.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view default: 127.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view default: 254.169.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view default: 2.0.192.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view default: 100.51.198.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view default: 113.0.203.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view default: 255.255.255.255.IN-ADDR.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view default: 0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view default: D.F.IP6.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view default: 8.E.F.IP6.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view default: 9.E.F.IP6.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view default: A.E.F.IP6.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view default: B.E.F.IP6.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view default: 8.B.D.0.1.0.0.2.IP6.ARPA 2017:12:06-23:00:19 wahine named[4610]: automatic empty zone: view default: EMPTY.AS112.ARPA 2017:12:06-23:00:19 wahine named[4610]: configuring command channel from '//etc/rndc.key' 2017:12:06-23:00:19 wahine named[4610]: reloading configuration succeeded 2017:12:06-23:00:19 wahine named[4610]: reloading zones succeeded 2017:12:06-23:00:19 wahine named[4610]: zone 0.0.127.in-addr.arpa/IN/norpz: loaded serial 1512630019 2017:12:06-23:00:19 wahine named[4610]: zone 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa/IN/norpz: loaded serial 1512630019 2017:12:06-23:00:19 wahine named[4610]: all zones loaded 2017:12:06-23:00:19 wahine named[4610]: running 2017:12:06-23:00:19 wahine named[4610]: zone localhost/IN/norpz: loaded serial 1512630019 2017:12:06-23:00:19 wahine named[4610]: zone 0.0.127.in-addr.arpa/IN/default: loaded serial 1512630019 2017:12:06-23:00:19 wahine named[4610]: zone localhost/IN/default: loaded serial 1512630019 2017:12:06-23:00:19 wahine named[4610]: zone 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa/IN/default: loaded serial 1512630019 2017:12:06-23:00:19 wahine named[4610]: rpz.zone:9: using RFC1035 TTL semantics 2017:12:06-23:00:21 wahine named[4610]: zone rpz/IN/default: zone serial (1345588987) unchanged. zone may fail to transfer to slaves. 2017:12:06-23:00:21 wahine named[4610]: rpz: (re)loading policy zone 'rpz' changed from 199871 to 199871 qname, 0 to 0 nsdname, 65 to 65 IP, 0 to 0 NSIP, 0 to 0 CLIENTIP entries 2017:12:06-23:00:21 wahine named[4610]: zone rpz/IN/default: loaded serial 1345588987
Thanks,
Doug
This thread was automatically locked due to age.