dns日志中存在大量错误

Question

我的DNS日志中有很多错误：

Mar 18 17:26:38 server named[3240]: validating @0x2aacec5b18e0: com NS: got insecure response; parent indicates it should be secure
Mar 18 17:26:38 server named[3240]: error (insecurity proof failed) resolving 'com/NS/IN': 2001:470:20::2#53
Mar 18 17:26:38 server named[3240]: validating @0x2aace80c3cc0: com NS: got insecure response; parent indicates it should be secure
Mar 18 17:26:38 server named[3240]: error (insecurity proof failed) resolving 'com/NS/IN': 74.82.42.42#53
Mar 18 17:26:38 server named[3240]: error (chase DS servers) resolving 'addthisedge.com/DS/IN': 74.82.42.42#53
Mar 18 17:26:38 server named[3240]: validating @0x2aacec5cba60: com NS: got insecure response; parent indicates it should be secure
Mar 18 17:26:38 server named[3240]: error (insecurity proof failed) resolving 'com/NS/IN': 2001:470:20::2#53
Mar 18 17:26:38 server named[3240]: validating @0x2aace80c3cc0: com NS: got insecure response; parent indicates it should be secure
Mar 18 17:26:38 server named[3240]: error (insecurity proof failed) resolving 'com/NS/IN': 74.82.42.42#53

它们不影响我的DNS操作，它们是什么意思？我已经设立了两家货运代理，他们有关系吗？

Answer 1

它们是与DNSSEC相关的消息，以及您的解析器试图使用它但却被阻塞的事实。阅读BIND版本的手册，了解更多信息，以及有关如何正确配置BIND的信息(或在必要时禁用它)。