tOn Fri, Jan 27, 2023 at 02:01:24AM +0000, Polarian wrote:
> Hello,
>
> I have had this issue before, tip: check your system clock. If it is quite
> badly desyncronised, a lot of DNS servers will reject packets from it.
Not quite right. Authoritative DNS servers do not reject packets based
on timestamps (as requests do not carry a timestamp). A resolver may
reject received DNSSEC signatures based on time, but in general the
validity period of DNSSEC signatatures is measured in days or weeks,
so your time has to be way off to show that.
-Otto
No comments:
Post a Comment