[ratelimits] Interesting error message.

[Paul Vixie]

Lyle Giese wrote:
> Looking for more information or suggestions on this error.
> ...
> I have seen this happen on servers that do not run the rrl patch.
> ...
> Not always the same root server, btw.
> ...
> Feb  2 00:18:44 ns1 named[4054]: checkhints: view external:
> d.root-servers.net/A (199.7.91.13) missing from hints
> Feb  2 00:18:44 ns1 named[4054]: checkhints: view external:
> d.root-servers.net/A (128.8.10.90) extra record in hints
> Feb  2 00:23:49 ns1 named[4054]: checkhints: view external:
> d.root-servers.net/A (199.7.91.13) missing from hints
> Feb  2 00:23:49 ns1 named[4054]: checkhints: view external:
> d.root-servers.net/A (128.8.10.90) extra record in hints

since this isn't rpz-specific, i suggest asking this question on
bind-users at . note, those are the old and new addresses for d-root, which
is being renumbered right now. i fixed this by not using the "downloaded
root.hints" file. i make a new root.hints file by doing "dig
@192.5.5.241 . ns > root.hints". if you eyeball the output of that
command and compare it to the root.hints file you're using, you may find
that they have differing addresses for d-root. --paul