Box stopped resolving some extra domains

Help with Setup/Upgrade
1

Hello, i’m happily running MIB from more than 3 months now.
Suddenly, from yesterday, Box stopped resolving some of the domains on it.

this is the output of my syslog telling something is wrong with DNSKEY signature and reporting something about ’ broken trust chain’:

mau@ubuntu1404x64:~# sudo tail -f /var/log/syslog
Jan 25 10:38:59 ubuntu1404x64 ntpd[1641]: ntp_io: estimated max descriptors: 102                                       4, initial socket boundary: 16
Jan 25 10:38:59 ubuntu1404x64 ntpd[1641]: Listen and drop on 0 v4wildcard 0.0.0.                                       0 UDP 123
Jan 25 10:38:59 ubuntu1404x64 ntpd[1641]: Listen and drop on 1 v6wildcard :: UDP                                        123
Jan 25 10:38:59 ubuntu1404x64 ntpd[1641]: Listen normally on 2 lo 127.0.0.1 UDP                                        123
Jan 25 10:38:59 ubuntu1404x64 ntpd[1641]: Listen normally on 3 eth0 178.62.253.4                                        UDP 123
Jan 25 10:38:59 ubuntu1404x64 ntpd[1641]: Listen normally on 4 lo ::1 UDP 123
Jan 25 10:38:59 ubuntu1404x64 ntpd[1641]: Listen normally on 5 eth0 fe80::601:2e                                       ff:fe00:d501 UDP 123
Jan 25 10:38:59 ubuntu1404x64 ntpd[1641]: peers refreshed
Jan 25 10:38:59 ubuntu1404x64 ntpd[1641]: Listening on routing socket on fd #22                                        for interface updates
Jan 25 10:39:01 ubuntu1404x64 CRON[1644]: (root) CMD (  [ -x /usr/lib/php5/maxli                                       fetime ] && [ -x /usr/lib/php5/sessionclean ] && [ -d /var/lib/php5 ] && /usr/li                                       b/php5/sessionclean /var/lib/php5 $(/usr/lib/php5/maxlifetime))
Jan 25 10:40:11 ubuntu1404x64 postfix/master[1313]: reload -- version 2.11.0, configuration /etc/postfi                x
Jan 25 10:40:12 ubuntu1404x64 named[1048]: received control channel command 'stop -p'
Jan 25 10:40:12 ubuntu1404x64 named[1048]: shutting down: flushing changes
Jan 25 10:40:12 ubuntu1404x64 named[1048]: stopping command channel on 127.0.0.1#953
Jan 25 10:40:12 ubuntu1404x64 named[1048]: no longer listening on 127.0.0.1#53
Jan 25 10:40:12 ubuntu1404x64 named[1048]: exiting
Jan 25 10:40:13 ubuntu1404x64 named[1795]: starting BIND 9.9.5-3ubuntu0.1-Ubuntu -u bind -4
Jan 25 10:40:13 ubuntu1404x64 named[1795]: built with '--prefix=/usr' '--mandir=/usr/share/man' '--info                dir=/usr/share/info' '--sysconfdir=/etc/bind' '--localstatedir=/var' '--enable-threads' '--enable-large                file' '--with-libtool' '--enable-shared' '--enable-static' '--with-openssl=/usr' '--with-gssapi=/usr' '                --with-gnu-ld' '--with-geoip=/usr' '--with-atf=no' '--enable-ipv6' '--enable-rrl' '--enable-filter-aaaa                ' 'CFLAGS=-fno-strict-aliasing -DDIG_SIGCHASE -O2'
Jan 25 10:40:13 ubuntu1404x64 named[1795]: ----------------------------------------------------
Jan 25 10:40:13 ubuntu1404x64 named[1795]: BIND 9 is maintained by Internet Systems Consortium,
Jan 25 10:40:13 ubuntu1404x64 named[1795]: Inc. (ISC), a non-profit 501(c)(3) public-benefit
Jan 25 10:40:13 ubuntu1404x64 named[1795]: corporation.  Support and training for BIND 9 are
Jan 25 10:40:13 ubuntu1404x64 named[1795]: available at https://www.isc.org/support
Jan 25 10:40:13 ubuntu1404x64 named[1795]: ----------------------------------------------------
Jan 25 10:40:13 ubuntu1404x64 named[1795]: adjusted limit on open files from 4096 to 1048576
Jan 25 10:40:13 ubuntu1404x64 named[1795]: found 1 CPU, using 1 worker thread
Jan 25 10:40:13 ubuntu1404x64 named[1795]: using 1 UDP listener per interface
Jan 25 10:40:13 ubuntu1404x64 named[1795]: using up to 4096 sockets
Jan 25 10:40:13 ubuntu1404x64 named[1795]: loading configuration from '/etc/bind/named.conf'
Jan 25 10:40:13 ubuntu1404x64 named[1795]: reading built-in trusted keys from file '/etc/bind/bind.keys                '
Jan 25 10:40:13 ubuntu1404x64 named[1795]: using default UDP/IPv4 port range: [1024, 65535]
Jan 25 10:40:13 ubuntu1404x64 named[1795]: using default UDP/IPv6 port range: [1024, 65535]
Jan 25 10:40:13 ubuntu1404x64 named[1795]: no IPv6 interfaces found
Jan 25 10:40:13 ubuntu1404x64 named[1795]: listening on IPv4 interface lo, 127.0.0.1#53
Jan 25 10:40:13 ubuntu1404x64 named[1795]: generating session key for dynamic DNS
Jan 25 10:40:13 ubuntu1404x64 named[1795]: sizing zone task pool based on 5 zones
Jan 25 10:40:13 ubuntu1404x64 named[1795]: using built-in root key for view _default
Jan 25 10:40:13 ubuntu1404x64 named[1795]: set up managed keys zone for view _default, file 'managed-ke                ys.bind'
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 10.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 16.172.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 17.172.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 18.172.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 19.172.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 20.172.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 21.172.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 22.172.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 23.172.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 24.172.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 25.172.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 26.172.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 27.172.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 28.172.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 29.172.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 30.172.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 31.172.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 168.192.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 64.100.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 65.100.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 66.100.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 67.100.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 68.100.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 69.100.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 70.100.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 71.100.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 72.100.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 73.100.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 74.100.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 75.100.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 76.100.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 77.100.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 78.100.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 79.100.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 80.100.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 81.100.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 82.100.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 83.100.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 84.100.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 85.100.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 86.100.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 87.100.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 88.100.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 89.100.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 90.100.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 91.100.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 92.100.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 93.100.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 94.100.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 95.100.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 96.100.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 97.100.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 98.100.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 99.100.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 100.100.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 101.100.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 102.100.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 103.100.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 104.100.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 105.100.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 106.100.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 107.100.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 108.100.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 109.100.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 110.100.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 111.100.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 112.100.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 113.100.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 114.100.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 115.100.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 116.100.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 117.100.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 118.100.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 119.100.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 120.100.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 121.100.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 122.100.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 123.100.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 124.100.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 125.100.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 126.100.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 127.100.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 254.169.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 2.0.192.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 100.51.198.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 113.0.203.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 255.255.255.255.IN-ADDR.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.                0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.                0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: D.F.IP6.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 8.E.F.IP6.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 9.E.F.IP6.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: A.E.F.IP6.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: B.E.F.IP6.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: automatic empty zone: 8.B.D.0.1.0.0.2.IP6.ARPA
Jan 25 10:40:13 ubuntu1404x64 named[1795]: command channel listening on 127.0.0.1#953
Jan 25 10:40:13 ubuntu1404x64 named[1795]: managed-keys-zone: loaded serial 88
Jan 25 10:40:13 ubuntu1404x64 named[1795]: zone 0.in-addr.arpa/IN: loaded serial 1
Jan 25 10:40:13 ubuntu1404x64 named[1795]: zone 255.in-addr.arpa/IN: loaded serial 1
Jan 25 10:40:13 ubuntu1404x64 named[1795]: zone 127.in-addr.arpa/IN: loaded serial 1
Jan 25 10:40:13 ubuntu1404x64 named[1795]: zone localhost/IN: loaded serial 2
Jan 25 10:40:13 ubuntu1404x64 named[1795]: all zones loaded
Jan 25 10:40:13 ubuntu1404x64 named[1795]: running
Jan 25 10:40:19 ubuntu1404x64 named[1795]: validating @0x7fdcb05f8af0: coscienzeinrete.net DNSKEY: verify failed due to bad signature (keyid=50256): RRSIG has expired
Jan 25 10:40:19 ubuntu1404x64 named[1795]: validating @0x7fdcb05f8af0: coscienzeinrete.net DNSKEY: no valid signature found (DS)
Jan 25 10:40:19 ubuntu1404x64 named[1795]: error (no valid RRSIG) resolving 'coscienzeinrete.net/DNSKEY/IN': 178.62.253.4#53
Jan 25 10:40:19 ubuntu1404x64 named[1795]: validating @0x7fdcb05f8af0: coscienzeinrete.net DNSKEY: verify failed due to bad signature (keyid=50256): RRSIG has expired
Jan 25 10:40:19 ubuntu1404x64 named[1795]: validating @0x7fdcb05f8af0: coscienzeinrete.net DNSKEY: no valid signature found (DS)
Jan 25 10:40:19 ubuntu1404x64 named[1795]: error (broken trust chain) resolving 'coscienzeinrete.net/NS/IN': 178.62.253.4#53
Jan 25 10:40:19 ubuntu1404x64 named[1795]: validating @0x7fdcb05ddd90: coscienzeinrete.net MX: bad cache hit (coscienzeinrete.net/DNSKEY)
Jan 25 10:40:19 ubuntu1404x64 named[1795]: error (broken trust chain) resolving 'coscienzeinrete.net/MX/IN': 178.62.253.4#53
Jan 25 10:40:19 ubuntu1404x64 named[1795]: validating @0x7fdcb05ddd90: coscienzeinrete.net A: bad cache hit (coscienzeinrete.net/DNSKEY)
Jan 25 10:40:19 ubuntu1404x64 named[1795]: error (broken trust chain) resolving 'coscienzeinrete.net/A/IN': 178.62.253.4#53
Jan 25 10:40:19 ubuntu1404x64 named[1795]: validating @0x7fdcb05f8af0: dimagrimentonaturale.com DNSKEY:verify failed due to bad signature (keyid=50256): RRSIG has expired
Jan 25 10:40:19 ubuntu1404x64 named[1795]: validating @0x7fdcb05f8af0: dimagrimentonaturale.com DNSKEY:no valid signature found (DS)
Jan 25 10:40:19 ubuntu1404x64 named[1795]: error (no valid RRSIG) resolving 'dimagrimentonaturale.com/DNSKEY/IN': 178.62.253.4#53
Jan 25 10:40:19 ubuntu1404x64 named[1795]: validating @0x7fdcb05f8af0: dimagrimentonaturale.com DNSKEY:verify failed due to bad signature (keyid=50256): RRSIG has expired
Jan 25 10:40:19 ubuntu1404x64 named[1795]: validating @0x7fdcb05f8af0: dimagrimentonaturale.com DNSKEY:no valid signature found (DS)
Jan 25 10:40:19 ubuntu1404x64 named[1795]: error (broken trust chain) resolving 'dimagrimentonaturale.com/NS/IN': 178.62.253.4#53
Jan 25 10:40:19 ubuntu1404x64 named[1795]: validating @0x7fdcb05ddd90: dimagrimentonaturale.com MX: bad cache hit (dimagrimentonaturale.com/DNSKEY)
Jan 25 10:40:19 ubuntu1404x64 named[1795]: error (broken trust chain) resolving 'dimagrimentonaturale.com/MX/IN': 178.62.253.4#53
Jan 25 10:40:19 ubuntu1404x64 named[1795]: validating @0x7fdcb05ddd90: dimagrimentonaturale.com A: bad cache hit (dimagrimentonaturale.com/DNSKEY)
Jan 25 10:40:19 ubuntu1404x64 named[1795]: error (broken trust chain) resolving 'dimagrimentonaturale.com/A/IN': 178.62.253.4#53
Jan 25 10:40:20 ubuntu1404x64 named[1795]: validating @0x7fdcb05ddd90: grecia2012.cu.cc NS: no valid signature found
Jan 25 10:40:20 ubuntu1404x64 named[1795]: validating @0x7fdcb05ddd90: grecia2012.cu.cc MX: no valid signature found
Jan 25 10:40:21 ubuntu1404x64 named[1795]: validating @0x7fdcb05ddd90: grecia2014.cu.cc NS: no valid signature found
Jan 25 10:40:21 ubuntu1404x64 named[1795]: validating @0x7fdcb05ddd90: grecia2014.cu.cc MX: no valid signature found
Jan 25 10:40:21 ubuntu1404x64 named[1795]: validating @0x7fdcb05ddd90: ilternario.it NS: no valid signature found
Jan 25 10:40:21 ubuntu1404x64 named[1795]: validating @0x7fdcb05ddd90: ilternario.it MX: no valid signature found
Jan 25 10:40:22 ubuntu1404x64 named[1795]: validating @0x7fdcb05ddd90: steiner-antroposofia.it NS: no valid signature found
Jan 25 10:40:22 ubuntu1404x64 named[1795]: validating @0x7fdcb05ddd90: steiner-antroposofia.it MX: no valid signature found
Jan 25 10:40:27 ubuntu1404x64 postfix/tlsmgr[1867]: open smtp TLS cache btree:/var/lib/postfix/smtp_scache
Jan 25 10:40:27 ubuntu1404x64 postfix/tlsmgr[1867]: tlsmgr_cache_run_event: start TLS smtp session cache cleanup
Jan 25 10:40:28 ubuntu1404x64 postfix/smtpd[1866]: connect from vm0334.cs05.seeweb.it[85.94.220.181]
Jan 25 10:40:28 ubuntu1404x64 postgrey[1127]: action=pass, reason=triplet found, client_name=vm0334.cs05.seeweb.it, client_address=85.94.220.181, sender=root@vm0334.cs05.seeweb.it, recipient=info@unaretedam                ore.net
Jan 25 10:40:28 ubuntu1404x64 postfix/smtpd[1866]: C55CC140581: client=vm0334.cs05.seeweb.it[85.94.220.181]
Jan 25 10:40:28 ubuntu1404x64 postfix/cleanup[1870]: C55CC140581: message-id=<20150125094027.17910.2031905785.swift@vm0334.cs05.seeweb.it>
Jan 25 10:40:29 ubuntu1404x64 postfix/qmgr[1850]: C55CC140581: from=<root@vm0334.cs05.seeweb.it>, size=18136, nrcpt=1 (queue active)
Jan 25 10:40:29 ubuntu1404x64 postfix/smtpd[1866]: disconnect from vm0334.cs05.seeweb.it[85.94.220.181]
Jan 25 10:40:29 ubuntu1404x64 dovecot: lmtp(1873): Connect from 127.0.0.1
Jan 25 10:40:29 ubuntu1404x64 spampd[1412]: processing message <20150125094027.17910.2031905785.swift@vm0334.cs05.seeweb.it> for <info@unaretedamore.net>
Jan 25 10:40:29 ubuntu1404x64 spampd[1412]: clean message <20150125094027.17910.2031905785.swift@vm0334.cs05.seeweb.it> (4.45/5.00) from <root@vm0334.cs05.seeweb.it> for <info@unaretedamore.net> in 0.33s, 1                8099 bytes.
Jan 25 10:40:29 ubuntu1404x64 dovecot: lmtp(1873, info@unaretedamore.net): b5fRCw26xFRRBwAAYOYHQw: sieve: msgid=<20150125094027.17910.2031905785.swift@vm0334.cs05.seeweb.it>: stored mail into mailbox 'INBOX                '
Jan 25 10:40:29 ubuntu1404x64 postfix/lmtp[1872]: C55CC140581: to=<info@unaretedamore.net>, relay=127.0.0.1[127.0.0.1]:10025, delay=0.94, delays=0.45/0.02/0.03/0.43, dsn=2.0.0, status=sent (250 2.0.0 <info@                unaretedamore.net> b5fRCw26xFRRBwAAYOYHQw Saved)
Jan 25 10:40:29 ubuntu1404x64 dovecot: lmtp(1873): Disconnect from 127.0.0.1: Successful quit
Jan 25 10:40:29 ubuntu1404x64 postfix/qmgr[1850]: C55CC140581: removed
Jan 25 10:41:04 ubuntu1404x64 kernel: [  151.544264] [UFW BLOCK] IN=eth0 OUT= MAC=04:01:2e:00:d5:01:84:b5:9c:fa:10:30:08:00 SRC=113.238.164.115 DST=178.62.253.4 LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=23111 DF PROTO=TCP SPT=46370 DPT=23 WINDOW=5808 RES=0x00 SYN URGP=0
Jan 25 10:41:07 ubuntu1404x64 kernel: [  154.543104] [UFW BLOCK] IN=eth0 OUT= MAC=04:01:2e:00:d5:01:84:b5:9c:fa:10:30:08:00 SRC=113.238.164.115 DST=178.62.253.4 LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=23112 DF PROTO=TCP SPT=46370 DPT=23 WINDOW=5808 RES=0x00 SYN URGP=0
Jan 25 10:41:13 ubuntu1404x64 kernel: [  160.582575] [UFW BLOCK] IN=eth0 OUT= MAC=04:01:2e:00:d5:01:84:b5:9c:fa:10:30:08:00 SRC=113.238.164.115 DST=178.62.253.4 LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=23113 DF PROTO=TCP SPT=46370 DPT=23 WINDOW=5808 RES=0x00 SYN URGP=0

Due to this issue, i got a “server failed” message when trying to resolve from google (8.8.8.8) or also from localhost.

Can somebody help?
Thank you!

2

Try tools/dns_update. It should say it regenerated zones. Then restart named and try again.

Under DNSSEC, zones have to be re-signed periodically. Mail-in-a-Box installs a cron job that runs tools/dns_update every right. Somehow it’s not re-signing though.

This is the check in the code:

3

Hello Josh, thank you for the quick response.
Issuing the “tools/dns_update” does not give any answer.

The weird thing is that erasing DS record @godaddy (that is my registrar) brings back the correct name resolution.
When i try to set back DS record, i got this errors on status check on my box:

coscienzeinrete.net
✓
DNSSEC ‘DS’ record is set correctly at registrar.
:heavy_multiplication_x:
The nameservers set on this domain are incorrect. They are currently [Not Set]. Use your domain name registrar’s control panel to set the nameservers to ns1.box.sibillo.com; ns2.box.sibillo.com.
:heavy_multiplication_x:
This domain’s DNS MX record is not set. It should be ‘10 box.sibillo.com’. Mail will not be delivered to this box. It may take several hours for public DNS to update after a change. This problem may result from other issues listed here.
✓
postmaster@coscienzeinrete.net exists as a mail alias [=> administrator@box.sibillo.com]
✓
Domain is not blacklisted by dbl.spamhaus.org.

What do you think about it?

4

It’s definitely DNSSEC - the key being used to sign the zones isn’t matching what you’ve uploaded to Godaddy. Except the admin agrees with what you uploaded to Godaddy. So something bad is happening on the box. Unfortunately I can’t help right now - I would recommend disabling DNSSEC (removing the DS record) for now. (It doesn’t create any security issues — few people use DNSSEC — but it is a nice-to-have if you can get it working.)