<div dir="ltr"><div class="gmail_default" style="font-family:monospace,monospace">Sadiq-</div><div class="gmail_default" style="font-family:monospace,monospace"><br></div><div class="gmail_default" style="font-family:monospace,monospace">Tons of monitoring scripts and systems out there (all better than mine ;-) but fwiw here is a bash script is use.  </div><div class="gmail_default" style="font-family:monospace,monospace">Also a my email responder for friends/family use - email to "<a href="mailto:monme@dc.org">monme@dc.org</a>" Subject: dnssec add <a href="http://example.com">example.com</a>  - NO GUARANTEES  </div><div class="gmail_default" style="font-family:monospace,monospace"><br></div><div class="gmail_default" style="font-family:monospace,monospace">-Rick</div><div class="gmail_default" style="font-family:monospace,monospace"><br></div><div class="gmail_default"><div style="font-family:monospace,monospace"><div><br></div></div></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Mon, Jul 3, 2017 at 2:38 PM, Sadiq Saif <span dir="ltr"><<a href="mailto:lists@sadiqs.com" target="_blank">lists@sadiqs.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span class="">On Mon, Jul 3, 2017, at 17:12, Viktor Dukhovni wrote:<br>
 > For me, BIND's unattended re-signing works well enough, with<br>
> monitoring catching the very rare glitches.  It would be even better<br>
> if the underlying issue were identified and resolved.<br>
><br>
> --<br>
>       Viktor.<br>
<br>
</span>I will concur on that. I've been using the BIND automatic DNSSEC<br>
maintenance for years at this point and this is the first time I've<br>
noticed an issue.<br>
<br>
That said, my monitoring here is non-existent, I only found out about it<br>
indirectly because a monitoring service couldn't resolve the<br>
hostname(s).<br>
<br>
Viktor, if you can provide your DNSSEC monitoring script(s), I (and<br>
others) would appreciate it.<br>
<span class="im HOEnZb"><br>
--<br>
Sadiq Saif<br>
<a href="https://sadiqsaif.com" rel="noreferrer" target="_blank">https://sadiqsaif.com</a><br>
</span><div class="HOEnZb"><div class="h5">______________________________<wbr>_________________<br>
dns-operations mailing list<br>
<a href="mailto:dns-operations@lists.dns-oarc.net">dns-operations@lists.dns-oarc.<wbr>net</a><br>
<a href="https://lists.dns-oarc.net/mailman/listinfo/dns-operations
dns-operations" rel="noreferrer" target="_blank">https://lists.dns-oarc.net/<wbr>mailman/listinfo/dns-<wbr>operations<br>
dns-operations</a> mailing list<br>
<a href="https://lists.dns-oarc.net/mailman/listinfo/dns-operations" rel="noreferrer" target="_blank">https://lists.dns-oarc.net/<wbr>mailman/listinfo/dns-<wbr>operations</a><br>
</div></div></blockquote></div><br></div>