On Apr 7 2010, I wrote:
A peculiarity:
dig dnskey int. @...
to nameservers with validation via dlv.isc.org gives SERVFAIL if they are
running BIND 9.6.2-P1 or 9.7.0-P1. but gives a normal "NODATA" from
BIND 9.6.2. Any ideas?
The same thing happens for any zone without DNSKEY records replacing "int.".
"+cd" suppresses the SERVFAIL, so it's a validation failure (but shouldn't
be, of course).
I have reported the problem to bind-bugs and given them some level 3 trace
output, but I haven't worked out what is going wrong from it. :-(
--
Chris Thompson
Email: c...@cam.ac.uk
_______________________________________________
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
