In message <20110630031511.gn14...@mail.incertum.net>, Stefan Foerster writes: > * Mark Andrews <ma...@isc.org>: > > Contact the adminstrator of the server and request that they stop > > disabling dnssec. "dnssec-enable yes;" is the default for all > > version except 9.3.x. > > Are you sure that 88.198.26.233 has DNSSEC disabled? The admin told me > he had added "dnssec-enable yes;" to the named.conf file.
But has he reloaded/reconfigured the server? "dig billigmail.org any @88.198.26.233" shows the server has the signatures. "dig billigmail.org soa @88.198.26.233 +dnssec" show that they arn't being returned when requested and it also shows DO being returned which means there is nothing stripping out the DO bit on the way to the server or on the way back. > Cheers > Stefan > _______________________________________________ > Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe > from this list > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org _______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
