In article <mailman.103.1321354990.68562.bind-us...@lists.isc.org>,
 Mark Andrews <ma...@isc.org> wrote:

> In message <sam.wilson-4a322f.10551015112...@news.eternal-september.org>, Sam 
> Wilson writes:
> > In article <mailman.90.1321303169.68562.bind-us...@lists.isc.org>,
> >  Eduardo Bonsi <beart...@pacbell.net> wrote:
> > 
> > > I am checking my DNS setup from inside using dig and I am getting 
> > > everything ok but I need a second opinion from outside of the server to 
> > > see if my ns1 and ns2 are responding ok to setup DNSSEC.
> > 
> > Looks like you haven't put in any glue records for nsX.bonsi.org.
> 
> The glue exists.  The lookup of the address records fails the servers
> at 63.200.45.18 and 63.200.45.19 return refused.

Ah, OK.  I hadn't clocked that the last part of the dig:

> > bonsi.org.              86400   IN      NS      ns2.bonsi.org.
> > bonsi.org.              86400   IN      NS      ns1.bonsi.org.
> > ;; Received 95 bytes from 199.19.54.1#53(b0.org.afilias-nst.org) in 230 
> > ms
> > 
> > dig: couldn't get address for 'ns2.bonsi.org': not found

... was a failure of the local resolver to find an authoritative A 
record for one of the NSs rather than a failure of 
b0.org.afilias-nst.org to provide glue.  Thanks.

Sam
_______________________________________________
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Reply via email to