In article <mailman.103.1321354990.68562.bind-us...@lists.isc.org>, Mark Andrews <ma...@isc.org> wrote:
> In message <sam.wilson-4a322f.10551015112...@news.eternal-september.org>, Sam > Wilson writes: > > In article <mailman.90.1321303169.68562.bind-us...@lists.isc.org>, > > Eduardo Bonsi <beart...@pacbell.net> wrote: > > > > > I am checking my DNS setup from inside using dig and I am getting > > > everything ok but I need a second opinion from outside of the server to > > > see if my ns1 and ns2 are responding ok to setup DNSSEC. > > > > Looks like you haven't put in any glue records for nsX.bonsi.org. > > The glue exists. The lookup of the address records fails the servers > at 63.200.45.18 and 63.200.45.19 return refused. Ah, OK. I hadn't clocked that the last part of the dig: > > bonsi.org. 86400 IN NS ns2.bonsi.org. > > bonsi.org. 86400 IN NS ns1.bonsi.org. > > ;; Received 95 bytes from 199.19.54.1#53(b0.org.afilias-nst.org) in 230 > > ms > > > > dig: couldn't get address for 'ns2.bonsi.org': not found ... was a failure of the local resolver to find an authoritative A record for one of the NSs rather than a failure of b0.org.afilias-nst.org to provide glue. Thanks. Sam _______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users