Thanks Anand. I have one more question. Is there any option in bind which facilitates me to answer my clients for that zone only which has DNSSEC enable??? For all other queries, it should not answer.
Please don't print this e-mail until & unless you really need, it will save Trees on Planet Earth. IPv4 is Over, Are your ready for new Network. Thanks n Regards, GAURAV KANSAL 9910118448 VoIP - 6259 Operation And Routing Unit NIC , NEW DELHI -----Original Message----- From: Anand Buddhdev [mailto:ana...@ripe.net] Sent: Wednesday, January 11, 2012 4:37 PM To: Gaurav kansal Cc: bind-users@lists.isc.org Subject: Re: DNSSEC authentication and ad parameter On 11/01/2012 11:13, Gaurav kansal wrote: Hi Gaurav, > Now, I understand why I was not getting my "AD" flag set in query response. > > I tried from google dns (8.8.8.8) also but didn't get "AD" bit set. > This may be because 8.8.8.8 might not be configured for DLV validation. > > Is there any open dns available from which I can check my domain for "AD" > flag set????????????? DNS OARC runs a pair of validating servers, open to the public. Here's a page with more information about then: https://www.dns-oarc.net/oarc/services/odvr Regards, Anand Buddhdev RIPE NCC _______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users