On Fri, Feb 03, 2012 at 01:55:12PM +0000, Florian Weimer wrote: > These nameservers: > > dns2.oppedahl.com. 172800 IN A 208.109.255.50 > dns1.oppedahl.com. 172800 IN A 216.69.185.50 > > return SERVFAIL for EDNS0 queries. COM contains a signed delegation. > This configuration is not supported. It seems that BIND produces > a failure even if DNSSEC validation is not enabled for the view.
How odd. . . it doesn't look that way from here: [littledebian:~] owens% dig oppedahl.com soa +norec +edns=0 @216.69.185.50 ; <<>> DiG 9.9.0rc2 <<>> oppedahl.com soa +norec +edns=0 @216.69.185.50 ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 59472 ;; flags: qr aa; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 3 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ;; QUESTION SECTION: ;oppedahl.com. IN SOA ;; ANSWER SECTION: oppedahl.com. 3600 IN SOA dns1.oppedahl.com. dns.jomax.net. 2011111708 28800 7200 604800 3600 ;; AUTHORITY SECTION: oppedahl.com. 3600 IN NS dns1.oppedahl.com. oppedahl.com. 3600 IN NS dns2.oppedahl.com. ;; ADDITIONAL SECTION: dns1.oppedahl.com. 3600 IN A 216.69.185.50 dns2.oppedahl.com. 3600 IN A 208.109.255.50 ;; Query time: 100 msec ;; SERVER: 216.69.185.50#53(216.69.185.50) ;; WHEN: Fri Feb 3 09:06:24 2012 ;; MSG SIZE rcvd: 172 ; <<>> DiG 9.9.0rc2 <<>> oppedahl.com @216.69.185.50 dnskey +dnssec ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 32030 ;; flags: qr aa rd; QUERY: 1, ANSWER: 5, AUTHORITY: 0, ADDITIONAL: 1 ;; WARNING: recursion requested but not available ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ;; QUESTION SECTION: ;oppedahl.com. IN DNSKEY ;; ANSWER SECTION: oppedahl.com. 3600 IN DNSKEY 257 3 5 AwEAAZ5XEDidVFrH3eT2nH/W/sbaZFpG6U2oer0H8XJnFwJU83O8DcyH nHDgGtyB/tWH1zcv1CtwVrSRSxtD8lLZfuJFe3cWUP4126URj3rEmeyc U1WNmQVXqykApqCFcGglWnIjflOIoZtkSFJc4TPQjeCF2DuHSXouFY3h rvEZqxMudrtW4a226szsa2KyDWk0R671Gq3emfmwPC77DIwRNkMX/GIP PDZwz5mKXz7awKLOQyEpOcahTlGNWCEGw9w1JxmqbatJh84imuiI2lfY lVsrqI3jHvW2qPz7+sQ9203BMcpp61k/2L1TyMV7bqKDZHnZER6M9Kvo adBsWMUCsZ0= oppedahl.com. 3600 IN DNSKEY 257 3 5 AwEAAdnoykMtls1LXIjSR64JB/gdOfkcdzqakUU2I/YClfwSGcIRY8dM 9IvMg69dFwN1kOVwd21gOZxMlRC8FxK3Weygu2EWDVLMJMYppH6jhPtO JOFB6lc8sum63C2mCmy9gbgZmYulSbZbnT608K8g2VCVzksBBJ0rjdaQ Stl17Djyu5aZ7HlNK98iYvkGILPQZnO/2kcIFnpcExHTncW7PvaKMmWr 2PPoKcbv7NV2Pv98GKpcCoST221wGTeYhCay5h55x0fHG51H1DpXURPo XhVx+W7dHFCUM0iIfJciKXqAeQRa/VhQ+3RCW0wuJexYxqaf0RcGjhyu +Ma4GRxd390= oppedahl.com. 3600 IN DNSKEY 256 3 5 AwEAAd3FBGqcuvfY9a4csyC0trx9iXIzAZFc4klLr1IF+bhjtUFG9Es/ cD19GeWa/HF65Fzlykgqe+mVYAQ5yled/rLgMOg14jKIWA3dX2aMGMpJ Buddzr/Nvb+AnHk7muwjx9rjUxy1miWKls+AovoWOydgeESJogDDPRdT 9AxS34I9 oppedahl.com. 3600 IN DNSKEY 256 3 5 AwEAAaIoPlTY6ilGGOMc7zqyuOzRYkpaNMdjrnqmmxJZUsCe3O3oXjA4 gzDq9VsiL67JUKvV6DP/QzJaiGDuqhO7X2GIQsW9iBT9ME98C3xkeDEe FCrJVJJcyRrC2XimcaSE4ri/wXqegif4hq24tvZB2mtFROAfSUzjEJkq /DqDk8jN oppedahl.com. 3600 IN RRSIG DNSKEY 5 2 3600 20120212140129 20120128140129 14779 oppedahl.com. UJl1TpJfuutGzHyZfsW5QwD++namGTDTr9wlqd+OpSYHJD/CCi1n2FLQ 6VgrytswOdIe8lhmU3jF4BqLSkikR7yGNGD/ABHd3nIkIbsuadA9Vp+k csYsjihrsUEGG+ZwArteyqSnfby76c5fHjH3THH56wF6vhEETl0bTsgr +5LKogEGMzHbD2oWyrxe/eJH2lthp5FDCoh9z8rDXqdbjxOvsdp7qRSF WTHy/CVTX1OtuAKhu8qEDooD6jjEOqv16eKNNAD02cwUNjKb7a07kaPj jcBqPrUaPeKI/0NBuW/XuEWKalvX3p+OmUhzFEQDm6WT7RHUF1OqX9jI CtDzZw== ;; Query time: 100 msec ;; SERVER: 216.69.185.50#53(216.69.185.50) ;; WHEN: Fri Feb 3 09:06:46 2012 ;; MSG SIZE rcvd: 1201 Bill. _______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
