wbr...@e1b.org <wbr...@e1b.org> wrote: > > So how do we implement one? Create a separate caching server with DNSSEC > validation turned off and forward all queries for the broken domain to it?
That won't work, because a validating server validates replies from a forwarding server. Tony. -- f.anthony.n.finch <d...@dotat.at> http://dotat.at/ FitzRoy: Northeasterly 5 to 7, occasionally gale 8 in southeast. Moderate or rough, becoming very rough in southeast. Occasional rain. Moderate or good, occasionally poor. _______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users