On 20/07/12 16:21, Mark Andrews wrote:
In message <[email protected]>, "Brian J. Murrell" writes:
Just for good measure, since I think I have posted this before, but here
are the options I have set in my bind configuration with regard to dnssec=
:
dnssec-enable yes;
dnssec-validation yes;
dnssec-lookaside auto;
FWIW, on 9.8 the only other line we have (for reasons of permissions) is:
managed-keys-directory "/var/named/data/dynamic";
I don't see why those 3 lines aren't sufficient for him?
Turn on validation using the root's DNSKEY.
auto-dnssec maintian;
I thought that was for master zones, not recursion/validation? Or am I
missing something?
_______________________________________________
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
from this list
bind-users mailing list
[email protected]
https://lists.isc.org/mailman/listinfo/bind-users
