On Aug 2, 2013, at 9:19 PM, Alan Clegg <a...@clegg.com> wrote: > > On Aug 2, 2013, at 11:35 AM, David Newman <dnew...@networktest.com> wrote: > >> That looks OK, but the forwarder might still be broken (i.e., it might >> strip replies). > > If this were the case and the resolver is correctly configured with a root > anchor then all attempted validation (from the root down) would result in > SERVFAIL. > > I'm going with "misconfigured resolver" for 1000.
Or, on a second (third?) reading of the original problem, very possibly a missing DS record in the parent of the zone in question, but we don't really know enough at this point. AlanC -- Alan Clegg | +1-919-355-8851 | a...@clegg.com
signature.asc
Description: Message signed with OpenPGP using GPGMail
_______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
