BIND does not answer

Hi, I have a strange BIND behaviour I don't know how to handle. As I don't exactly know how to describe it, I'll rather explain what I did and what happens. But not quite easy to follow. In my tests, I have two servers with BIND installed on them: SiteA (BIND 9.8.2rc1 on CentOS 6.3), and Sit

Re: [DNSSEC] Dealing with an inconsistent NSEC

On Tue, Oct 23, 2012 at 6:36 AM, Stephane Bortzmeyer wrote: > On Tue, Oct 23, 2012 at 06:27:12AM -0700, > Casey Deccio wrote > a message of 88 lines which said: > > > The issue here is that no delegation NS records exist for > > v1.pcextreme.nlin its parent zone, pcextreme.nl. Thus when any >

Re: [DNSSEC] Dealing with an inconsistent NSEC

On Oct 23, 2012, at 4:08 AM, Stephane Bortzmeyer wrote: > It may be a bug in BIND and it is certainly a bug in the zone > pcextreme.nl. > > BIND validating resolvers are unable to get the IP address of > v1.pcextreme.nl. > > I believe this is because of the strange NSEC: > > tools-newerst.pce

Re: [DNSSEC] Dealing with an inconsistent NSEC

On Tue, Oct 23, 2012 at 06:27:12AM -0700, Casey Deccio wrote a message of 88 lines which said: > The issue here is that no delegation NS records exist for > v1.pcextreme.nlin its parent zone, pcextreme.nl. Thus when any > server (authoritative for both zones) is queried for > v1.pcextreme.nl/

Re: [DNSSEC] Dealing with an inconsistent NSEC

On Tue, Oct 23, 2012 at 1:08 AM, Stephane Bortzmeyer wrote: > It may be a bug in BIND and it is certainly a bug in the zone > pcextreme.nl. > > BIND validating resolvers are unable to get the IP address of > v1.pcextreme.nl. > > I believe this is because of the strange NSEC: > > tools-newerst.pcex

[DNSSEC] Dealing with an inconsistent NSEC

It may be a bug in BIND and it is certainly a bug in the zone pcextreme.nl. BIND validating resolvers are unable to get the IP address of v1.pcextreme.nl. I believe this is because of the strange NSEC: tools-newerst.pcextreme.nl. 2315 IN NSECv2.pcextreme.nl. RRSIG NSEC which says t