Re: Network Solutions and DNSSEC

2013-08-08 Thread Copeland, Dirck L
Eric, The message I got from them as of 9/30/2012, they do not plan on supporting DNSSEC. Dirck On Thu, Aug 8, 2013 at 2:22 PM, Eric Davis wrote: > Anyone know when Network Solutions plans to support DNSSEC? > > Eric Davis > ___ > Please visit https://

Re: DNSSEC troubleshooting on a recursive server.

2013-08-08 Thread Mark Andrews
In message <5203ca6c.9000...@corp.sonic.net>, Grant Keller writes: > On 08/08/2013 09:34 AM, Phil Mayers wrote: > > On 08/08/13 17:22, Grant Keller wrote: > > > >> Its strange, I get the records when querying one of my other DNS > >> servers: > > > > As per my original email - firewall? middlebox?

Network Solutions and DNSSEC

2013-08-08 Thread Eric Davis
Anyone know when Network Solutions plans to support DNSSEC? Eric Davis ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listi

Re: DNSSEC troubleshooting on a recursive server.

2013-08-08 Thread Grant Keller
On 08/08/2013 09:34 AM, Phil Mayers wrote: > On 08/08/13 17:22, Grant Keller wrote: > >> Its strange, I get the records when querying one of my other DNS >> servers: > > As per my original email - firewall? middlebox? crazy ISP transparent > caching DNS server? > > I would break out tcpdump; clear

Re: DNSSEC troubleshooting on a recursive server.

2013-08-08 Thread Phil Mayers
On 08/08/13 17:22, Grant Keller wrote: Its strange, I get the records when querying one of my other DNS servers: As per my original email - firewall? middlebox? crazy ISP transparent caching DNS server? I would break out tcpdump; clear the cache on the affected server, re-do the dig, then

Re: DNSSEC troubleshooting on a recursive server.

2013-08-08 Thread Grant Keller
On 08/08/2013 09:09 AM, Alan Clegg wrote: > On Aug 8, 2013, at 11:58 AM, Grant Keller wrote: > >> # dig +dnssec +cd zygo.com a >> >> ; <<>> DiG 9.7.0-P2-RedHat-9.7.0-17.P2.el5_9.2 <<>> +dnssec +cd zygo.com a >> ;; global options: +cmd >> ;; Got answer: >> ;; ->>HEADER<<- opcode: QUERY, status: NOE

Re: DNSSEC troubleshooting on a recursive server.

2013-08-08 Thread Alan Clegg
On Aug 8, 2013, at 11:58 AM, Grant Keller wrote: > # dig +dnssec +cd zygo.com a > > ; <<>> DiG 9.7.0-P2-RedHat-9.7.0-17.P2.el5_9.2 <<>> +dnssec +cd zygo.com a > ;; global options: +cmd > ;; Got answer: > ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 45711 > ;; flags: qr rd ra cd; QUERY: 1

Re: DNSSEC troubleshooting on a recursive server.

2013-08-08 Thread Grant Keller
On 08/07/2013 06:17 PM, Mark Andrews wrote: >>> In any event, as Mark has suggested, you don't want to dig the RRSIG >>> yourself. Rather, use: >>> >>> dig +dnssec zygo.com a >>> >>> ...and if you get a SERVFAIL: >>> >>> dig +dnssec +cd zygo.com a >> dig +dnssec +cd zygo.com a resolved the domain.