Dnssec-validation auto

2020-11-12 Thread Ismael Suarez
Hi all The following domain (www.popularsba.com) does not resolve with dnssec validation set to auto, but when I change the validation off it works. Why is this? How can I check this validation? Using bind 9.12 Thanks to all ___ Please visit https://

Query about tkey-gssapi-keytab and secure updates

2020-11-12 Thread isc
Hello all, I send one more time my post as I realized that DMARC DNS record is not friend for mailing lists and failed to delivery for many domains. I am trying to extend my understanding about tkey-gssapi-keytab statement and possibility to use multiple principal names in single keytab file

Re: About DNSSec-Validation=Yes and bind.keys

2020-11-12 Thread Petr Menšík
Hello Onur, sharing your named-checkconf -p output would be a good start. bind.keys should not be required, if your build is recent and it has new key built-in. Please share also your BIND version. Difference between auto and yes is, auto includes built-in keys automatically. With yes, you have t

nested $GENERATE possible?

2020-11-12 Thread Matus UHLAR - fantomas
Hello, is it possible to nest $GENERATE directives? I have to create DNS for /16 subnet... -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.

About DNSSec-Validation=Yes and bind.keys

2020-11-12 Thread Onur GURSOY
Hello Everyone, I have some trouble about bin9 and dnssec When i set dnssec-validation to auto. My dns server is talking with google dns server (8.8.8.8 and 8.8.4.4) and when i set to dnssec-validation to yes it couldn't talk with google dns server. i have realized, there is no pre defined bind.key