This looks like Google has forgotten to create the zone 96.34.in-addr.arpa but
have created
180.96.34.in-addr.arpa resulting in answers that should come from
96.34.in-addr.arpa getting
REFUSED returned. DNSSEC validation and QNAME minimisation find these sorts of
configuration errors.
Intermed
It isn’t DNSSEC. It’s a badly configured DNS server that is claiming that it
serves .com rather than dnssec-analyzer-gslb.verisignlabs.com which is actually
delegated to it.
% dig dnssec-analyzer-gslb.verisignlabs.com +trace +all
;; BADCOOKIE, retrying.
; <<>> DiG 9.19.24-dev <<>> dnssec-a
|Try these four
|
|
|
|fail01.dnssec.works|
|fail02.dnssec.works|
|fail03.dnssec.works|
|fail04.dnssec.works|
and then with +cd and note the difference;
On 28.04.2024 08:17, Walter H. via bind-users wrote:
On 27.04.2024 16:54, Lee wrote:
On Sat, Apr 27, 2024 at 9:50 AM Walter H. via bind-use
OK.
Firstly, the bad news. ECS is only available in the subscription version of
BIND. That is, versions ending with -S. To get this version you need a (paid)
support contract with ISC. If you are interested, let me know.
Secondly, 9.18.21 is not current. I would recommend that you use the lates
Hello.
Do you mean 9.18-S1?
> On 28 Apr 2024, at 08:06, Yang via bind-users
> wrote:
>
>
> dear admin:
> now, i use bind-9.18-21, i want to use ecs client subnet function; but i
> don't know how to configure it, and i don't get method from google
> please give me some example,or document
dear admin:
now, i use bind-9.18-21, i want to use ecs client subnet function; but i
don't know how to configure it, and i don't get method from google
please give me some example,or document , or google links to learn about
it ;
thanks!
Yang
395096...@qq.com--
Visit https://lists.isc
6 matches
Mail list logo
