proper setup of dnssec-validation to _always_ resolve, and retrieve DATA and status flags ?

2011-05-09 Thread dchilton+bind
Hi. My bind v980-p1 svr is DNSSEC-enabled, and signed zones are publishing as DNSSEC-valid. I've both internal and external views: -- internal is authoritative and provides recursion for LAN clients -- external serves only as an authoritative hidden-primary feeding slaves via AXFR. all good. i

Re: DNSSEC submit of DLV vs DNSKEY records?

2011-05-05 Thread dchilton+bind
"missed it by THAT much ...". thx! relocating to bind-users. On Thu, 05 May 2011 14:37 -0500, "/dev/rob0" wrote: > FWIW I think you hit the wrong list. Did you mean bind-users@isc? > On Thu, May 05, 2011 at 12:25:27PM -0700, dchilton+b...@bestmail.us >wrote: > > after signing my zones wit