Re: Bind/PowerDNS interoperatiblity issue

2014-02-19 Thread Aki Tuomi
On Wed, Feb 19, 2014 at 12:27:05PM +, Tony Finch wrote: > Aki Tuomi wrote: > > > > Hi, can you try again? Just to be sure. > > This time it failed in the way you described earlier: > > 19-Feb-2014 12:23:27.043 queries: info: client ::1#32049 > (5.2.0.0.0.1.0.0.0.0.0.0.0.0.0.0.1.0.0.0.1.0.0.

Re: Bind/PowerDNS interoperatiblity issue

2014-02-19 Thread Tony Finch
Aki Tuomi wrote: > > Hi, can you try again? Just to be sure. This time it failed in the way you described earlier: 19-Feb-2014 12:23:27.043 queries: info: client ::1#32049 (5.2.0.0.0.1.0.0.0.0.0.0.0.0.0.0.1.0.0.0.1.0.0.0.pasilehto.fi): view rec: query: 5.2.0.0.0.1.0.0.0.0.0.0.0.0.0.0.1.0.0.0.1

Re: Bind/PowerDNS interoperatiblity issue

2014-02-19 Thread Aki Tuomi
On Wed, Feb 19, 2014 at 11:50:24AM +, Tony Finch wrote: > Aki Tuomi wrote: > > > > We have A records > > 5.2.0.0.0.1.0.0.0.0.0.0.0.0.0.0.1.0.0.0.1.0.0.0.pasilehto.fi > > and > > 5.2.0.0.0.1.0.0.0.0.0.0.0.0.0.0.1.0.0.0.0.0.0.0.pasilehto.fi > > > > Now. If I ask DNSSEC validating BIND version

Re: Bind/PowerDNS interoperatiblity issue

2014-02-19 Thread Aki Tuomi
On Wed, Feb 19, 2014 at 12:16:19PM +0200, Aki Tuomi wrote: > Hi! > > We are investigating an interoperatibility issue with bind and powerdns. It would appear that PowerDNS is not adding non-terminals with NSEC zones. This causes that 0.pasilehto.fi returns NXDOMAIN instead of NOERROR, causing t

Re: Bind/PowerDNS interoperatiblity issue

2014-02-19 Thread Tony Finch
Aki Tuomi wrote: > > We have A records > 5.2.0.0.0.1.0.0.0.0.0.0.0.0.0.0.1.0.0.0.1.0.0.0.pasilehto.fi > and > 5.2.0.0.0.1.0.0.0.0.0.0.0.0.0.0.1.0.0.0.0.0.0.0.pasilehto.fi > > Now. If I ask DNSSEC validating BIND version 9.9.3-P2 or 9.9.4-P2 to > resolve either of those A records, I get errors, w

Bind/PowerDNS interoperatiblity issue

2014-02-19 Thread Aki Tuomi
Hi! We are investigating an interoperatibility issue with bind and powerdns. Scenario: We have DNSSEC secured domain using NSEC, pasilehto.fi. This domain has two insecure delegations 0.0.0.0.pasilehto.fi and 1.0.0.0.pasilehto.fi We have A records 5.2.0.0.0.1.0.0.0.0.0.0.0.0.0.0.1.0.0.0.1