Re: DNSSEC validation on combined auth+recursive server

2011-01-06 Thread Eivind Olsen
(Resending it here, didn't mean to reply just to you Alan) > On 1/6/2011 3:38 AM, Eivind Olsen wrote: >> (Yes, I know it's best practice to combine the authoritative + recursive >> functionality) > [...] it's NOT best [...] Yep, I knew that. Embarassing of me to miss that slightly important "NOT"

Re: DNSSEC validation on combined auth+recursive server

2011-01-06 Thread Alan Clegg
On 1/6/2011 3:38 AM, Eivind Olsen wrote: > I seem to remember seeing something about DNSSEC validation not working > when a BIND server is used both to serve the DNSSEC signed zone > authoritatively, and as a resolver? Unfortunately, I haven't managed to > find this information again, and now I'm

Re: DNSSEC validation on combined auth+recursive server

2011-01-06 Thread Mark Andrews
match-recursive is your friend. In message , "Eivi nd Olsen" writes: > Hello. > > I seem to remember seeing something about DNSSEC validation not working > when a BIND server is used both to serve the DNSSEC signed zone > authoritatively, and as a resolver? Unfortunately, I haven't manag

Re: DNSSEC validation on combined auth+recursive server

2011-01-06 Thread Marc Lampo
Hello, > I seem to remember seeing something about DNSSEC validation not working > when a BIND server is used both to serve the DNSSEC signed zone > authoritatively, and as a resolver? Unfortunately, I haven't managed to > find this information again, and now I'm wondering if it was all in my > he

DNSSEC validation on combined auth+recursive server

2011-01-06 Thread Eivind Olsen
Hello. I seem to remember seeing something about DNSSEC validation not working when a BIND server is used both to serve the DNSSEC signed zone authoritatively, and as a resolver? Unfortunately, I haven't managed to find this information again, and now I'm wondering if it was all in my head. (Yes,