Re: How to get AD flag

2013-08-02 Thread Alan Clegg
On Aug 2, 2013, at 9:19 PM, Alan Clegg wrote: > > On Aug 2, 2013, at 11:35 AM, David Newman wrote: > >> That looks OK, but the forwarder might still be broken (i.e., it might >> strip replies). > > If this were the case and the resolver is correctly configured with a root > anchor then all

Re: How to get AD flag

2013-08-02 Thread Alan Clegg
On Aug 2, 2013, at 11:35 AM, David Newman wrote: > That looks OK, but the forwarder might still be broken (i.e., it might > strip replies). If this were the case and the resolver is correctly configured with a root anchor then all attempted validation (from the root down) would result in SERV

Re: How to get AD flag

2013-08-02 Thread David Newman
On 8/1/13 10:48 PM, rams wrote: > Thanks david, > This the response i get > dig +short rs.dns-oarc.net txt @ > rst.x3827.rs.dns-oarc.net . > rst.x3837.x3827.rs.dns-oarc.net . > rst.x3843.x3837.x3827.r

Re: How to get AD flag

2013-08-02 Thread Stephane Bortzmeyer
On Fri, Aug 02, 2013 at 10:49:22AM +0530, rams wrote a message of 41 lines which said: > I have 9.7 bind installed and configured recursive. When i query > against forwader i am not getting AD flag. Could you please guide me > how to get AD flag. Several possible reasons: 1)

Re: How to get AD flag

2013-08-01 Thread rams
Fri, Aug 2, 2013 at 11:11 AM, David Newman wrote: > On 8/1/13 10:19 PM, rams wrote: > > > I have 9.7 bind installed and configured recursive. When i query > > against forwader i am not getting AD flag but remaining answer is > > correct for signed query. Could you please gui

How to get AD flag

2013-08-01 Thread rams
Hi , I have 9.7 bind installed and configured recursive. When i query against forwader i am not getting AD flag but remaining answer is correct for signed query. Could you please guide me how to get AD flag. Already i have enabled dnssec-validation and dnssec-enabled. Thanks & Regards, Ra