Re: Single nameserver doesn't show signed SOA-RRs

2011-06-30 Thread Stefan Foerster
* Mark Andrews : > In message <20110630031511.gn14...@mail.incertum.net>, Stefan Foerster writes: > > * Mark Andrews : > > > Contact the adminstrator of the server and request that they stop > > > disabling dnssec. "dnssec-enable yes;" is the default for all > > > version except 9.3.x. > > > > Ar

RE: Single nameserver doesn't show signed SOA-RRs

2011-06-29 Thread Marc Lampo
also using this ? Kind regards, Marc Lampo Security Officer EURid -Original Message- From: Stefan Foerster [mailto:c...@incertum.net] Sent: 29 June 2011 10:57 PM To: bind-us...@isc.org Subject: Single nameserver doesn't show signed SOA-RRs Hello world, I'm having a proble

Re: Single nameserver doesn't show signed SOA-RRs

2011-06-29 Thread Mark Andrews
In message <20110630031511.gn14...@mail.incertum.net>, Stefan Foerster writes: > * Mark Andrews : > > Contact the adminstrator of the server and request that they stop > > disabling dnssec. "dnssec-enable yes;" is the default for all > > version except 9.3.x. > > Are you sure that 88.198.26.233

Re: Single nameserver doesn't show signed SOA-RRs

2011-06-29 Thread Stefan Foerster
* Mark Andrews : > Contact the adminstrator of the server and request that they stop > disabling dnssec. "dnssec-enable yes;" is the default for all > version except 9.3.x. Are you sure that 88.198.26.233 has DNSSEC disabled? The admin told me he had added "dnssec-enable yes;" to the named.conf f

Re: Single nameserver doesn't show signed SOA-RRs

2011-06-29 Thread Mark Andrews
Contact the adminstrator of the server and request that they stop disabling dnssec. "dnssec-enable yes;" is the default for all version except 9.3.x. % grep dnssec-enable 9.?.x/bin/named/config.c 9.3.x/bin/named/config.c: dnssec-enable no; /* Make yes for 9.4. */ \n\ 9.4.x/bin/named/config

Re: Single nameserver doesn't show signed SOA-RRs

2011-06-29 Thread Zenon Panoussis
On 06/29/2011 10:57 PM, Stefan Foerster wrote: > ...it complains that ns3.wars-nicht.de doesn't have a > signed SOA. It complains that the SOA of wars-nicht.de itself is not signed, or that ns3.wars-nicht.de does not have a signed SOA for billigmail.org and incertum.net? > I already tried incr

Single nameserver doesn't show signed SOA-RRs

2011-06-29 Thread Stefan Foerster
Hello world, I'm having a problem with a single authoritative server that seems to not receive a signed zone. I used www.zonecheck.fr to check the zones incertum.net and billigmail.org and it complains that ns3.wars-nicht.de doesn't have a signed SOA. I already tried increasing the serial for tho