Re: Test DNSSEC validation

2012-04-18 Thread Jan-Piet Mens
> What is the best way to log DNSSEC failures in Bind without enforcing > DNSSEC validation? > > That is I want to see what Bind would have rejected because of failed > DNSSEC validation, but I do not want to return SERVFAIL to my client. I don't think that is possible without modifying the clien

Test DNSSEC validation

2012-04-16 Thread Augie Schwer
What is the best way to log DNSSEC failures in Bind without enforcing DNSSEC validation? That is I want to see what Bind would have rejected because of failed DNSSEC validation, but I do not want to return SERVFAIL to my client. -- Augie Schwer    -    au...@schwer.us    -    http://schwer.us _