RE: Dnssec and ptr records

2011-10-18 Thread Eric J Esslinger
> -Original Message- > From: John Curran [mailto:jcur...@arin.net] > Sent: Tuesday, October 18, 2011 11:56 AM > To: Eric J Esslinger > Cc: nanog@nanog.org Operators' Group > Subject: Re: Dnssec and ptr records > > > (Presuming, of course, that you've g

Re: Dnssec and ptr records

2011-10-18 Thread John Curran
(Presuming, of course, that you've got an ARIN assignment or allocation. If you're in a provider-assigned block, you'll need to chat with your ISP about the DS linkage for your PTR zones... /John ) On Oct 18, 2011, at 12:31 PM, John Curran wrote: > On Oct 18, 2011, at 10:21 AM, Eric J Esslinger

Re: Dnssec and ptr records

2011-10-18 Thread John Curran
On Oct 18, 2011, at 10:21 AM, Eric J Esslinger wrote: > Well it makes sense we should, just that all the examples, discussion, and > such I've read dealt with forward records. > > I guess I get to dig some more. Thanks. Eric - Your in-addr zone first needs to be signed and then the DS record

Re: Dnssec and ptr records

2011-10-18 Thread Edward Lewis
At 9:13 -0500 10/18/11, Eric J Esslinger wrote: Are we supposed to setup signing for reverse dns zones? To the DNS, a zone is a zone. The terms "forward" and "reverse" as zone adjectives were invented by humans. ;) The high-level view of signing the "reverse zones" is the same as for "for

Re: Dnssec and ptr records

2011-10-18 Thread bmanning
On Tue, Oct 18, 2011 at 09:13:54AM -0500, Eric J Esslinger wrote: > Quick question for those who have researched things more closely. I have > signed all my forward zones and think I've crossed my I's and dotted my T's, > but one thing I'm not sure of... > > Are we supposed to setup signing for

RE: Dnssec and ptr records

2011-10-18 Thread Eric J Esslinger
> -Original Message- > From: Phil Regnauld [mailto:regna...@nsrc.org] > Sent: Tuesday, October 18, 2011 9:18 AM > To: Eric J Esslinger > Cc: 'nanog@nanog.org' > Subject: Re: Dnssec and ptr records > > > Eric J Esslinger (eesslinger) writes: > > Q

Re: Dnssec and ptr records

2011-10-18 Thread Phil Regnauld
Eric J Esslinger (eesslinger) writes: > Quick question for those who have researched things more closely. I have > signed all my forward zones and think I've crossed my I's and dotted my T's, > but one thing I'm not sure of... > > Are we supposed to setup signing for reverse dns zones?

Re: Dnssec and ptr records

2011-10-18 Thread Randy Bush
> Are we supposed to setup signing for reverse dns zones? yes