In article <[email protected]>, Mark Andrews <[email protected]> wrote:
> In message <[email protected]>, Sam > Wilson writes: > > In article <[email protected]>, > > Eduardo Bonsi <[email protected]> wrote: > > > > > I am checking my DNS setup from inside using dig and I am getting > > > everything ok but I need a second opinion from outside of the server to > > > see if my ns1 and ns2 are responding ok to setup DNSSEC. > > > > Looks like you haven't put in any glue records for nsX.bonsi.org. > > The glue exists. The lookup of the address records fails the servers > at 63.200.45.18 and 63.200.45.19 return refused. Ah, OK. I hadn't clocked that the last part of the dig: > > bonsi.org. 86400 IN NS ns2.bonsi.org. > > bonsi.org. 86400 IN NS ns1.bonsi.org. > > ;; Received 95 bytes from 199.19.54.1#53(b0.org.afilias-nst.org) in 230 > > ms > > > > dig: couldn't get address for 'ns2.bonsi.org': not found ... was a failure of the local resolver to find an authoritative A record for one of the NSs rather than a failure of b0.org.afilias-nst.org to provide glue. Thanks. Sam _______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list [email protected] https://lists.isc.org/mailman/listinfo/bind-users
