On Thu, Jan 20, 2022 at 09:51:51AM +0330, Hamed Haghshenas via Pdns-users wrote:
> >> How can I secure my dns Recursor? I try read document about dnssec in > powerdns wiki but can't understand what should I do ? > > >> <https://doc.powerdns.com/recursor/dnssec.html> > https://doc.powerdns.com/recursor/dnssec.html > > > In short: > > > dnssec=validat > > > > I set dnssec=validate, but one error exist (Invalid signature: connected) > > > > ################################# > > Your dns security: > > DNSSEC (FAIL) > > * Valid signature: connected > * Invalid signature: connected > * Expired signature: not connected > * Missing signature: not connected > > > > Best Regards, This is interesting. AFAKS, the query used for this test is dig badsig.go.dnscheck.tools TXT According to the website, it should not validate. I will investigate. -Otto _______________________________________________ Pdns-users mailing list Pdns-users@mailman.powerdns.com https://mailman.powerdns.com/mailman/listinfo/pdns-users
