On Sun, Feb 18, 2024 at 01:35:04AM -0800, Bill MacAllister wrote: > On 2024-02-17 23:30, Otto Moerbeek wrote: > > On Sat, Feb 17, 2024 at 06:07:16PM -0800, Bill MacAllister wrote: > > > > > Okay, I set "dnssec=off" and look ups are working now. Guess I > > > need to educate myself about dnssec. I would like to make the > > > dnssec default work if I can. Pointers welcomed. > > > > > > Bill > > > > Looking at the trace your upstream mangles DNS. DNSSEC was designed to > > prtotect against that. > > Hmmm, is this a problem with my list of root servers? Or maybe a > protocol aware router/firewall is "helping" and breaking the dialogue? > The problem might be in the Comcast hardware that was just replaced. > I'll check that out in the morning. >
Your root hints are probably fine, it's a box somewhere that is doing stuff to your DNS request/replies. -Otto _______________________________________________ Pdns-users mailing list Pdns-users@mailman.powerdns.com https://mailman.powerdns.com/mailman/listinfo/pdns-users