Re: error (broken trust chain) resolving

2010-11-02 Thread Casey Deccio
On Tue, Nov 2, 2010 at 10:21 AM, Brian J. Murrell wrote: > Alan Clegg isc.org> writes: >> >> On 11/2/2010 8:11 AM, Brian J. Murrell wrote: >> > >> > named error (broken trust chain) resolving '133.168.163.66.sa- >> > trusted.bondedsender.org/TXT/IN': 173.45.100.146#53 > >> There isn't a chain of

Re: error (broken trust chain) resolving

2010-11-02 Thread Brian J . Murrell
Alan Clegg isc.org> writes: > > On 11/2/2010 8:11 AM, Brian J. Murrell wrote: > > > > named error (broken trust chain) resolving '133.168.163.66.sa- > > trusted.bondedsender.org/TXT/IN': 173.45.100.146#53 > There isn't a chain of signed DS records that lead from a trust anchor > to the thing t

Re: error (broken trust chain) resolving

2010-11-02 Thread Alan Clegg
On 11/2/2010 8:36 AM, Brian J. Murrell wrote: > Alan Clegg isc.org> writes: >> > > Hi Alan, > >> There isn't a chain of signed DS records that lead from a trust anchor >> to the thing that you are trying to resolve. > > I guess I'm going to have to learn a bit more about DNSSEC in order to pars

Re: error (broken trust chain) resolving

2010-11-02 Thread Brian J . Murrell
Alan Clegg isc.org> writes: > Hi Alan, > There isn't a chain of signed DS records that lead from a trust anchor > to the thing that you are trying to resolve. I guess I'm going to have to learn a bit more about DNSSEC in order to parse that. :-) Are there any good tutorials on the mechanics

Re: error (broken trust chain) resolving

2010-11-02 Thread Alan Clegg
On 11/2/2010 8:11 AM, Brian J. Murrell wrote: > Since enabling DNSSEC on my resolving server I have been seeing various > instances of the following sort of messages: > > named error (broken trust chain) resolving '133.168.163.66.sa- > trusted.bondedsender.org/TXT/IN': 173.45.100.146#53 [..] > '1

error (broken trust chain) resolving

2010-11-02 Thread Brian J . Murrell
Since enabling DNSSEC on my resolving server I have been seeing various instances of the following sort of messages: named error (broken trust chain) resolving '133.168.163.66.sa- trusted.bondedsender.org/TXT/IN': 173.45.100.146#53 named error (broken trust chain) resolving '173.65.147.69.bb.bar

Re: non-improving referral

2010-11-02 Thread Leo Baltus
Op 28/10/2010 om 09:16:33 +0200, schreef Leo Baltus: > Op 28/10/2010 om 13:38:13 +1100, schreef Mark Andrews: > > In message <20101026161348.gj2...@omroep.nl>, Leo Baltus writes: > > > We are in the process of migrating from bind-9.4-ESV-R2 to bind-9.7.2-P2. > > > > > > We have our authoritative s