Re: problem for validate the script dnssec to isc dlv

2011-03-26 Thread Mark Andrews
Mark Andrews writes: > > In message <1301008426.12273.115.camel@localhost.localdomain>, "fakessh @" wr > ites: > > it is 6 months since I used no worries dlv > > What keys do you have recorded with dlv.isc.org? > Do they match what you currently have in the zone? You did not answer these questi

Re: Need help to know about ROOT DNS query

2011-03-26 Thread Joseph S D Yao
On Thu, Mar 17, 2011 at 07:50:41PM +0530, babu dheen wrote: ... > Can anyone let me know whether company Internal DNS server should respond to > ROOT DNS query. When i execute # dig . NS @my-company-name-server query  I am > getting complete response >   >  Let me know whether enabling ROOT DNS q

Re: Best ipfw Rules for DNS-SEC

2011-03-26 Thread Joseph S D Yao
On Tue, Mar 15, 2011 at 01:08:57PM -0500, Martin McCormick wrote: > Is there a recommended set of firewall rules that insure that all > necessary DNS traffic can enter and leave, even the larger > packets that result from dns-sec? > > We want port 53 traffic from anywhere, in this case and >

Error in bind manpage?

2011-03-26 Thread Torinthiel
I've noticed a probable error in dnssec-signzone's man page. Description for option -T says that "the default is the minimum TTL value from the zone's SOA record". But my tests show, that the default is the TTL of the SOA itself. Which by the way makes much more sense, as minimum/negative TTL is u

Re: gid expected error

2011-03-26 Thread Torinthiel
On 03/26/11 07:01, Tim Dunphy wrote: > hello, > > a file was apparently modified in our setup and now bind9 refuses to > start. This is the error message we receive > > [root@LBSD2:/etc/namedb/master] #/etc/rc.d/named start > dev changed > gid expected 10 found 0 modified Guessing by th