Forward zone giving SERVFAIL

2013-11-27 Thread Neil Aggarwal
Hello: I set up a forward zone in the internal view of my named.conf: view internal { match-clients { 127.0.0.1; }; recursion yes; allow-query-cache { any; }; zone "dnsbl" { type forward; forwarders {

Re: DLV and the ad flag

2013-11-27 Thread Thomas Schulz
> On Wed, Nov 27, 2013 at 01:30:37PM -0500, Thomas Schulz wrote: > > Acording to the book Dnssec Mastery, I should be able to test if my > > Bind is correctly set up to use the DLV with the command: > > > > dig +dnssec nsec3.dlvtest.dns-orac.net > > "dns-oarc", not "dns-orac". (OARC: Operations,

Re: DLV and the ad flag

2013-11-27 Thread Evan Hunt
On Wed, Nov 27, 2013 at 01:30:37PM -0500, Thomas Schulz wrote: > Acording to the book Dnssec Mastery, I should be able to test if my > Bind is correctly set up to use the DLV with the command: > > dig +dnssec nsec3.dlvtest.dns-orac.net "dns-oarc", not "dns-orac". (OARC: Operations, Analysis and

DLV and the ad flag

2013-11-27 Thread Thomas Schulz
Acording to the book Dnssec Mastery, I should be able to test if my Bind is correctly set up to use the DLV with the command: dig +dnssec nsec3.dlvtest.dns-orac.net And I should expect expect to see the RRSIG records and see the AD flag set. I do get the RRSIG records but I do not see the AD flag