RE: DNSSEC, whitehouse, isc, and troubleshooting...

2011-04-19 Thread Marc Lampo
ssage- From: Paul Wouters [mailto:p...@xelerance.com] Sent: 18 April 2011 08:35 PM To: John Williams Cc: bind-us...@isc.org Subject: Re: DNSSEC, whitehouse, isc, and troubleshooting... On Mon, 18 Apr 2011, John Williams wrote: > Subject: DNSSEC, whitehouse, isc, and troubleshooting... &g

Re: DNSSEC, whitehouse, isc, and troubleshooting...

2011-04-18 Thread Chris Thompson
On Apr 18 2011, Evan Hunt wrote: On Mon, Apr 18, 2011 at 10:51:04AM -0700, John Williams wrote: From my signed domain when I query www.isc.org (w/ +dnssec) I get the ad flag as expected. I don't see that flag when I query whitehouse.gov (w/ +dnssec) and I know that zone is signed. Is anyone

Re: DNSSEC, whitehouse, isc, and troubleshooting...

2011-04-18 Thread Paul Wouters
On Mon, 18 Apr 2011, John Williams wrote: Subject: DNSSEC, whitehouse, isc, and troubleshooting... From my signed domain when I query www.isc.org (w/ +dnssec) I get the ad flag as expected. I don't see that flag when I query whitehouse.gov (w/ +dnssec) and I know that zone is signed.

Re: DNSSEC, whitehouse, isc, and troubleshooting...

2011-04-18 Thread Casey Deccio
On Mon, Apr 18, 2011 at 11:07 AM, Evan Hunt wrote: > On Mon, Apr 18, 2011 at 10:51:04AM -0700, John Williams wrote: > > From my signed domain when I query www.isc.org (w/ +dnssec) I get the ad > > flag as expected. I don't see that flag when I query whitehouse.gov (w/ > > +dnssec) and I know tha

Re: DNSSEC, whitehouse, isc, and troubleshooting...

2011-04-18 Thread Eivind Olsen
John Williams wrote: > Is anyone else seeing this behavior? Also, is there a link that addresses > troubleshooting or diagnosing DNSSEC based queries? One minor issue: If I query a.gov-servers.net for the nameservers of whitehouse.org, it returns a list of 6. If I query any of these, they give m

Re: DNSSEC, whitehouse, isc, and troubleshooting...

2011-04-18 Thread Evan Hunt
On Mon, Apr 18, 2011 at 10:51:04AM -0700, John Williams wrote: > From my signed domain when I query www.isc.org (w/ +dnssec) I get the ad > flag as expected. I don't see that flag when I query whitehouse.gov (w/ > +dnssec) and I know that zone is signed. > > Is anyone else seeing this behavior?

DNSSEC, whitehouse, isc, and troubleshooting...

2011-04-18 Thread John Williams
>From my signed domain when I query www.isc.org (w/ +dnssec) I get the ad flag >as expected. I don't see that flag when I query whitehouse.gov (w/ +dnssec) >and I know that zone is signed. Is anyone else seeing this behavior? Also, is there a link that addresses troubleshooting or diagnosing