Re: Help with dig to check NS servers for DNSSEC setup

2011-11-15 Thread Sam Wilson
In article , Mark Andrews wrote: > In message , Sam > Wilson writes: > > In article , > > Eduardo Bonsi wrote: > > > > > I am checking my DNS setup from inside using dig and I am getting > > > everything ok but I need a second opinion from outside of the server to > > > see if my ns1 and n

Re: Help with dig to check NS servers for DNSSEC setup

2011-11-15 Thread Mark Andrews
In message , Sam Wilson writes: > In article , > Eduardo Bonsi wrote: > > > I am checking my DNS setup from inside using dig and I am getting > > everything ok but I need a second opinion from outside of the server to > > see if my ns1 and ns2 are responding ok to setup DNSSEC. > > Looks li

Re: Help with dig to check NS servers for DNSSEC setup

2011-11-15 Thread Sam Wilson
In article , Eduardo Bonsi wrote: > I am checking my DNS setup from inside using dig and I am getting > everything ok but I need a second opinion from outside of the server to > see if my ns1 and ns2 are responding ok to setup DNSSEC. Looks like you haven't put in any glue records for nsX.bon

Re: Help with dig to check NS servers for DNSSEC setup

2011-11-14 Thread Eduardo Bonsi
soa ; (1 server found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: REFUSED, id: 986 ;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0 ;; WARNING: recursion requested but not available ;; QUESTION SECTION: ;ns1.bonsi.org.

Re: Help with dig to check NS servers for DNSSEC setup

2011-11-14 Thread Barry Margolin
> > ;; Got answer: > > ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 1462 > > ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0 > > > > ;; QUESTION SECTION: > > ;bonsi.org. IN A > > > > ;;

Re: Help with dig to check NS servers for DNSSEC setup

2011-11-14 Thread Eduardo Bonsi
L: 0 ;; WARNING: recursion requested but not available ;; QUESTION SECTION: ;ns1.bonsi.org. IN SOA ;; Query time: 75 msec ;; SERVER: 63.200.45.18#53(63.200.45.18) ;; WHEN: Mon Nov 14 14:42:25 2011 ;; MSG SIZE rcvd: 31 # -Original Message- From: bind-users-bounces+l

Re: Help with dig to check NS servers for DNSSEC setup

2011-11-14 Thread Stephane Bortzmeyer
On Mon, Nov 14, 2011 at 12:38:44PM -0800, Eduardo Bonsi wrote a message of 123 lines which said: > if my ns1 and ns2 are responding ok to setup DNSSEC. ... > user:~ user1$ dig bonsi.org dig, by default, does not request DNSSEC data. If you want to test with DNSSEC, add "+dnssec" to the comman

RE: Help with dig to check NS servers for DNSSEC setup

2011-11-14 Thread lst_hoe02
Zitat von "Adamiec, Lawrence" : Here are some results using the same commands you used. # dig @63.200.45.18 ns1.bonsi.org soa ; <<>> DiG 9.6.1-P3 <<>> @63.200.45.18 ns1.bonsi.org soa ; (1 server found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: REFUSED, id: 9

RE: Help with dig to check NS servers for DNSSEC setup

2011-11-14 Thread Adamiec, Lawrence
kentlaw@lists.isc.org] On Behalf Of Eduardo Bonsi > Sent: Monday, November 14, 2011 14:39 > To: bind-us...@isc.org > Subject: Help with dig to check NS servers for DNSSEC setup > > I am checking my DNS setup from inside using dig and I am getting > everything ok but I need a sec

Help with dig to check NS servers for DNSSEC setup

2011-11-14 Thread Eduardo Bonsi
I am checking my DNS setup from inside using dig and I am getting everything ok but I need a second opinion from outside of the server to see if my ns1 and ns2 are responding ok to setup DNSSEC. Thanks! user:~ user1$ dig bonsi.org ; <<>> DiG 9.6-ESV-R4-P3 <<>> bonsi.org ;; global options: +cm