I really wouldn't recommend that.
If you have to, create exceptions for domains that won't validate correctly
by using the "validate-except {..." statement.
In parallel with that, encourage people with broken domains to fix them,
which makes life better for all of us.Cheers, Greg On Tue, 12 Dec 2023 at 17:42, Blason R <[email protected]> wrote: > Thanks folks > > I just disabled DNSSEC validation from bind config file (globally) and > those domains started resolving fine. > > > On Tue, Dec 12, 2023, 13:25 Greg Choules < > [email protected]> wrote: > >> Hello. >> There are well known and documented issues with the zone "gov.in" and >> there were some recent problems with "gov" as well. >> Please search this mailing list archive for those domains and you may >> find some useful hints, tips and information that explain and help you with >> your own problem. >> >> Cheers, Greg >> >> On Tue, 12 Dec 2023 at 00:48, Blason R <[email protected]> wrote: >> >>> Oh I forgot to tell you that. This is BIND RPZ and all the queries are >>> recursive. >>> >>> Dig output just dies out and does not spit anything. >>> >>> And this specifically i noticed with .gov and .gov.in domain. This is >>> the reason I thing it might be related with DNSSEC. >>> >>> Also wanted to understand overall how do I debug any queries. >>> >>> On Tue, Dec 12, 2023, 00:28 Marco Moock <[email protected]> wrote: >>> >>>> Am 11.12.2023 um 23:37:36 Uhr schrieb Blason R: >>>> >>>> > I require assistance in troubleshooting the resolution issue for >>>> > specific domains that are not being resolved properly. The version of >>>> > BIND I am currently using is BIND 9.18.20-1. >>>> >>>> First, tell us if those queries are authoritative on that server or not. >>>> >>>> Try using dig and post the output here. >>>> -- >>>> Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe >>>> from this list >>>> >>>> ISC funds the development of this software with paid support >>>> subscriptions. Contact us at https://www.isc.org/contact/ for more >>>> information. >>>> >>>> >>>> bind-users mailing list >>>> [email protected] >>>> https://lists.isc.org/mailman/listinfo/bind-users >>>> >>> -- >>> Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe >>> from this list >>> >>> ISC funds the development of this software with paid support >>> subscriptions. Contact us at https://www.isc.org/contact/ for more >>> information. >>> >>> >>> bind-users mailing list >>> [email protected] >>> https://lists.isc.org/mailman/listinfo/bind-users >>> >>
-- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list [email protected] https://lists.isc.org/mailman/listinfo/bind-users
