I have these in named.conf dnssec-enable yes; dnssec-validation yes; // dnssec-lookaside "." trust-anchor "DLV.ISC.ORG"; With the trust-anchor uncommented, as soon as i enable and reload bind, dig gives timeout, while dig has no issues with first two commands enabled.
-dani On Thu, May 20, 2010 at 8:53 AM, <valdis.kletni...@vt.edu> wrote: > On Thu, 20 May 2010 08:33:47 PDT, itservices88 said: > > I am having this problem now: > > > > # dnssec-signzone -N INCREMENT mydomain.org > > Verifying the zone using the following algorithms: RSASHA1. > > Missing RSASHA1 signature for . NSEC > > Missing trust anchor? > >