priming and dnskey

2017-08-02 Thread T.Suzuki via Unbound-users
I found a packet requesting dnskey record at priming,in spite of removing "validator" from my config. What is the purpose of this function? I think this function may cause trouble with KSK rollover. -- -- T.Suzuki

Re: NOTIMP for unrecognized qtypes

2017-08-02 Thread Robert Edmonds via Unbound-users
Petr Špaček via Unbound-users wrote: > Well, the spec is from 1987. Even the meaning of MUST/SHOULD etc. was > not standardized yet back then ... Even worse, this language appears to have been copied verbatim from RFC 883, which is even older (1983) :-) -- Robert Edmonds edmo...@debian.org

Re: NOTIMP for unrecognized qtypes

2017-08-02 Thread Petr Špaček via Unbound-users
On 28.7.2017 00:15, Jacob Hoffman-Andrews via Unbound-users wrote: > On 07/27/2017 01:28 PM, Robert Edmonds wrote: >> Jacob Hoffman-Andrews via Unbound-users wrote: >>> I'm trying to write some documentation for users of Let's Encrypt about >>> CAA. I believe it's the case that standards-conformant

Re: Oddity with nsd-based in-addr.arpa zone

2017-08-02 Thread Dave Ulrick via Unbound-users
As I noted earlier, I do have a nsd zone named 168.192.in-addr.arpa, but your comments got me to thinking that perhaps what's missing is some kind of data at the 168.192.in-addr.arpa level. Just now, I edited the zone to add a TXT record at the top. It now looks like this: $TTL 3D @SOA

Re: private ipv6 address space

2017-08-02 Thread Stephane Guedon via Unbound-users
Le mercredi 2 août 2017, 08:46:31 CEST W.C.A. Wijngaards via Unbound-users a écrit : > Hi, > > Also, > local-zone: "2.2.0.0.6.1.0.2.0.0.d.f.ip6.arpa." nodefault > has to be d.f.ip6.arpa nodefault, to disable the default zone that is > upwards from your private zone. > > Best regards, Wouter > >