Re: disable dnssec in bind resolver

2010-06-05 Thread Mark Andrews
In message <201006060107.o5617ep4091...@drugs.dv.isc.org>, Mark Andrews writes: > > In message <4c0aad2a.4010...@dougbarton.us>, Doug Barton writes: > > On 06/05/10 07:22, Mark Andrews wrote: > > > In message<4c09c562.7030...@dougbarton.us>, Doug Barton writes: > > > > > > The resolver works. It

Re: disable dnssec in bind resolver

2010-06-05 Thread Mark Andrews
In message <4c0aad2a.4010...@dougbarton.us>, Doug Barton writes: > On 06/05/10 07:22, Mark Andrews wrote: > > In message<4c09c562.7030...@dougbarton.us>, Doug Barton writes: > > > > The resolver works. It figures out that it can't make the new style > > queries and falls back to the old style que

Re: disable dnssec in bind resolver

2010-06-05 Thread Doug Barton
On 06/05/10 07:22, Mark Andrews wrote: In message<4c09c562.7030...@dougbarton.us>, Doug Barton writes: The resolver works. It figures out that it can't make the new style queries and falls back to the old style queries. If the user is really worried they can turn off EDNS and with that DO. T

Re: disable dnssec in bind resolver

2010-06-05 Thread Doug Barton
On 06/04/10 21:58, Paul Vixie wrote: Doug Barton writes: With my business hat on though I can see at least 2 possible use cases for DO=0. The first being related to this thread, "I can't/won't fix/remove the firewall today, I just want my resolver to work." it works. it's just slower because

Re: disable dnssec in bind resolver

2010-06-05 Thread Joe Baptista
On Fri, Jun 4, 2010 at 11:32 PM, Doug Barton wrote: > > > With my business hat on though I can see at least 2 possible use cases for > DO=0. The first being related to this thread, "I can't/won't fix/remove the > firewall today, I just want my resolver to work." The hapless user in that > spot is

Re: About NAT-PT

2010-06-05 Thread moto kawasaki
Hi, I guess totd shall help you. quote from FreeBSD Ports dns/totd: Totd is a small DNS proxy nameserver that supports IPv6 only hosts/networks that communicate with the IPv4 world using some translation mechanism. Examples of such translation mechanisms currently in use are:

Re: disable dnssec in bind resolver

2010-06-05 Thread Mark Andrews
In message <4c09c562.7030...@dougbarton.us>, Doug Barton writes: > > Ok, so my guess as to ISC's motivations was pretty much on the mark, and > speaking with my "Guy who loves the Internet and wants to see things > work better for everybody" hat on, I am totally in agreement. That's why > I sa