Re: tcp versus udp

2009-05-06 Thread Mark Elkins
On Wed, 2009-05-06 at 07:59 +0200, Stephane Bortzmeyer wrote: On Wed, May 06, 2009 at 12:00:12AM -0400, Danny Mayer ma...@gis.net wrote a message of 39 lines which said: That's nonsense. That's Peter Dambier. If you try to fix every mistake he makes, you're not over soon... Some

Re: [DNSSEC] SERVFAIL when resolving .gov through DLV

2009-05-06 Thread Mark Elkins
On Tue, 2009-05-05 at 13:45 -0500, Jeremy C. Reed wrote: On Tue, 5 May 2009, Stephane Bortzmeyer wrote: This is a BIND 9.5.1-P1, Debian package. It is configured to use ISC's DLV: https://www.isc.org/node/437 Question on using trusted-keys: There are two public sources of trusted-keys

Re: [DNSSEC] SERVFAIL when resolving .gov through DLV

2009-05-05 Thread Mark Elkins
Does work with bind 9.6.0 - as NSEC3 is available... ; DiG 9.6.0-P1 +dnssec @127.0.0.1 SOA gov. ; (1 server found) ;; global options: +cmd ;; Got answer: ;; -HEADER- opcode: QUERY, status: NOERROR, id: 41388 ;; flags: qr rd ra ad; QUERY: 1, ANSWER: 2, AUTHORITY: 8, ADDITIONAL: 1 ;; OPT

Using TCP for checking

2009-04-07 Thread Mark Elkins
I'm involved in the CO.ZA Registry. In the process of registering a domain name in the co.za zone - we do a bunch of DNS checks using 'dig'. for each nameserver, a) check that the zone exists (fetch the SOA), b) fetch the NS RRSet count and compare entries. c) if Nameserver inside the

<    1   2