That's good advice Greg, I thought I'd read up some more about that in the
DNSSEC guide within the Admin. Reference Manual -
https://bind9.readthedocs.io/en/v9.18.20/dnssec-guide.html - only it is not
mentioned within that section (dnssec-validation is). It is in the
Configuration Reference -
I really wouldn't recommend that.
If you have to, create exceptions for domains that won't validate correctly
by using the "validate-except {..." statement.
In parallel with that, encourage people with broken domains to fix them,
which makes life better for all of us.
Cheers, Greg
On Tue, 12 Dec
Thanks folks
I just disabled DNSSEC validation from bind config file (globally) and
those domains started resolving fine.
On Tue, Dec 12, 2023, 13:25 Greg Choules <
gregchoules+bindus...@googlemail.com> wrote:
> Hello.
> There are well known and documented issues with the zone "gov.in" and
> th
Hello.
There are well known and documented issues with the zone "gov.in" and there
were some recent problems with "gov" as well.
Please search this mailing list archive for those domains and you may find
some useful hints, tips and information that explain and help you with your
own problem.
Cheer
On 12/11/23 18:47, Blason R wrote:
Oh I forgot to tell you that. This is BIND RPZ and all the queries are
recursive.
Okay, what RPZ configuration do you have? Is it messing with the
queries you're testing in any way?
What configuration do you have for RPZ related to DNSSEC?
Dig output jus
> Subject: Re: How do I debug if the queries are not getting resolved?
>
> Oh I forgot to tell you that. This is BIND RPZ and all the queries are
> recursive.
>
> Dig output just dies out and does not spit anything.
>
> And this specifically i noticed with .gov and .go
Oh I forgot to tell you that. This is BIND RPZ and all the queries are
recursive.
Dig output just dies out and does not spit anything.
And this specifically i noticed with .gov and .gov.in domain. This is the
reason I thing it might be related with DNSSEC.
Also wanted to understand overall how d
Am 11.12.2023 um 23:37:36 Uhr schrieb Blason R:
> I require assistance in troubleshooting the resolution issue for
> specific domains that are not being resolved properly. The version of
> BIND I am currently using is BIND 9.18.20-1.
First, tell us if those queries are authoritative on that serve
Hi Guys,
I require assistance in troubleshooting the resolution issue for specific
domains that are not being resolved properly. The version of BIND I am
currently using is BIND 9.18.20-1.
TIA
Blason R
--
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from
this list
ISC
9 matches
Mail list logo
