subject:"Test DNSSEC validation"

Re: Test DNSSEC validation

2012-04-18 Thread Jan-Piet Mens

What is the best way to log DNSSEC failures in Bind without enforcing DNSSEC validation? That is I want to see what Bind would have rejected because of failed DNSSEC validation, but I do not want to return SERVFAIL to my client. I don't think that is possible without modifying the client(s)

Test DNSSEC validation

2012-04-16 Thread Augie Schwer

What is the best way to log DNSSEC failures in Bind without enforcing DNSSEC validation? That is I want to see what Bind would have rejected because of failed DNSSEC validation, but I do not want to return SERVFAIL to my client. -- Augie Schwer - au...@schwer.us - http://schwer.us