Re: broken trust chain for non-existing AAAA records

2010-12-01 Thread lst_hoe02
Zitat von Mark Andrews ma...@isc.org: Is this still with BIND 9.7.0-P1 or something more recent? If it is still BIND 9.7.0-P1 then please upgrade. There really is no point debugging validation failures in BIND 9.7.0-P1 anymore as the validator has had really extensive changes since then.

Re: broken trust chain for non-existing AAAA records

2010-11-29 Thread Mark Andrews
which indicates that named thinks the answer is secure. This is working, no problem but i still get broken trust chain for some non existing records like for example this one: ; DiG 9.7.0-P1 +dnssec mail.cdu-freiburg.de ; (1 server found) ;; global options: +cmd ;; Got answer

Re: broken trust chain for non-existing AAAA records

2010-11-29 Thread lst_hoe02
Zitat von Mark Andrews ma...@isc.org: Is this still with BIND 9.7.0-P1 or something more recent? If it is still BIND 9.7.0-P1 then please upgrade. There really is no point debugging validation failures in BIND 9.7.0-P1 anymore as the validator has had really extensive changes since then.

Re: broken trust chain for non-existing AAAA records

2010-11-19 Thread lst_hoe02
Zitat von Mark Andrews ma...@isc.org: In message 20101118131400.37717e5p5tard...@webmail.kwsoft.de, lst_ho...@kwsof t.de writes: We are using Bind 9.7 at the border to resolve DNS queries for a small LAN. After moving forward in using IPv6 we discovered many broken trust chain errors in

broken trust chain for non-existing AAAA records

2010-11-18 Thread lst_hoe02
We are using Bind 9.7 at the border to resolve DNS queries for a small LAN. After moving forward in using IPv6 we discovered many broken trust chain errors in the bind log for non existing records. One example is Nov 18 01:18:21 firewall named[27580]: error (broken trust chain)