-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi,
On 11/26/2010 06:49 PM, [email protected] wrote: > Zitat von FRLinux <[email protected]>: >> Thanks, i have set this one to no, but still fails on a normal query >> but works if I add +cdflag. Am I missing anything else? (my >> configuration is the one i pasted on the first mail, with the change >> you asked for, to set harden-referral-path: no). > > We use unbound 1.4.7 and it has no problem to resolv > > Fact is if it resolv with +cdflag (checking disable) there is something > wrong with DNSSEC or someone is screwing the result records. If you set val-log-level: 2 in the config file, it will report *why* the DNSSEC failure is happening. It gives a single line with an error for every query-name that fails DNSSEC. Best regards, Wouter -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/ iEYEARECAAYFAkzw7FoACgkQkDLqNwOhpPi1vQCfeIPLYX/iTt7/X28KJRFzQSRd oT0AnjRHUOW0R/BtjbxM4RMFMAbm6VG3 =33vW -----END PGP SIGNATURE----- _______________________________________________ Unbound-users mailing list [email protected] http://unbound.nlnetlabs.nl/mailman/listinfo/unbound-users
