On 2024-04-26 16:45, Josh Kuo wrote:
In this particular case, isn't the resolver attempting to do a reverse lookup of the IP address that's listed ?You are right, I missed that this is a reverse-mapping zone. In that case, run DNSSEC analyzer on the domain "180.96.34.in-addr.arpa" and you'll see the problem. Reverse-mapping zones work the same as forward-mapping zones, they also need to be delegated properly. If you prefer a more visual output, try DNSViz: https://dnsviz.net/d/180.96.34.in-addr.arpa/dnssec/ <https://dnsviz.net/d/180.96.34.in-addr.arpa/dnssec/>
Hi Josh, Ok, sounds good! - J -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
