On Wed, Jul 02, 2014 at 06:29:22AM -0400, Mohamed Lrhazi <[email protected]> wrote a message of 82 lines which said:
> Some DNS > servers, notably Google's, return SERVFAIL, When using a validating resolver, like Google's, always test *also* with +cd (Checking Disabled). If it works with +cd and servfails without, you can be pretty sure it is a DNSSEC problem (see Mark Andrews' analysis). > This dns report says the NS records do not have A records... but they do in > my zone data. > > http://www.dnssy.com/report.php?q=gu.edu A poor tool, specially because it reacts badly when there are IPv6 addresses. For better tools, see the article in <http://www.bortzmeyer.org/tests-dns.html> (updates and comments welcome). _______________________________________________ dns-operations mailing list [email protected] https://lists.dns-oarc.net/mailman/listinfo/dns-operations dns-jobs mailing list https://lists.dns-oarc.net/mailman/listinfo/dns-jobs
