> thanks for all the help, I finally got it working. My named wasn't
> capable using tsig with edns in the default view.
> Adding the following in the default view made it work:
>
> server 127.0.0.1 {
>       keys { opendnssec-out; };
>       edns no;
> };
>
> Regards
> Uli

Oh, this is trying to mix "modern BIND" with OpenDNSSEC?

This could then be an instance related to

  https://issues.opendnssec.org/browse/SUPPORT-242

which is OpenDNSSEC which fails to skip over the cookie option
newer BIND now sends.

Regards,

- Håvard
_______________________________________________
Opendnssec-user mailing list
[email protected]
https://lists.opendnssec.org/mailman/listinfo/opendnssec-user

Reply via email to