Hi List,

We are running recursor 4.1.1. We are having a problem with a domain that is 
signed with bogus dnssec records, the domain is cape-epic.com. We have tried 
the different dnssec modes but only process-no-validate allows the domain to be 
resolved. We tried adding an nta for the domain but the domain still would not 
resolve.

Does anyone have any suggestions how we can accommodate and still resolve bogus 
domains but still offer dnssec validation?

Answer to cape-epic.com|A for 41.77.x.y:36426 validates as Bogus

Best Regards,

Greg

[cid:[email protected]]SMART TECHNOLOGY CENTRE (PTY) LTD
+27.87.310.1751 / Tel
[email protected]
Block 10, Townsend Office Park
1 Townsend Road, Bedfordview, 2008
www.stc.za.com
LEVEL-TWO B-BBEE contributor

_______________________________________________
Pdns-users mailing list
[email protected]
https://mailman.powerdns.com/mailman/listinfo/pdns-users

Reply via email to