On Mon, Mar 04, 2013 at 01:22:39PM -0600, Blake Hudson wrote: > I still am unsure if it's valid to ask for a PTR record and receive > a CNAME in return. If it is, I assume that CNAME needs to lead to a > valid PTR record at some point.
The way it works: when you query for any type and get a CNAME, the resolver (dig in this case) looks up that type record for the CNAME target. > Thanks for pointing out the DNSSEC error. I was focusing on the > unusual PTR setup (in my experience) and didn't even consider > DNSSEC. Looks like Sprint has a DNS issue to resolve. Yes, this would all be fine if the DNSSEC was right, or with the "workaround" as proposed upthread, to disable DNSSEC checking in your named. (I would not recommend that, but indeed, it's a possible way to shift the error from Sprint to yourself.) -- http://rob0.nodns4.us/ -- system administration and consulting Offlist GMX mail is seen only if "/dev/rob0" is in the Subject:
