Re: Reasonable setup of a dnssec aware recursive resolver

In message <1269885784.31597.68.ca...@mjenet.posix.co.za>, Mark Elkins writes: > On Mon, 2010-03-29 at 11:17 +0200, Mark Elkins wrote: > > I'm trying to come up with an interim solution for my ISP's DNS > > Recursive Resolver that is DNSSEC aware. > >=20 > > My thoughts so far:- > > Use BIND 9.6.1

Re: Reasonable setup of a dnssec aware recursive resolver

On Mon, 2010-03-29 at 11:17 +0200, Mark Elkins wrote: > I'm trying to come up with an interim solution for my ISP's DNS > Recursive Resolver that is DNSSEC aware. > > My thoughts so far:- > Use BIND 9.6.1-P3 (this is the latest version named that Gentoo Linux > gives me). Ouch! - bitten by the si

Reasonable setup of a dnssec aware recursive resolver

I'm trying to come up with an interim solution for my ISP's DNS Recursive Resolver that is DNSSEC aware. My thoughts so far:- Use BIND 9.6.1-P3 (this is the latest version named that Gentoo Linux gives me). In order to fetch both iTAR and DLV signatures - use a patched version of WGET that is dnss