[dns-operations] Verifying that a recursor is performing DNSSec validation

2015-07-13 Thread Frank Bulk
Is there an existing tool, ideally a NAGIOS-friendly one, that performs a
check against a resolver that it gets an AD back on DNSSec query for a zone
that is properly signed, failure for one that is not properly signed, and
nothing for one that isn't signed?
http://docs.menandmice.com/display/MM/How+to+test+DNSSEC+validation

I'd rather not re-invent the wheel if it already exists.

Regards,

Frank Bulk


___
dns-operations mailing list
dns-operations@lists.dns-oarc.net
https://lists.dns-oarc.net/mailman/listinfo/dns-operations
dns-jobs mailing list
https://lists.dns-oarc.net/mailman/listinfo/dns-jobs


Re: [dns-operations] The root zone at past 1000.

2015-07-13 Thread Warren Kumari
On Mon, Jul 13, 2015 at 3:43 PM, Stephane Bortzmeyer bortzme...@nic.fr wrote:
 On Mon, Jul 13, 2015 at 01:01:36PM +,
  Shane Kerr sh...@time-travellers.org wrote
  a message of 23 lines which said:

 I look forward to reviewing the next DITL captures and seeing how
 much this has improved the lives of everyday Internet users! ;)

 I feel much better now that we have .pizza, .black and .cafe.

You see, Shane. It *has* made Internet users' lives better -- without
this how would Stephane ever have been able to find pizza and
coffee...

W


 ___
 dns-operations mailing list
 dns-operations@lists.dns-oarc.net
 https://lists.dns-oarc.net/mailman/listinfo/dns-operations
 dns-jobs mailing list
 https://lists.dns-oarc.net/mailman/listinfo/dns-jobs



-- 
I don't think the execution is relevant when it was obviously a bad
idea in the first place.
This is like putting rabid weasels in your pants, and later expressing
regret at having chosen those particular rabid weasels and that pair
of pants.
   ---maf
___
dns-operations mailing list
dns-operations@lists.dns-oarc.net
https://lists.dns-oarc.net/mailman/listinfo/dns-operations
dns-jobs mailing list
https://lists.dns-oarc.net/mailman/listinfo/dns-jobs


Re: [dns-operations] The root zone at past 1000.

2015-07-13 Thread Shane Kerr
William,

On Wed, 8 Jul 2015 14:07:20 -0400 (EDT)
William Sotomayor w...@ottix.net wrote:

 
 Well we've had December 2012 come and go, and now we're at 1003 entries
 in the root zone.  I think we're all still here and the Internet seems
 functional for various definitions of 'functional'.

I look forward to reviewing the next DITL captures and seeing how much
this has improved the lives of everyday Internet users! ;)

Cheers,

--
Shane
___
dns-operations mailing list
dns-operations@lists.dns-oarc.net
https://lists.dns-oarc.net/mailman/listinfo/dns-operations
dns-jobs mailing list
https://lists.dns-oarc.net/mailman/listinfo/dns-jobs


Re: [dns-operations] The root zone at past 1000.

2015-07-13 Thread Warren Kumari
On Mon, Jul 13, 2015 at 3:01 PM, Shane Kerr sh...@time-travellers.org wrote:
 William,

 On Wed, 8 Jul 2015 14:07:20 -0400 (EDT)
 William Sotomayor w...@ottix.net wrote:


 Well we've had December 2012 come and go, and now we're at 1003 entries
 in the root zone.  I think we're all still here and the Internet seems
 functional for various definitions of 'functional'.

 I look forward to reviewing the next DITL captures and seeing how much
 this has improved the lives of everyday Internet users! ;)

What, you have doubts? Heresy.

W



 Cheers,

 --
 Shane
 ___
 dns-operations mailing list
 dns-operations@lists.dns-oarc.net
 https://lists.dns-oarc.net/mailman/listinfo/dns-operations
 dns-jobs mailing list
 https://lists.dns-oarc.net/mailman/listinfo/dns-jobs



-- 
I don't think the execution is relevant when it was obviously a bad
idea in the first place.
This is like putting rabid weasels in your pants, and later expressing
regret at having chosen those particular rabid weasels and that pair
of pants.
   ---maf
___
dns-operations mailing list
dns-operations@lists.dns-oarc.net
https://lists.dns-oarc.net/mailman/listinfo/dns-operations
dns-jobs mailing list
https://lists.dns-oarc.net/mailman/listinfo/dns-jobs


Re: [dns-operations] The root zone at past 1000.

2015-07-13 Thread Mike Hoskins (michoski)
On 7/13/15, 10:10 AM, dns-operations on behalf of Warren Kumari
dns-operations-boun...@dns-oarc.net on behalf of war...@kumari.net wrote:


On Mon, Jul 13, 2015 at 3:01 PM, Shane Kerr sh...@time-travellers.org
wrote:
 William,

 On Wed, 8 Jul 2015 14:07:20 -0400 (EDT)
 William Sotomayor w...@ottix.net wrote:


 Well we've had December 2012 come and go, and now we're at 1003 entries
 in the root zone.  I think we're all still here and the Internet seems
 functional for various definitions of 'functional'.

 I look forward to reviewing the next DITL captures and seeing how much
 this has improved the lives of everyday Internet users! ;)

What, you have doubts? Heresy.


I'm an every day Internet user.  Each day I get more grey hair, worse
eye sight, additional aches and pains, extra inches around the
waistline...  not sure if you'll see that in the DITL captures, but
passing the 1k mark clearly coincides with my reduced quality of life.


___
dns-operations mailing list
dns-operations@lists.dns-oarc.net
https://lists.dns-oarc.net/mailman/listinfo/dns-operations
dns-jobs mailing list
https://lists.dns-oarc.net/mailman/listinfo/dns-jobs