Re: Behavior of delegation records for dnssec

2010-05-11 Thread Mark Andrews
In message aanlktil45qvwbpxoglssjxfejkhmvypsrqwfwj_gj...@mail.gmail.com, rams writes: Hi, I have delegation of NS records in my zone and i signed zone using RSASHA1 algorithm. It is signed successfully. When I checked the the zone i am not seeing RRSIG for delegated NS records. There

Re: Allowing recursion for just specific zones

2010-05-11 Thread Brian Candler
On Mon, May 10, 2010 at 11:54:57AM -0700, Chris Buxton wrote: One strategy would be to set up a view that matches recursive queries only. Set allow-query to none at the view, then set it any (or whatever) in each zone of type forward or stub. Thank you Chris. Unfortunately, allow-query is

Re: Splitting off a sub-zone atomically

2010-05-11 Thread Phil Mayers
On 05/11/2010 09:12 AM, Matus UHLAR - fantomas wrote: On 10.05.10 16:20, Phil Mayers wrote: We're doing some DNSSEC testing with sub-zones of our main zone, and I had a little accident largely due to my own incompetence today where I basically did this: 1. Existing zone example.com; create new

Out-of-zone data mistaken for glue?

2010-05-11 Thread Phil Mayers
Following on from yesterdays query; if I have this zone: test.com. 86400 IN SOA ... test.com. 86400 IN NS ... foo.test.com. 86400 IN NS ns.foo.test.com. ns.foo.test.com.86400 IN A 192.168.254.254

Re: Out-of-zone data mistaken for glue?

2010-05-11 Thread Barry Margolin
In article mailman.1488.1273575364.21153.bind-us...@lists.isc.org, Phil Mayers p.may...@imperial.ac.uk wrote: Following on from yesterdays query; if I have this zone: test.com. 86400 IN SOA ... test.com. 86400 IN NS ... foo.test.com.

Re: Out-of-zone data mistaken for glue?

2010-05-11 Thread Phil Mayers
On 11/05/10 12:20, Barry Margolin wrote: In articlemailman.1488.1273575364.21153.bind-us...@lists.isc.org, Phil Mayersp.may...@imperial.ac.uk wrote: Following on from yesterdays query; if I have this zone: test.com. 86400 IN SOA ... test.com. 86400

Re: Out-of-zone data mistaken for glue?

2010-05-11 Thread Mark Andrews
In message 4be937b1.7070...@imperial.ac.uk, Phil Mayers writes: Following on from yesterdays query; if I have this zone: test.com. 86400 IN SOA ... test.com. 86400 IN NS ... foo.test.com. 86400 IN NS ns.foo.test.com.