Sending extra info in bind dns query packet

2016-07-13 Thread Sachin Patil
Hello All, I am just looking into bind and want to send extra information while querying dns bind server. This information will be used at the bind server side to return the resolved ip. I have control of dns query and bind server, I mean I can modify the source codes of both. Can I use

Re: auto-dnssec maintain and DNSKEY removal

2016-07-13 Thread Mathew Ian Eis
One last question (I hope): sig-validity-interval seems to only affect the expiration date of newly created signatures, and of course signatures are only rolling over to new keys as they expire. I am wondering if I can ask bind to set the expiration for, say 30 days out, but when a new key is

Re: Breaking trusted chain in dnssec

2016-07-13 Thread Tony Finch
Georg Kahest wrote: > On 07/13/2016 03:16 PM, Mark Andrews wrote: > > > > You have a delegation without a DS record. > > Or have a DS record without actual dnskey/rrsig records in the > delegated zone. Be aware that these are very different things! Mark's suggestion

Re: Breaking trusted chain in dnssec

2016-07-13 Thread Warren Kumari
Or nsec3 with opt-out? The question is unclear... W On Wednesday, July 13, 2016, Tony Finch wrote: > rams > wrote: > > > Is any one explain how to break trusted chain in dnssec with example how > to > > create zone or data with trusted chain

Re: Breaking trusted chain in dnssec

2016-07-13 Thread Georg Kahest
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 07/13/2016 03:16 PM, Mark Andrews wrote: > > In message >

Re: Breaking trusted chain in dnssec

2016-07-13 Thread Mark Andrews
In message

Re: Breaking trusted chain in dnssec

2016-07-13 Thread Tony Finch
rams wrote: > Is any one explain how to break trusted chain in dnssec with example how to > create zone or data with trusted chain break. Create a delegation without a DS record. Tony. -- f.anthony.n.finch http://dotat.at/ - I xn--zr8h punycode Lundy,

Breaking trusted chain in dnssec

2016-07-13 Thread rams
Greetings...! Is any one explain how to break trusted chain in dnssec with example how to create zone or data with trusted chain break. Thanks & Regards, ramesh ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this