Re: strange dnssec question

2021-08-17 Thread Edwardo Garcia
Thank you, I'll report back the result On Wed, Aug 18, 2021 at 10:49 AM Mark Andrews wrote: > > > On 18 Aug 2021, at 10:23, Edwardo Garcia wrote: > > > > Hola Mark, > > > > Thank you, so to be clear, what is mean to delegate zone, the black > zone? I am not dns expert unfortunately > > Yes,

Re: strange dnssec question

2021-08-17 Thread Mark Andrews
> On 18 Aug 2021, at 10:23, Edwardo Garcia wrote: > > Hola Mark, > > Thank you, so to be clear, what is mean to delegate zone, the black zone? I > am not dns expert unfortunately Yes, create a seperate zone for black.example.net. In example.net you add NS records for black.example.net.

Re: strange dnssec question

2021-08-17 Thread Edwardo Garcia
Hola Mark, Thank you, so to be clear, what is mean to delegate zone, the black zone? I am not dns expert unfortunately On Wed, Aug 18, 2021 at 6:23 AM Mark Andrews wrote: > Delegate the zone. Do NOT add a DS for it. > > -- > Mark Andrews > > On 17 Aug 2021, at 23:47, Edwardo Garcia wrote: > >

Re: strange dnssec question

2021-08-17 Thread Mark Andrews
Delegate the zone. Do NOT add a DS for it. -- Mark Andrews > On 17 Aug 2021, at 23:47, Edwardo Garcia wrote: > >  > Hola > > We have dnssec working for long time but need now to have a subdomain > excluded, we are going to be use it to replace an internal blacklist, we have > 14 smtp

strange dnssec question

2021-08-17 Thread Edwardo Garcia
Hola We have dnssec working for long time but need now to have a subdomain excluded, we are going to be use it to replace an internal blacklist, we have 14 smtp servers and it is cumbersome to keep in sync. So we have example.net signed, but we want black.example.net, and of course all addresses