Re: How to get AD flag

2013-08-02 Thread Stephane Bortzmeyer
On Fri, Aug 02, 2013 at 10:49:22AM +0530, rams brames...@gmail.com wrote a message of 41 lines which said: I have 9.7 bind installed and configured recursive. When i query against forwader i am not getting AD flag. Could you please guide me how to get AD flag. Several possible reasons: 1

Re: How to get AD flag

2013-08-02 Thread David Newman
On 8/1/13 10:48 PM, rams wrote: Thanks david, This the response i get dig +short rs.dns-oarc.net http://rs.dns-oarc.net txt @forwarderip rst.x3827.rs.dns-oarc.net http://rst.x3827.rs.dns-oarc.net. rst.x3837.x3827.rs.dns-oarc.net http://rst.x3837.x3827.rs.dns-oarc.net.

Re: How to get AD flag

2013-08-02 Thread Alan Clegg
On Aug 2, 2013, at 11:35 AM, David Newman dnew...@networktest.com wrote: That looks OK, but the forwarder might still be broken (i.e., it might strip replies). If this were the case and the resolver is correctly configured with a root anchor then all attempted validation (from the root down)

Re: How to get AD flag

2013-08-02 Thread Alan Clegg
On Aug 2, 2013, at 9:19 PM, Alan Clegg a...@clegg.com wrote: On Aug 2, 2013, at 11:35 AM, David Newman dnew...@networktest.com wrote: That looks OK, but the forwarder might still be broken (i.e., it might strip replies). If this were the case and the resolver is correctly configured

How to get AD flag

2013-08-01 Thread rams
Hi , I have 9.7 bind installed and configured recursive. When i query against forwader i am not getting AD flag but remaining answer is correct for signed query. Could you please guide me how to get AD flag. Already i have enabled dnssec-validation and dnssec-enabled. Thanks Regards, Ramesh

Re: How to get AD flag

2013-08-01 Thread rams
, 2013 at 11:11 AM, David Newman dnew...@networktest.comwrote: On 8/1/13 10:19 PM, rams wrote: I have 9.7 bind installed and configured recursive. When i query against forwader i am not getting AD flag but remaining answer is correct for signed query. Could you please guide me how to get AD