Re: Requesting tips on setting TTLs so that expired RRSIG data doesn't stay in the zone

2012-12-14 Thread Chris Buxton
On Dec 14, 2012, at 2:48 AM, GS Bryan wrote: > Reference: http://dnssec-debugger.verisignlabs.com/imouto.my > > How to configure named (version BIND 9.9.2-P1-RedHat-9.9.2-2.P1.el5) > so that expired RRSIG data doesn't stay in the zone? I heard it has > omething to do with the TTL of the zone (the

Re: Requesting tips on setting TTLs so that expired RRSIG data doesn't stay in the zone

2012-12-14 Thread GS Bryan
zone "imouto.my" { type master; file "zones/imouto.my/imouto.my.conf"; allow-transfer { imoutomy; }; notify yes; also-notify { }; max-journal-size 50k; key-directory "";

Re: Requesting tips on setting TTLs so that expired RRSIG data doesn't stay in the zone

2012-12-14 Thread Phil Mayers
On 12/14/2012 10:48 AM, GS Bryan wrote: Reference: http://dnssec-debugger.verisignlabs.com/imouto.my How to configure named (version BIND 9.9.2-P1-RedHat-9.9.2-2.P1.el5) so that expired RRSIG data doesn't stay in the zone? I heard it has omething to do with the TTL of the zone (the expiry timer

Requesting tips on setting TTLs so that expired RRSIG data doesn't stay in the zone

2012-12-14 Thread GS Bryan
Reference: http://dnssec-debugger.verisignlabs.com/imouto.my How to configure named (version BIND 9.9.2-P1-RedHat-9.9.2-2.P1.el5) so that expired RRSIG data doesn't stay in the zone? I heard it has omething to do with the TTL of the zone (the expiry timer in that zone's SOA). The named.conf has th