Am 12.06.19 um 06:13 schrieb Nevel Gandish via Unbound-users: > Hello, > > I'm trying to test my mail server with https://havedane.net but it will send > mails to the subdomain with invalid DANE entry. > Reason seems, that my local unbound (1.9.0) installation gives NXDOMAIN when > looking up _25._tcp.wrong.havedane.net <http://tcp.wrong.havedane.net>: Hello Nevel, it's havedane.net's fault: http://dnsviz.net/d/_25._tcp.do.havedane.net/dnssec/ _tcp.do.havedane.net. is denied to exist: $ dig @ns091.auroradns.eu _tcp.do.havedane.net. any +norec you get an NXDOMAIN but as we *know, _25._tcp.do.havedane.net. exist, the correct answer would be NOERROR. So unbound configured to use qname-minimisation will fail. You may try to disable qname-minimisation and/or report to havedane.net operators. Andreas
Re: getting NXDOMAIN for existing entry
A. Schulze via Unbound-users Wed, 12 Jun 2019 08:30:20 -0700
- getting NXDOMAIN for existing entry Nevel Gandish via Unbound-users
- Re: getting NXDOMAIN for existing... Wouter Wijngaards via Unbound-users
- Re: getting NXDOMAIN for existing... A. Schulze via Unbound-users