I had to restart my Unbound resolver to get something else than
SERVFAIL (BIND had no issues) for 192.in-addr.arpa. I vaguely remember
a problem with Unbound when a zone goes from unsigned to signed. Is it
still true?
Unbound 1.3.0 on Debian/Linux, no forwarder, using dlv.isc.org.
--- Begin Message ---
Hi
ARIN is now signing the /8 zones that it is authoritative for (eg
192.in-addr.arpa, etc).
This the phase two of a three-phase process. Given that in-addr.arpa is
not yet signed, we have published a list of trust anchors that you can
download to configure on your local recursive resolvers.
Additional details are at http://www.arin.net/about_us/dnssec/
Regards,
Mark Kosters
ARIN CTO
--- End Message ---
_______________________________________________
Unbound-users mailing list
[email protected]
http://unbound.nlnetlabs.nl/mailman/listinfo/unbound-users