I had to restart my Unbound resolver to get something else than
SERVFAIL (BIND had no issues) for 192.in-addr.arpa. I vaguely remember
a problem with Unbound when a zone goes from unsigned to signed. Is it
still true?

Unbound 1.3.0 on Debian/Linux, no forwarder, using dlv.isc.org.
--- Begin Message ---
Hi

ARIN is now signing the /8 zones that it is authoritative for (eg
192.in-addr.arpa, etc).

This the phase two of a three-phase process. Given that in-addr.arpa is
not yet signed, we have published a list of trust anchors that you can
download to configure on your local recursive resolvers.

Additional details are at http://www.arin.net/about_us/dnssec/

Regards,
Mark Kosters
ARIN CTO

--- End Message ---
_______________________________________________
Unbound-users mailing list
[email protected]
http://unbound.nlnetlabs.nl/mailman/listinfo/unbound-users

Reply via email to