Hi,
As someone with more interrest in DNS and DNSSEC than more people, I
tried the following page:
http://test.ipv6.tk/
Now I have an unbound running on my machine, but it does not have
anything configured to do validation.
But still this page says:
"Your ISP validates DNSSEC for .se"
So I tried again with the latest version of unbound and created a
pcap-file to see what was going on.
And I found out unbound was sending queries with the D0-bit set, but it
isn't configured to actually validate anything.
Is their a way to turn this off when needed (for example if I'm running
unbound on a laptop and am somewhere with a bad firewall) ?
Is this a bug or is this on purpose ?
Just a few questions I came up with while I was typing this. :-)
Anyway, thank you for creating Unbound.
Have a nice day,
Leen.
_______________________________________________
Unbound-users mailing list
[email protected]
http://unbound.nlnetlabs.nl/mailman/listinfo/unbound-users
