Am 30.03.2011 13:54 schrieb Hauke Lampe: > > Hi. > > I have a case here where RRSIGs expired, yet Unbound still sets the "AD" > flag in responses. not here: (unbound-1.4.9)
# dig @127.0.0.1 mixmaster.mixmin.net. mx +dnssec ; <<>> DiG 9.5.0-P2 <<>> @127.0.0.1 mixmaster.mixmin.net. mx +dnssec ; (1 server found) ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 24891 ;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags: do; udp: 512 ;; QUESTION SECTION: ;mixmaster.mixmin.net. IN MX ;; ANSWER SECTION: mixmaster.mixmin.net. 172722 IN MX 10 snorky.mixmin.net. mixmaster.mixmin.net. 172722 IN RRSIG MX 5 3 172800 20110328161855 20110226161855 58161 mixmin.net. xIOOe273z9oJb6EM4l0/KzqrYYXUHUbQRP89U1GMjyJ/hYdNhRZGzCj2 RcRx21v3hjL+1F9KCc280MqXUo6FGKUBC4ZQ09geQ5dkHEesXi8Cwoo1 QcETDvSmTR3/PN0Bz/Ho77m/+7DgrV6dRexABBpTWNYio+OBO8kCR1+y iq0= ;; Query time: 1 msec ;; SERVER: 127.0.0.1#53(127.0.0.1) ;; WHEN: Wed Mar 30 14:46:59 2011 ;; MSG SIZE rcvd: 242 # unbound-host -C /etc/unbound/unbound.conf -v mixmaster.mixmin.net. mixmaster.mixmin.net. mail is handled by 10 snorky.mixmin.net. (insecure) # unbound-host -C /etc/unbound/unbound.conf -v nic.cz nic.cz mail is handled by 10 mail.nic.cz. (secure) nic.cz mail is handled by 15 mail4.nic.cz. (secure) nic.cz mail is handled by 20 mx.cznic.org. (secure) nic.cz mail is handled by 30 bh.nic.cz. (secure) # date Wed Mar 30 14:50:34 CEST 2011 Andreas -- Andreas Schulze Internetdienste | P252 DATEV eG 90329 Nürnberg | Telefon +49 911 319-0 | Telefax +49 911 319-3196 E-Mail info @datev.de | Internet www.datev.de Sitz: 90429 Nürnberg, Paumgartnerstr. 6-14 | Registergericht Nürnberg, GenReg Nr.70 Vorstand Prof. Dieter Kempf (Vorsitzender) Dipl.-Kfm. Wolfgang Stegmann (stellvertretender Vorsitzender) Dipl.-Kfm. Michael Leistenschneider Jörg Rabe v. Pappenheim Dipl.-Vw. Eckhard Schwarzer Vorsitzender des Aufsichtsrates: Reinhard Verholen _______________________________________________ Unbound-users mailing list [email protected] http://unbound.nlnetlabs.nl/mailman/listinfo/unbound-users
