Re: Little help about named needed

[Steven Bellovin <smb%cs.columbia.edu@localhost>]

On Jun 18, 2011, at 6:18 33PM, Matthias Scheler wrote:

> On Sat, Jun 18, 2011 at 09:50:49PM +0200, Manuel Bouyer wrote:
>>> Two questions about it: Does somebody met something similar? And maybe some
>>> can tell me right words for config-file to debug it properly?
>> 
>> I've seen this too, although it has not occured for a long time.
>> This is on netbsd-5
> 
> The latest BIND in "netbsd-5" enables DNSSEC by default. This caused
> problems for me when I was using upstream name servers. Without them
> it works fine.

What sort of problems?
> 
> You can of course also put "dnssec-enable no;" in the global options
> section of "named.conf".
> 
We should certainly build it with support included; whether or not
it should be turned on by default is of course another matter.


                --Steve Bellovin, https://www.cs.columbia.edu/~smb