Re: DNSSEC problems

[Geert Hendrickx <ghen%telenet.be@localhost>]

On Sat, Jan 22, 2011 at 09:46:16 +0000, Matthias Scheler wrote:
> Any idea what is going wrong here? 2001:8b0::2021 is one of the recursive
> resolves provided by my ISP.


Does the upstream recursive resolver have DNSSEC enabled?  ie. does it pass
signatures when you query with +DO?

Try `dig +dnssec dlv.isc.org @2001:8b0::2021`, it should return both A and
RRSIG records.

If not, that resolver is not DNSSEC-aware and you'll have to use another as
forwarder (or no forwarders at all).


        Geert



-- 
Geert Hendrickx  -=-  ghen%telenet.be@localhost  -=-  PGP: 0xC4BB9E9F
This e-mail was composed using 100% recycled spam messages!