Re: DNSSEC problems

[Matthias Scheler <tron%zhadum.org.uk@localhost>]

On Sat, Jan 22, 2011 at 06:46:06PM +0100, Geert Hendrickx wrote:
> Try `dig +dnssec dlv.isc.org @2001:8b0::2021`, it should return both A and
> RRSIG records.

It does like it is DNSSEC aware:

; <<>> DiG 9.7.2-P3 <<>> +dnssec dlv.isc.org. @2001:8b0::2021
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 729
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 7, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 4096
;; QUESTION SECTION:
;dlv.isc.org.                   IN      A

;; ANSWER SECTION:
dlv.isc.org.            273     IN      A       149.20.16.8
dlv.isc.org.            273     IN      RRSIG   A 5 3 300 20110221131503 
20110122131503 64263 dlv.isc.org. 
g+BO93pWK7/rLzP46SonntLC98TuFhueBIYZAgnMUajhB3yRPh2tQ+4i 
ItXZigDk+KbQzNeQQcE0Uw+5tI80TKjuDsG7jukhb+TTBvEBFSmUJesI 
7uPgmO9PSr+bmgutTmoJyFP/lrbcryrkei41ku7AHYfS9ZYJTm5nLHcA x/I=

;; AUTHORITY SECTION:
dlv.isc.org.            3573    IN      NS      dlv.sfba.sns-pb.isc.org.
dlv.isc.org.            3573    IN      NS      ns2.isc.ultradns.net.
dlv.isc.org.            3573    IN      NS      ns.isc.afilias-nst.info.
dlv.isc.org.            3573    IN      NS      ns1.isc.ultradns.net.
dlv.isc.org.            3573    IN      NS      dlv.ams.sns-pb.isc.org.
dlv.isc.org.            3573    IN      NS      dlv.ord.sns-pb.isc.org.
dlv.isc.org.            3573    IN      RRSIG   NS 5 3 3600 20110221131503 
20110122131503 64263 dlv.isc.org. 
XUVdz9A6QKnj9MVRqQXsmETENAXB0Na2syFmeOyuez4BV4+pOdPVEJWD 
EQeGiWqZemblQSRND/juA4bqOQcZMON61AIub7/6fl0UmR769qdyFvRL 
r4v4gAcTPRrh3aoOhsRUZSGdIH4zCzD960DG4I/r3MYf8p36xHFBrnSD Mgk=

;; Query time: 19 msec
;; SERVER: 2001:8b0::2021#53(2001:8b0::2021)
;; WHEN: Sat Jan 22 21:57:22 2011
;; MSG SIZE  rcvd: 561

        Kind Regards

-- 
Matthias Scheler                                  http://zhadum.org.uk/