This is a discussion on Re: DNSSEC server failure with trstech.net - DNS ; Stéphane, On Thursday 06 November 2008 14:01, you wrote: > dig MX trstech.net > > makes a SERVFAIL. (The BIND resolver is set to dnssec-validation yes > and uses the ISC DLV registry). That seems to be the issue: trstech.net ...
Stéphane,
On Thursday 06 November 2008 14:01, you wrote:
> dig MX trstech.net
>
> makes a SERVFAIL. (The BIND resolver is set to dnssec-validation yes
> and uses the ISC DLV registry).
That seems to be the issue: trstech.net has an DLV entry. It kind of
illustrates that once you've gone the dnssec path, it hard to go back
again...
dig trstech.net.dlv.isc.org dlv
; <<>> DiG 9.5.1b2 <<>> trstech.net.dlv.isc.org dlv
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 31776
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 5, ADDITIONAL: 6
;; QUESTION SECTION:
;trstech.net.dlv.isc.org. IN DLV
;; ANSWER SECTION:
trstech.net.dlv.isc.org. 3600 IN DLV 36472 5 2
FB0DA57E6C06EA0CF636C47016DCE1DAC81142A3FCA389D2CB A829FC 2E0EABE0
trstech.net.dlv.isc.org. 3600 IN DLV 36472 5 1
0B4B9F5A6CA4B0C800D2B432F1D206F176E8E00F
[...]
Gilles
--
Fondation RESTENA - DNS-LU
6, rue Coudenhove-Kalergi
L-1359 Luxembourg
tel: (+352) 424409
fax: (+352) 422473
