Reasonable setup of a dnssec aware recursive resolver

Tue Mar 30 01:37:17 UTC 2010

In message <1269885784.31597.68.camel at mjenet.posix.co.za>, Mark Elkins writes:
> On Mon, 2010-03-29 at 11:17 +0200, Mark Elkins wrote:
> > I'm trying to come up with an interim solution for my ISP's DNS
> > Recursive Resolver that is DNSSEC aware.
> >=20
> > My thoughts so far:-
> > Use BIND 9.6.1-P3 (this is the latest version named that Gentoo Linux
> > gives me).

You want to have newer if you are using DNSSEC.

> Ouch! - bitten by the signing of ARPA....
>  /etc/bind/named.conf.trust:225: configuring trusted key for 'ARPA.':
> algorithm is unsupported.
> -and-=20
> * No specific action is requested of operators. This message is
> * for your information only.
> * The ARPA zone is about to be signed using DNSSEC. The technical
> * parameters by which ARPA will be signed are as follows:=20
> * KSK Algorithm and Size: 2048 bit RSA
> 
> I thought unrecognised algorithms were meant to be ignored?

Just don't blindly import trust anchors.  Zone with unknown algorithms
will be treated as insecure when you transition to them from a
secure zone by following a delegation where all the DS records are
for unknown algorithms.  However when you add a trust anchor you
are saying treat this zone as secure and here are your starting
points.

> Time to try Bind 9.7.0-P1 ??

BIND 9.6.2-P1 and BIND 9.7.0-P1 both support RSASHA256 and RSASHA512.

> > In order to fetch both iTAR and DLV signatures - use a patched version
> > of WGET that is dnssec aware.
> >=20
> > Once a week (is this frequent enough?) fetch the DNSSEC signatures from
> > iTAR and ISC/DLV, convert the iTAR xml stuff into Signatures, append the
> > DLV signature and then include this file into my named.conf
> > configuration.
> > (named.conf:   include "named.conf.trust-anchors"; )
> >=20
> > In named.conf --> options, add:
> >         dnssec-enable yes;
> >         dnssec-validation yes;
> >         dnssec-lookaside . trust-anchor dlv.isc.org.;
> >=20
> > This appears to be working for me.
> > Questions are - how frequently should one fetch these trust-anchors? I'd
> > have though once a week was enough but have read of situations where
> > people using ISC's DLV have had past problems.
> >=20
> > I'm hoping that by using both iTAR and DLV - that I won't have this
> > problem - have not noticed anything personally yet.

ITAR is already imported into DLV.  You really don't want to have lots
of trust anchors in named.conf.  Just more places to go wrong.  A the
root when it is signed however.

> >=20
> > I call this an "interim" solution - interim until the root is signed
> > with live data and contains the data that ITAR is currently being used
> > to store. I don't see ISC's DLV disappearing overnight just because the
> > root is signed either...
> >=20
> > I'm only doing the 'wget-ting' from one location, then distributing
> > internally from there - in order to reduce loads.
> >=20
> > What other suggestions do people have to achieve something similar?
> >=20
> > ps - I find the CZ "DNSSEC Validator" (addon) plugin to Firefox very
> > inspiring! Anyone aware of something similar for IE?
> >=20
> > _______________________________________________
> > bind-users mailing list
> > bind-users at lists.isc.org
> > https://lists.isc.org/mailman/listinfo/bind-users
> --=20
>   .  .     ___. .__      Posix Systems - Sth Africa.  e.164 VOIP ready
>  /| /|       / /__       mje at posix.co.za  -  Mark J Elkins, Cisco CCIE
> / |/ |ARK \_/ /__ LKINS  Tel: +27 12 807 0590  Cell: +27 82 601 0496
> 
> --=-zyQOFLsrjw8nMxXVg+CV
> Content-Type: application/x-pkcs7-signature; name="smime.p7s"
> Content-Disposition: attachment; filename="smime.p7s"
> Content-Transfer-Encoding: base64
> 
> MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIWfjCCB0gw
> ggYwoAMCAQICAgLSMA0GCSqGSIb3DQEBBQUAMIGMMQswCQYDVQQGEwJJTDEWMBQGA1UEChMNU3Rh
> cnRDb20gTHRkLjErMCkGA1UECxMiU2VjdXJlIERpZ2l0YWwgQ2VydGlmaWNhdGUgU2lnbmluZzE4
> MDYGA1UEAxMvU3RhcnRDb20gQ2xhc3MgMiBQcmltYXJ5IEludGVybWVkaWF0ZSBDbGllbnQgQ0Ew
> HhcNMDkxMDMxMDAwMDAxWhcNMTExMDMxMTU0MTEwWjCBujELMAkGA1UEBhMCWkExEDAOBgNVBAgT
> B0dhdXRlbmcxETAPBgNVBAcTCFByZXRvcmlhMSEwHwYDVQQKExhQb3NpeCBTeXN0ZW1zIChQVFkp
> IEx0ZC4xLTArBgNVBAsTJFN0YXJ0Q29tIFZlcmlmaWVkIENlcnRpZmljYXRlIE1lbWJlcjEUMBIG
> A1UEAxMLTWFyayBFbGtpbnMxHjAcBgkqhkiG9w0BCQEWD21qZUBwb3NpeC5jby56YTCCASIwDQYJ
> KoZIhvcNAQEBBQADggEPADCCAQoCggEBAL6KS+4WC5M29OOVGAcVUn/z90w4aoMidneOPY16Bnuo
> 6V+8C4kcZrVKoyIYRG55Uln2lKRHeSAhPNBTSMRkkQ1kGNSnmH5jCPhdL+VBN1+CAWeiPvblnsX+
> 5wOoEM6v/i2FdBcsdMmssYnG7WFhn4BsyFQe0bQgDNHgbbnJbSMFCaiqAICoQljL0ha/Z3SU+Dgz
> 2IKTo5fe8vN9P6z5QsETqeBgmsLET+MhwnQ8CRNYhq3vjrYqqie31COgE28Cn5+ez08MDnULB/5I
> cQFzZ5g1ORtaLrRg6VYHITnMn0EedOb9+iz/WF/nstqVwrKlJsp1hGsOeTjqCoOq6ASH3McCAwEA
> AaOCA4IwggN+MAkGA1UdEwQCMAAwCwYDVR0PBAQDAgSwMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggr
> BgEFBQcDBDAdBgNVHQ4EFgQUFPCcDnQQWUlHl8TRFshEBYXoA6IwgagGA1UdIwSBoDCBnYAUrlWD
> b+wxyrn3HfqvazHzyB3jrLuhgYGkfzB9MQswCQYDVQQGEwJJTDEWMBQGA1UEChMNU3RhcnRDb20g
> THRkLjErMCkGA1UECxMiU2VjdXJlIERpZ2l0YWwgQ2VydGlmaWNhdGUgU2lnbmluZzEpMCcGA1UE
> AxMgU3RhcnRDb20gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHmCAQ4wGgYDVR0RBBMwEYEPbWplQHBv
> c2l4LmNvLnphMIIBQgYDVR0gBIIBOTCCATUwggExBgsrBgEEAYG1NwECATCCASAwLgYIKwYBBQUH
> AgEWImh0dHA6Ly93d3cuc3RhcnRzc2wuY29tL3BvbGljeS5wZGYwNAYIKwYBBQUHAgEWKGh0dHA6
> Ly93d3cuc3RhcnRzc2wuY29tL2ludGVybWVkaWF0ZS5wZGYwgbcGCCsGAQUFBwICMIGqMBQWDVN0
> YXJ0Q29tIEx0ZC4wAwIBARqBkUxpbWl0ZWQgTGlhYmlsaXR5LCBzZWUgc2VjdGlvbiAqTGVnYWwg
> TGltaXRhdGlvbnMqIG9mIHRoZSBTdGFydENvbSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSBQb2xp
> Y3kgYXZhaWxhYmxlIGF0IGh0dHA6Ly93d3cuc3RhcnRzc2wuY29tL3BvbGljeS5wZGYwYwYDVR0f
> BFwwWjAroCmgJ4YlaHR0cDovL3d3dy5zdGFydHNzbC5jb20vY3J0dTItY3JsLmNybDAroCmgJ4Yl
> aHR0cDovL2NybC5zdGFydHNzbC5jb20vY3J0dTItY3JsLmNybDCBjgYIKwYBBQUHAQEEgYEwfzA5
> BggrBgEFBQcwAYYtaHR0cDovL29jc3Auc3RhcnRzc2wuY29tL3N1Yi9jbGFzczIvY2xpZW50L2Nh
> MEIGCCsGAQUFBzAChjZodHRwOi8vd3d3LnN0YXJ0c3NsLmNvbS9jZXJ0cy9zdWIuY2xhc3MyLmNs
> aWVudC5jYS5jcnQwIwYDVR0SBBwwGoYYaHR0cDovL3d3dy5zdGFydHNzbC5jb20vMA0GCSqGSIb3
> DQEBBQUAA4IBAQBpz4FHy1vCGNfbLP/aw/Jmrr/f7OO2tsSf04YcOZJnyP8kFonV87V2s6I7cloZ
> pPqujAupGqT+AZCazDF+tPTLdo/jDvp95DpFTbij5bIY6dAHRrlEiJrca59Lw/V5NLOs7fLMfKLu
> lhSba5hBSG9DX4VTXejLAIgz9z5GqKW31b38Ma67OpKqKGvd+KMgZ+PxLfCrthXrEk1yAL/k6ypt
> p0tScZpbsHTqWEoSI0ulTG36T3M1/3aeI4NPcJytFXNwvd2DZZLC2IOopDc0nEabfpXgng01k4TB
> 1p22/58SiU8EVSuEnOfPWKE4KgA2071dwcwxepQmiD+V9bNsLJ7yMIIHSDCCBjCgAwIBAgICAtIw
> DQYJKoZIhvcNAQEFBQAwgYwxCzAJBgNVBAYTAklMMRYwFAYDVQQKEw1TdGFydENvbSBMdGQuMSsw
> KQYDVQQLEyJTZWN1cmUgRGlnaXRhbCBDZXJ0aWZpY2F0ZSBTaWduaW5nMTgwNgYDVQQDEy9TdGFy
> dENvbSBDbGFzcyAyIFByaW1hcnkgSW50ZXJtZWRpYXRlIENsaWVudCBDQTAeFw0wOTEwMzEwMDAw
> MDFaFw0xMTEwMzExNTQxMTBaMIG6MQswCQYDVQQGEwJaQTEQMA4GA1UECBMHR2F1dGVuZzERMA8G
> A1UEBxMIUHJldG9yaWExITAfBgNVBAoTGFBvc2l4IFN5c3RlbXMgKFBUWSkgTHRkLjEtMCsGA1UE
> CxMkU3RhcnRDb20gVmVyaWZpZWQgQ2VydGlmaWNhdGUgTWVtYmVyMRQwEgYDVQQDEwtNYXJrIEVs
> a2luczEeMBwGCSqGSIb3DQEJARYPbWplQHBvc2l4LmNvLnphMIIBIjANBgkqhkiG9w0BAQEFAAOC
> AQ8AMIIBCgKCAQEAvopL7hYLkzb045UYBxVSf/P3TDhqgyJ2d449jXoGe6jpX7wLiRxmtUqjIhhE
> bnlSWfaUpEd5ICE80FNIxGSRDWQY1KeYfmMI+F0v5UE3X4IBZ6I+9uWexf7nA6gQzq/+LYV0Fyx0
> yayxicbtYWGfgGzIVB7RtCAM0eBtucltIwUJqKoAgKhCWMvSFr9ndJT4ODPYgpOjl97y830/rPlC
> wROp4GCawsRP4yHCdDwJE1iGre+OtiqqJ7fUI6ATbwKfn57PTwwOdQsH/khxAXNnmDU5G1outGDp
> VgchOcyfQR505v36LP9YX+ey2pXCsqUmynWEaw55OOoKg6roBIfcxwIDAQABo4IDgjCCA34wCQYD
> VR0TBAIwADALBgNVHQ8EBAMCBLAwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMEMB0GA1Ud
> DgQWBBQU8JwOdBBZSUeXxNEWyEQFhegDojCBqAYDVR0jBIGgMIGdgBSuVYNv7DHKufcd+q9rMfPI
> HeOsu6GBgaR/MH0xCzAJBgNVBAYTAklMMRYwFAYDVQQKEw1TdGFydENvbSBMdGQuMSswKQYDVQQL
> EyJTZWN1cmUgRGlnaXRhbCBDZXJ0aWZpY2F0ZSBTaWduaW5nMSkwJwYDVQQDEyBTdGFydENvbSBD
> ZXJ0aWZpY2F0aW9uIEF1dGhvcml0eYIBDjAaBgNVHREEEzARgQ9tamVAcG9zaXguY28uemEwggFC
> BgNVHSAEggE5MIIBNTCCATEGCysGAQQBgbU3AQIBMIIBIDAuBggrBgEFBQcCARYiaHR0cDovL3d3
> dy5zdGFydHNzbC5jb20vcG9saWN5LnBkZjA0BggrBgEFBQcCARYoaHR0cDovL3d3dy5zdGFydHNz
> bC5jb20vaW50ZXJtZWRpYXRlLnBkZjCBtwYIKwYBBQUHAgIwgaowFBYNU3RhcnRDb20gTHRkLjAD
> AgEBGoGRTGltaXRlZCBMaWFiaWxpdHksIHNlZSBzZWN0aW9uICpMZWdhbCBMaW1pdGF0aW9ucyog
> b2YgdGhlIFN0YXJ0Q29tIENlcnRpZmljYXRpb24gQXV0aG9yaXR5IFBvbGljeSBhdmFpbGFibGUg
> YXQgaHR0cDovL3d3dy5zdGFydHNzbC5jb20vcG9saWN5LnBkZjBjBgNVHR8EXDBaMCugKaAnhiVo
> dHRwOi8vd3d3LnN0YXJ0c3NsLmNvbS9jcnR1Mi1jcmwuY3JsMCugKaAnhiVodHRwOi8vY3JsLnN0
> YXJ0c3NsLmNvbS9jcnR1Mi1jcmwuY3JsMIGOBggrBgEFBQcBAQSBgTB/MDkGCCsGAQUFBzABhi1o
> dHRwOi8vb2NzcC5zdGFydHNzbC5jb20vc3ViL2NsYXNzMi9jbGllbnQvY2EwQgYIKwYBBQUHMAKG
> Nmh0dHA6Ly93d3cuc3RhcnRzc2wuY29tL2NlcnRzL3N1Yi5jbGFzczIuY2xpZW50LmNhLmNydDAj
> BgNVHRIEHDAahhhodHRwOi8vd3d3LnN0YXJ0c3NsLmNvbS8wDQYJKoZIhvcNAQEFBQADggEBAGnP
> gUfLW8IY19ss/9rD8mauv9/s47a2xJ/Thhw5kmfI/yQWidXztXazojtyWhmk+q6MC6kapP4BkJrM
> MX609Mt2j+MO+n3kOkVNuKPlshjp0AdGuUSImtxrn0vD9Xk0s6zt8sx8ou6WFJtrmEFIb0NfhVNd
> 6MsAiDP3PkaopbfVvfwxrrs6kqooa934oyBn4/Et8Ku2FesSTXIAv+TrKm2nS1JxmluwdOpYShIj
> S6VMbfpPczX/dp4jg09wnK0Vc3C93YNlksLYg6ikNzScRpt+leCeDTWThMHWnbb/nxKJTwRVK4Sc
> 589YoTgqADbTvV3BzDF6lCaIP5X1s2wsnvIwggfiMIIFyqADAgECAgEOMA0GCSqGSIb3DQEBBQUA
> MH0xCzAJBgNVBAYTAklMMRYwFAYDVQQKEw1TdGFydENvbSBMdGQuMSswKQYDVQQLEyJTZWN1cmUg
> RGlnaXRhbCBDZXJ0aWZpY2F0ZSBTaWduaW5nMSkwJwYDVQQDEyBTdGFydENvbSBDZXJ0aWZpY2F0
> aW9uIEF1dGhvcml0eTAeFw0wNzEwMjQyMTAyNTRaFw0xMjEwMjIyMTAyNTRaMIGMMQswCQYDVQQG
> EwJJTDEWMBQGA1UEChMNU3RhcnRDb20gTHRkLjErMCkGA1UECxMiU2VjdXJlIERpZ2l0YWwgQ2Vy
> dGlmaWNhdGUgU2lnbmluZzE4MDYGA1UEAxMvU3RhcnRDb20gQ2xhc3MgMiBQcmltYXJ5IEludGVy
> bWVkaWF0ZSBDbGllbnQgQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLKIVFnAEs
> +xnyq6UzjCqgDcvQVe1dIoFnRsQPCFO+y92k8RK0Pn3MbQ2Gd+mehh9GBZ+36uUQA7Xj9AGM6wgP
> hEE34vKtfpAN5tJ8LcFxveDObCKrL7O5UT9WsnAZHv7OYPYSR68mdmnEnJ83M4wQgKO19b+Rt8sP
> DAz9ptkQsntCn4GeJzg3q2SVc4QJTg/WHo7wF2ah5LMOeh8xJVSKGEmd6uPkSbj113yKMm8vmNpt
> RPmM1+YgmVwcdOYJOjCgFtb2sOP79jji8uhWR91xx7TpM1K3hv/wrBZwffrmmEpUeuXHRs07JqCC
> vFh9coKF4UQZvfEg+x3/69xRCzb1AgMBAAGjggNbMIIDVzAMBgNVHRMEBTADAQH/MAsGA1UdDwQE
> AwIBpjAdBgNVHQ4EFgQUrlWDb+wxyrn3HfqvazHzyB3jrLswgagGA1UdIwSBoDCBnYAUTgvvGqRA
> W6UXaYcwyjRoQ9BBrvKhgYGkfzB9MQswCQYDVQQGEwJJTDEWMBQGA1UEChMNU3RhcnRDb20gTHRk
> LjErMCkGA1UECxMiU2VjdXJlIERpZ2l0YWwgQ2VydGlmaWNhdGUgU2lnbmluZzEpMCcGA1UEAxMg
> U3RhcnRDb20gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHmCAQEwCQYDVR0SBAIwADA9BggrBgEFBQcB
> AQQxMC8wLQYIKwYBBQUHMAKGIWh0dHA6Ly93d3cuc3RhcnRzc2wuY29tL3Nmc2NhLmNydDBgBgNV
> HR8EWTBXMCygKqAohiZodHRwOi8vY2VydC5zdGFydGNvbS5vcmcvc2ZzY2EtY3JsLmNybDAnoCWg
> I4YhaHR0cDovL2NybC5zdGFydHNzbC5jb20vc2ZzY2EuY3JsMIIBXQYDVR0gBIIBVDCCAVAwggFM
> BgsrBgEEAYG1NwEBBDCCATswLwYIKwYBBQUHAgEWI2h0dHA6Ly9jZXJ0LnN0YXJ0Y29tLm9yZy9w
> b2xpY3kucGRmMDUGCCsGAQUFBwIBFilodHRwOi8vY2VydC5zdGFydGNvbS5vcmcvaW50ZXJtZWRp
> YXRlLnBkZjCB0AYIKwYBBQUHAgIwgcMwJxYgU3RhcnQgQ29tbWVyY2lhbCAoU3RhcnRDb20pIEx0
> ZC4wAwIBARqBl0xpbWl0ZWQgTGlhYmlsaXR5LCByZWFkIHRoZSBzZWN0aW9uICpMZWdhbCBMaW1p
> dGF0aW9ucyogb2YgdGhlIFN0YXJ0Q29tIENlcnRpZmljYXRpb24gQXV0aG9yaXR5IFBvbGljeSBh
> dmFpbGFibGUgYXQgaHR0cDovL2NlcnQuc3RhcnRjb20ub3JnL3BvbGljeS5wZGYwEQYJYIZIAYb4
> QgEBBAQDAgAHMFAGCWCGSAGG+EIBDQRDFkFTdGFydENvbSBDbGFzcyAyIFByaW1hcnkgSW50ZXJt
> ZWRpYXRlIEZyZWUgU1NMIEVtYWlsIENlcnRpZmljYXRlczANBgkqhkiG9w0BAQUFAAOCAgEAHvcQ
> F/726YR5L5A3Ta7JV1nTu3w9yWqp00945pg7uea+1KVtR/7/yeNFAV7MPQylPE8pROEcGU+RwwDF
> uNn9cePfAMzOBTpy/6VE076+gYkZa4n8uWaL5A2FVo8tRmEyfoT4gRL9B5h5w8Y4ZySCJBLyfp4j
> ByyxHaTTIWZ8TIkxUQLSBeFnmHKYFwYwMbBA0Sgb8ONCvq9zeJcpMkkDadhJSCfB9c9gZocbaaVH
> VqTlSeENRr5/Y31dapzIRQg2Pl9V/A65Cq03KQxMXBpXn8HkLO/g2FCt7KYkJCaTe6qT2JX8thmB
> 3nb+5RmtWQIITCP+PPNkFQCts6ujOtJx6TlDLWA+tV7QLN2Q+S98p/SwnXito+GW0N7kXcL8QDBV
> sF8lCvwCz+JQrvUIcW5xEzpAVk9xSbpePxVIMzNEUQhBobkFojhUqGt+VyU3GH/+BP2brzl4StOJ
> 1KXuw2EzFs0ai9OMsqCUFRyhykm6MrbnsnSrqhWSnSQPYIu+zpzwWC/8sZFxoJCwvbbIu+6E+AIG
> a8tP+pYF+empPn/7pkIoTT4LSkkEIxGKvUvDJTh86VDNL8bIIQE2LHVDwcOq+mcQx416FAA9Nw1D
> BGyrFr6hQe5yTVXrJ4G7vJosNRGCwPnx302gonaFdwi++YyqjPyhPO6q4fRarYvWyqp5L6UxggNs
> MIIDaAIBATCBkzCBjDELMAkGA1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKzApBgNV
> BAsTIlNlY3VyZSBEaWdpdGFsIENlcnRpZmljYXRlIFNpZ25pbmcxODA2BgNVBAMTL1N0YXJ0Q29t
> IENsYXNzIDIgUHJpbWFyeSBJbnRlcm1lZGlhdGUgQ2xpZW50IENBAgIC0jAJBgUrDgMCGgUAoIIB
> rTAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0xMDAzMjkxODAzMDRa
> MCMGCSqGSIb3DQEJBDEWBBRN6dtcg8sckXKvMcZ8cg3PGJzDpjCBpAYJKwYBBAGCNxAEMYGWMIGT
> MIGMMQswCQYDVQQGEwJJTDEWMBQGA1UEChMNU3RhcnRDb20gTHRkLjErMCkGA1UECxMiU2VjdXJl
> IERpZ2l0YWwgQ2VydGlmaWNhdGUgU2lnbmluZzE4MDYGA1UEAxMvU3RhcnRDb20gQ2xhc3MgMiBQ
> cmltYXJ5IEludGVybWVkaWF0ZSBDbGllbnQgQ0ECAgLSMIGmBgsqhkiG9w0BCRACCzGBlqCBkzCB
> jDELMAkGA1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKzApBgNVBAsTIlNlY3VyZSBE
> aWdpdGFsIENlcnRpZmljYXRlIFNpZ25pbmcxODA2BgNVBAMTL1N0YXJ0Q29tIENsYXNzIDIgUHJp
> bWFyeSBJbnRlcm1lZGlhdGUgQ2xpZW50IENBAgIC0jANBgkqhkiG9w0BAQEFAASCAQAVNcNT2dh9
> 371lRmPz/WAvhw+wgLBsyMZOUKLxNaYVVqFUP9C+pFYVuSKrfpHYJMt20GIII1FO+PvCz1a6ViYk
> r6nF8Rm0qUhlsHybsC0L8Xc/qcJ2tenCoUMLxtjIMe7PCTqanBrK6Rt1UkVCdbvGMK62JT+owwz3
> HWUNwyJEvKX3QkOUS9v0O8rBxcawMIK2LD0/a0oCxcu4cLlHXg2A45VyhMa++jApawT5nJlPDWnz
> UAiVfT0q8h7VBSAekrgLkulr+cT8xriPT9q+OUg4nTuK350RVyTaiG6L8nydbU8RVd3qjo7JdB+Y
> 6rU8YFZsuHoM1ye4N7XEp7LPRswnAAAAAAAA
> 
> 
> --=-zyQOFLsrjw8nMxXVg+CV--
> 
> 
> --===============2749469770847787432==
> Content-Type: text/plain; charset="us-ascii"
> MIME-Version: 1.0
> Content-Transfer-Encoding: 7bit
> Content-Disposition: inline
> 
> _______________________________________________
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
> --===============2749469770847787432==--
> 
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: marka at isc.org