NSEC3 ISSUE

Torinthiel torinthiel at data.pl
Sat Jan 8 10:52:18 UTC 2011


On 01/07/11 14:25, rams wrote:
> I have trouble resolving the host name dnssecnsec3qatestdomain.com
> <http://dnssecnsec3qatestdomain.com>. which is NSEC3 signed.


> This is the
> parent and child zone. If I run dig ( dnssec query) with the +cd option
> I which is a proper response:

What version of bind are you using? My wild guess is that it's not
recent enough to recognize NSEC3 signatures. Bind 9.4.3 was not, and I
got exactly the same symptoms.
Torinthiel



More information about the bind-users mailing list