Disabling DNSSEC validation per zone?

Tony Finch dot at dotat.at
Fri Jul 8 15:24:31 UTC 2011

Daniel McDonald <dan.mcdonald at austinenergy.com> wrote:
> 08-Jul-2011 08:55:58.700 dnssec: info:   validating @0xb4260ad8:
> ips.backscatterer.local SOA: got insecure response; parent indicates it
> should be secure
> I¹m not really certain which parent is reporting this

The root zone says that .local does not exist.

> Is there a way to disable dnssec validation on these zones, while still
> requiring it elsewhere?

Rename your DNSBL zones so that you can put an insecure delegation into
the parent zone.

f.anthony.n.finch  <dot at dotat.at>  http://dotat.at/
Irish Sea: Cyclonic, becoming northwest, 4 or 5, occasionally 6 at first.
Slight or moderate. Showers, rain for a time. Good, occasionally moderate.

More information about the bind-users mailing list