marka at isc.org
Wed Aug 21 06:23:29 UTC 2013
In message <20130820221524.GA24311 at iano.org>, Maria writes:
> My company uses a private tld. We are working on fixing that but the fix is going to take a while, especially if our sol
> ution ends up being trying to register it with icann.
> Our resolvers that all internet queries go through have a forward zone statement for that tld to some internal name serv
> ers. Unfortunately, when I turn on dnssec validation our resolvers go check out the root zone, see our private zone does
> n't exist, and refuse to resolve records in the zone. Is there a solution I can put in place so we can do dnssec validat
> ion in the meantime while we work on ceasing to use the private tld?
Sign the internal tld and add a trusted-key statement to the resolvers
for your internal tld.
> Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list
> bind-users mailing list
> bind-users at lists.isc.org
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742 INTERNET: marka at isc.org
More information about the bind-users