<html><body><div style="font-family: georgia,serif; font-size: style=" font-size:="" 13pt;="" color:="" #000099"=""><div><span style="font-family: georgia, serif; font-size: 13pt;" data-mce-style="font-family: georgia, serif; font-size: 13pt;">How to create DS for <!--StartFragment--><span style="color: rgb(0, 0, 0); font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: rgb(253, 252, 250); text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial; float: none; display: inline !important;" data-mce-style="color: #000000; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: #fdfcfa; text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial; float: none; display: inline !important;">2409::/28 ....</span></span><!--EndFragment--><div style="clear: both;" data-mce-style="clear: both;"><br data-mce-bogus="1"></div></div><div data-marker="__SIG_PRE__"><div style="font-family:'arial' , 'helvetica' , sans-serif;text-align:left"><span style="font-family:'georgia' , serif;color:rgb( 0 , 0 , 128 );font-size:12pt"><br></span></div><div style="font-family:'arial' , 'helvetica' , sans-serif;text-align:left"><span style="font-family:'georgia' , serif;color:rgb( 0 , 0 , 128 );font-size:12pt">With Regards<br></span></div><div style="font-family:'arial' , 'helvetica' , sans-serif;text-align:left"><span style="font-family:'georgia' , serif;color:rgb( 153 , 51 , 0 );font-size:12pt">Divya Parashar</span></div></div><div><br></div><hr id="zwchr" data-marker="__DIVIDER__"><div data-marker="__HEADERS__"><b>From: </b>mje@posix.co.za<br><b>To: </b>bind-users@lists.isc.org<br><b>Cc: </b>"Divya" <divya.p@nic.in><br><b>Sent: </b>Thursday, November 18, 2021 3:44:56 PM<br><b>Subject: </b>Re: DNSSEC implementation on IPv6 PTR Zones<br></div><div><br></div><div data-marker="__QUOTED_TEXT__"><div>
<p>And I can testify that this works. I have 2001:42a0::/32 signed
via AFRINIC.</p>
<p>One suggestion though. When one signs an IPv4 reverse - use NSEC
- as everyone can guess what is there anyway.<br>
With IPv6 - you might want to use NSEC3 - as there can be huge
holes in the reverse zone. Make the bad guy work at guessing what
is in the zone.<br>
Also - if signing a brand new zone - try using Algo 13 (Elliptical
curve) as it will generate shorter keys - so less chance of your
zone being used in a DNS DDOS amplification attack - it doesn't
amplify as much.</p>
<p><br>
</p>
<div>On 11/18/21 12:07 PM, Mark Andrews
wrote:<br>
</div>
<blockquote>
</blockquote>
You do it exactly the same as any other zone. You create DNSKEYs.
You sign the zone. You add DS records to the parent zone. <br>
<br>
<div dir="ltr">--
<div>Mark Andrews</div>
</div>
<div dir="ltr"><br>
<blockquote>On 18 Nov 2021, at 20:28, Divya
<a href="mailto:divya.p@nic.in" target="_blank" rel="nofollow noopener noreferrer"><divya.p@nic.in></a> wrote:<br>
<br>
</blockquote>
</div>
<blockquote>
<div dir="ltr">
<div style="font-family: georgia, serif;">
<div>Dear Admin,<br>
<br>
Has anybody implemented DNSSEC on IPv6 reverse zones?</div>
<div> Kindly help us to
configure DNSSEC on reverse zones of IPV6 segment with
BIND 9.17.16+CentOS 7.9.<br>
<br>
With Thanks & Regards <br>
Divya <br>
<br>
<br>
</div>
</div>
<br>
<p><a href="https://amritmahotsav.nic.in/" target="_blank" rel="nofollow noopener noreferrer"><img style="width: 450px; height: 113px;" src="https://email.gov.in/videos/images/75.jpg" saveddisplaymode=""></a></p>
<br>
_______________________________________________<br>
Please visit
<a href="https://lists.isc.org/mailman/listinfo/bind-users" target="_blank" rel="nofollow noopener noreferrer">https://lists.isc.org/mailman/listinfo/bind-users</a> to
unsubscribe from this list<br>
<br>
ISC funds the development of this software with paid
support subscriptions. Contact us at
<a href="https://www.isc.org/contact/" target="_blank" rel="nofollow noopener noreferrer">https://www.isc.org/contact/</a> for more information.<br>
<br>
<br>
bind-users mailing list<br>
<a href="mailto:bind-users@lists.isc.org" target="_blank" rel="nofollow noopener noreferrer">bind-users@lists.isc.org</a><br>
<a href="https://lists.isc.org/mailman/listinfo/bind-users" target="_blank" rel="nofollow noopener noreferrer">https://lists.isc.org/mailman/listinfo/bind-users</a><br>
</div>
</blockquote>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<pre class="moz-quote-pre">_______________________________________________
Please visit <a href="https://lists.isc.org/mailman/listinfo/bind-users" target="_blank" rel="nofollow noopener noreferrer">https://lists.isc.org/mailman/listinfo/bind-users</a> to unsubscribe from this list
ISC funds the development of this software with paid support subscriptions. Contact us at <a href="https://www.isc.org/contact/" target="_blank" rel="nofollow noopener noreferrer">https://www.isc.org/contact/</a> for more information.
bind-users mailing list
<a href="mailto:bind-users@lists.isc.org" target="_blank" rel="nofollow noopener noreferrer">bind-users@lists.isc.org</a>
<a href="https://lists.isc.org/mailman/listinfo/bind-users" target="_blank" rel="nofollow noopener noreferrer">https://lists.isc.org/mailman/listinfo/bind-users</a>
</pre>
<div>-- <br>
</div>
<title></title>
<p>Mark James ELKINS - Posix Systems - (South) Africa<br>
<a href="mailto:mje@posix.co.za" target="_blank" rel="nofollow noopener noreferrer">mje@posix.co.za</a> Tel: +27.826010496<br>
For fast, reliable, low cost Internet in ZA: <a href="https://ftth.posix.co.za" target="_blank" rel="nofollow noopener noreferrer">https://ftth.posix.co.za</a><br>
<br>
<img pnsrc="cid:part5.BD5B2C89.D321F7C0@posix.co.za" alt="Posix
Systems" width="250" height="165" src="cid:8bd09b176d699a50e255980b37fb1951f333553d@zimbra"><img pnsrc="cid:part6.E2702D26.F97BFA28@posix.co.za" alt="VCARD for
MJ Elkins" title="VCARD, Scan me please!" width="164" height="164" src="cid:7c79e9b047b42ef5485aa7ab8318516672bfa08d@zimbra"><br>
</p>
</div><br></div></div>
<br><html><head></head><body>
<p><a href="https://amritmahotsav.nic.in/" target="_blank"><img style="width: 450px; height: 113px;" src='https://email.gov.in/videos/images/75.jpg'/></a></p>
</body></html>
<br></body></html>