DNSSEC validation for a local Bind

[Tony Finch]

Roberto Carna <robertocarna36 at gmail.com> wrote:

> Dear Tony, how can I know if my LAN client machines are running
> validating resolvers ?

Your Linux machines must all be running BIND with the configuration option
"dnssec-validation auto;" (or Unbound and unbound-anchor).

Windows is less straightforward. Have a look at
http://technet.microsoft.com/en-us/library/ee649277%28v=WS.10%29.aspx

Tony.
-- 
f.anthony.n.finch  <dot at dotat.at>  http://dotat.at/
Forties, Cromarty, Forth: Northeasterly veering southeasterly 4 or 5,
occasionally 6. Moderate. Rain or showers, fog patches later. Moderate or
good, occasionally very poor later.