any tool or command to find/verify the closest encloser NSEC3 record
Casey Deccio
casey at deccio.net
Wed Jun 29 15:02:19 UTC 2016
On Tue, Jun 28, 2016 at 6:29 AM, rams <bramesh80 at gmail.com> wrote:
> Hi,
> Greetings !!!!
> Is anyone can help me to verify the NSEC3 record in response is correct or
> not.
> Do we have any tool or command to check closet encloser NSEC3 record or
> Correct NSEC3 record returned in response.
>
DNSViz:
https://github.com/dnsviz/dnsviz
Web:
http://dnsviz.net/
Command line:
$ dnsviz query adfadfa.sandia.gov
. [.]
[.] DNSKEY: 8/19036/257 [.], 8/60615/256 [.], 8/46551/256 [.]
[.] RRSIG: ./8/19036 (2016-06-20 - 2016-07-05) [.]
gov [.] [.]
[.] DS: 8/7698/1 [.], 8/7698/2 [.]
[.] RRSIG: ./8/60615 (2016-06-29 - 2016-07-09) [.]
[.] DNSKEY: 8/7698/257 [.], 8/26663/256 [.]
[.] RRSIG: gov/8/7698 (2016-06-21 - 2016-07-06) [.]
sandia.gov [.] [.]
[.] DS: 7/20739/1 [.], 7/20739/2 [.], 7/36033/1 [.], 7/36033/2 [.]
[.] RRSIG: gov/8/26663 (2016-06-29 - 2016-07-06) [.]
[.] DNSKEY: 7/36033/257 [.], 7/20739/257 [.], 7/9839/256 [.]
[.] RRSIG: sandia.gov/7/20739 (2016-06-23 - 2016-07-23) [.]
[.] RRSIG: sandia.gov/7/36033 (2016-06-23 - 2016-07-23) [.]
adfadfa.sandia.gov
[.] A: NXDOMAIN
[.] SOA: taurus.sandia.gov. dnsadmin.sandia.gov. 592346 1800 900
604800 3600
[.] RRSIG: sandia.gov/7/9839 (2016-06-29 - 2016-07-29) [.]
[.] PROOF: [.]
[.] NSEC3: IQIT58B5DEJU7CM802R9M0K37KGD6FJV.sandia.gov. 1 0 2 ee273f
IQLASPCCG7RB9IJ31KQ3BE8VLVKCSNNJ A RRSIG
[.] RRSIG: sandia.gov/7/9839 (2016-06-23 - 2016-07-23) [.]
[.] NSEC3: 8ESL8VMDE3FA40KLDRDG9H71ICSI90C8.sandia.gov. 1 0 2 ee273f
8EVC5PSC3L4BV78NQR6RSSRF2LCEMVAT A RRSIG
[.] RRSIG: sandia.gov/7/9839 (2016-06-23 - 2016-07-23) [.]
[.] NSEC3: FGBEAQHT3FQKVO0IFO0EGIFPOE0J53PT.sandia.gov. 1 0 2 ee273f
FGC7SC2U6LPHLH6V0JJ8OGN3JI810F6J A NS SOA MX TXT AAAA RRSIG DNSKEY
NSEC3PARAM
[.] RRSIG: sandia.gov/7/9839 (2016-06-23 - 2016-07-23) [.]
(See "man dnsviz" for more information, including documentation)
Casey
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20160629/3b3a1634/attachment.html>
More information about the bind-users
mailing list