DNSSEC external validation issues

[Casey Deccio]

On Sun, Nov 13, 2011 at 1:50 PM, Eduardo Bonsi <beartcom at pacbell.net> wrote:

> Mark and everybody, Thanks for the checking. I had a suspicion that was
> the issue but I need a second opinion since when I checked my DNS from the
> inside the "refused" status is not happening. Here is what I am getting:
>
>
What does your named.conf on ns1/ns2 look like?  You should allowing
queries from "any" for bonsi.orgif you intend it to be advertised as an
authoritative server.  Something like:

zone "bonsi.org" {
  ...
  allow-query { any; };
};

Casey
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20111115/514ac92c/attachment.html>