Does anyone have DNSSEC problem with uscg.mil

Stephane Bortzmeyer bortzmeyer at nic.fr
Fri Nov 15 09:26:46 UTC 2013


These name servers have another interesting feature: the serial number
is different depending on whether you set the DO bit or or:

% dig +short +dnssec +bufsize=4096 @ns1.uscg.mil SOA uscg.mil
osc-bloxmaster.iap.uscg.mil. hostmaster.uscg.mil. 2012079853 10800 1080 604800 900
...
% dig +short +nodnssec +noedns +bufsize=0 @ns1.uscg.mil SOA uscg.mil
osc-bloxmaster.iap.uscg.mil. hostmaster.uscg.mil. 2012079854 10800 1080 604800 900

% dig +short +dnssec +bufsize=4096 @ns1.uscg.mil SOA uscg.mil       
osc-bloxmaster.iap.uscg.mil. hostmaster.uscg.mil. 2012079853 10800 1080 604800 900
...
% dig +short +nodnssec +noedns +bufsize=0 @ns1.uscg.mil SOA uscg.mil
osc-bloxmaster.iap.uscg.mil. hostmaster.uscg.mil. 2012079854 10800 1080 604800 900


More information about the bind-users mailing list