any tool or command to find/verify the closest encloser NSEC3 record

[Casey Deccio]

On Tue, Jun 28, 2016 at 6:29 AM, rams <bramesh80 at gmail.com> wrote:

> Hi,
> Greetings !!!!
> Is anyone can help me to verify the NSEC3 record in response is correct or
> not.
> Do we have any tool or command to check closet encloser NSEC3 record or
> Correct NSEC3 record returned in response.
>

DNSViz:
https://github.com/dnsviz/dnsviz

Web:
http://dnsviz.net/

Command line:
$ dnsviz query adfadfa.sandia.gov
. [.]
  [.]  DNSKEY: 8/19036/257 [.], 8/60615/256 [.], 8/46551/256 [.]
  [.]    RRSIG: ./8/19036 (2016-06-20 - 2016-07-05) [.]
gov [.] [.]
  [.]  DS: 8/7698/1 [.], 8/7698/2 [.]
  [.]    RRSIG: ./8/60615 (2016-06-29 - 2016-07-09) [.]
  [.]  DNSKEY: 8/7698/257 [.], 8/26663/256 [.]
  [.]    RRSIG: gov/8/7698 (2016-06-21 - 2016-07-06) [.]
sandia.gov [.] [.]
  [.]  DS: 7/20739/1 [.], 7/20739/2 [.], 7/36033/1 [.], 7/36033/2 [.]
  [.]    RRSIG: gov/8/26663 (2016-06-29 - 2016-07-06) [.]
  [.]  DNSKEY: 7/36033/257 [.], 7/20739/257 [.], 7/9839/256 [.]
  [.]    RRSIG: sandia.gov/7/20739 (2016-06-23 - 2016-07-23) [.]
  [.]    RRSIG: sandia.gov/7/36033 (2016-06-23 - 2016-07-23) [.]
adfadfa.sandia.gov
  [.]  A: NXDOMAIN
  [.]    SOA: taurus.sandia.gov. dnsadmin.sandia.gov. 592346 1800 900
604800 3600
  [.]      RRSIG: sandia.gov/7/9839 (2016-06-29 - 2016-07-29) [.]
  [.]    PROOF:  [.]
  [.]      NSEC3: IQIT58B5DEJU7CM802R9M0K37KGD6FJV.sandia.gov. 1 0 2 ee273f
IQLASPCCG7RB9IJ31KQ3BE8VLVKCSNNJ A RRSIG
  [.]        RRSIG: sandia.gov/7/9839 (2016-06-23 - 2016-07-23) [.]
  [.]      NSEC3: 8ESL8VMDE3FA40KLDRDG9H71ICSI90C8.sandia.gov. 1 0 2 ee273f
8EVC5PSC3L4BV78NQR6RSSRF2LCEMVAT A RRSIG
  [.]        RRSIG: sandia.gov/7/9839 (2016-06-23 - 2016-07-23) [.]
  [.]      NSEC3: FGBEAQHT3FQKVO0IFO0EGIFPOE0J53PT.sandia.gov. 1 0 2 ee273f
FGC7SC2U6LPHLH6V0JJ8OGN3JI810F6J A NS SOA MX TXT AAAA RRSIG DNSKEY
NSEC3PARAM
  [.]        RRSIG: sandia.gov/7/9839 (2016-06-23 - 2016-07-23) [.]

(See "man dnsviz" for more information, including documentation)

Casey
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20160629/3b3a1634/attachment.html>