Facing issues while resolving only one record

[Mark Elkins]

To disable DNSSEC validation for a domain from the command line - I 
use:   dig +cd eportal.incometax.gov.in <http://eportal.incometax.gov.in>

Works as expected.

Better answer is to get them to fix the problem.

On 2023/08/30 17:08, Bob McDonald wrote:
> Turning off validation for that domain fixes the issue.
>
> When using dig to diagnose this issue, one might be tempted to use the 
> DNSSEC switch. However, the following command:
>
> dig eportal.incometax.gov.in <http://eportal.incometax.gov.in>. +NODNSSEC
>
> will NOT turn off DNSSEC validation.
>
> The DNSSEC switch in dig is used to display the associated DNSSEC 
> records (if they exist). It doesn't affect validation. You must make 
> the options change indicated by Greg Choules in his previous post to 
> disable DNSSEC validation for a specific domain.
>
> Sorry if this is redundant or very rudimentary.
>
> Bob
-- 

Mark James ELKINS  -  Posix Systems - (South) Africa
mje at posix.co.za       Tel: +27.826010496 <tel:+27826010496>
For fast, reliable, low cost Internet in ZA: https://ftth.posix.co.za 
<https://ftth.posix.co.za>


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20230830/84f75bc7/attachment.htm>