proper setup of dnssec-validation to _always_ resolve, and retrieve DATA and status flags ?
dchilton+bind at bestmail.us
dchilton+bind at bestmail.us
Tue May 10 05:19:44 UTC 2011
On Tue, 10 May 2011 15:17 +1000, "Mark Andrews" <marka at isc.org> wrote:
> dig +dnssec +cd soa com
dig +dnssec +cd soa com
; <<>> DiG 9.8.0-P1 <<>> +dnssec +cd soa com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 55492
;; flags: qr rd ra cd; QUERY: 1, ANSWER: 2, AUTHORITY: 14,
ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 4096
;; QUESTION SECTION:
;com. IN SOA
;; ANSWER SECTION:
com. 900 IN SOA
a.gtld-servers.net. nstld.verisign-grs.com. 1305004673 1800 900
604800 86400
com. 900 IN RRSIG SOA 8 1 900
20110517051753 20110510040753 36713 com.
kV450cJYv8NlztaovFwY5ouWBBqDZq89o/uOdkVpHAvu/4wPiPTe60se
Ay5/5BuA2O0ZBN/QEulqjb2xvULAHo5W3sgxdwx9spMTrU1Kdryw1+5Y
zM19Kanl/tXgiPkRlidrLk6QEXx5GnMr6bYfayz7e4/vL5FL0nLjvIbb MF4=
;; AUTHORITY SECTION:
com. 3600 IN NS
g.gtld-servers.net.
com. 3600 IN NS
e.gtld-servers.net.
com. 3600 IN NS
j.gtld-servers.net.
com. 3600 IN NS
d.gtld-servers.net.
com. 3600 IN NS
b.gtld-servers.net.
com. 3600 IN NS
i.gtld-servers.net.
com. 3600 IN NS
h.gtld-servers.net.
com. 3600 IN NS
a.gtld-servers.net.
com. 3600 IN NS
k.gtld-servers.net.
com. 3600 IN NS
m.gtld-servers.net.
com. 3600 IN NS
c.gtld-servers.net.
com. 3600 IN NS
f.gtld-servers.net.
com. 3600 IN NS
l.gtld-servers.net.
com. 3600 IN RRSIG NS 8 1 172800
20110516041548 20110509030548 36713 com.
tx37OldYt1fgXR+rD/3ACR1BD3wR11m7Qtdslz1U9UyiBNbUK/swm4Uz
/49U4A9Ndf5vCiybG0NJbBmEhJ2Gc+YzXf1Pv6NBZcEW63123NJf/igx
z1DKZAJeF+HAlIhy/6Iuwvq8Z83+30kBC1G9ocRiUG5/CXr2X+WSSfFl Xsk=
;; Query time: 218 msec
;; SERVER: 10.10.10.100#53(10.10.10.100)
;; WHEN: Mon May 9 15:18:31 2011
;; MSG SIZE rcvd: 637
More information about the bind-users
mailing list