nanog mailing list archives

Re: Root Zone DNSSEC Deployment Technical Status Update


From: Joe Abley <jabley () hopcount ca>
Date: Thu, 20 May 2010 13:54:06 -0400


On 2010-05-20, at 12:18, itservices88 wrote:

I have these in named.conf

       dnssec-enable yes;
       dnssec-validation yes;
//      dnssec-lookaside "." trust-anchor "DLV.ISC.ORG";
With the trust-anchor uncommented, as soon as i enable and reload bind, dig
gives timeout, while dig has no issues with first two commands enabled.

You should probably take these questions to the bind-users list, where there are many people who will help you. See 
<https://lists.isc.org/mailman/listinfo>.

Configuring DLV is quite possibly not what you want in this instance.


Joe

Current thread: