Re: [Design] how to get differing DNS results

From: Michael Richardson <mcr(at)sandelman.ottawa.on.ca>
Date: Wed Mar 12 2003 - 23:33:40 EST

-----BEGIN PGP SIGNED MESSAGE-----

>>>>> "Paul" == Paul Wouters  writes:

>> Copy and edit the files that you want. If you want them DNSSEC signed,

    Paul> Note that you can't securely resolve against the authorative
    Paul> nameserver. You need to run another caching nameserver for
    Paul> that. (bind9 doesn't verify zones from disk) 

  Yes, a good point.
  I'll change the named.conf's to put resolving from local host (and I hope that this includes lwres access) into a seperate view from the other code.

  For the purpose of the tests that DHR is writing, DNSSEC is not required at this time.

]       ON HUMILITY: to err is human. To moo, bovine.           |  firewalls  [
]   Michael Richardson, Sandelman Software Works, Ottawa, ON    |net architect[
] 
mcr(at)sandelman.ottawa.on.ca 
http://www.sandelman.ottawa.on.ca/ |device driver[
] panic("Just another Debian GNU/Linux using, kernel hacking, security guy"); [

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (GNU/Linux)
Comment: Finger me for keys

iQCVAwUBPnAKIoqHRg3pndX9AQEMywQAz7P9/0X04jqnc6XJRW+zK53CVZN261M7 Lo9a3ATQ3v4MFdmMppZ1Gn3WPY8RTvqbqHdTGXj7dj8a5sP/VOkWRTG9HsOA7x0Q yJoldwN10u2Q34/P4+nYwW2pUxH4RhO25dPpcXuFuM4vlHL/O72DnrMXTH/9URq5 +W9CiW5XNJk=
=yyug
-----END PGP SIGNATURE-----

---

Design mailing list
Design@lists.freeswan.org
http://lists.freeswan.org/mailman/listinfo/design Received on Thu Mar 13 02:31:33 2003