<div dir="ltr"><div class="gmail_extra">yeah FreeBSD 10 removed dig from base, but I guess I can install the tools!</div><div class="gmail_extra"><br></div><div class="gmail_extra">The time on the router is set to GMT and shows one hour after m local machine,</div>
<div class="gmail_extra">My local time now is: Thu Mar 13 18:40:23 WET 2014</div><div><br></div><div><br></div><div>I tried "<span style="font-family:arial,sans-serif;font-size:13px">domain-insecure: "local""</span></div>
<div><span style="font-family:arial,sans-serif;font-size:13px"><br></span></div><div><span style="font-family:arial,sans-serif;font-size:13px">And this seems to make it work </span></div><div><span style="font-family:arial,sans-serif;font-size:13px"><br>
</span></div><div><div><font face="arial, sans-serif">% drill +dnssec @<a href="http://127.0.0.1">127.0.0.1</a> yoda.geek.local. A</font></div><div><font face="arial, sans-serif">;; ->>HEADER<<- opcode: QUERY, rcode: NOERROR, id: 31171</font></div>
<div><font face="arial, sans-serif">;; flags: qr rd ra ; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0 </font></div><div><font face="arial, sans-serif">;; QUESTION SECTION:</font></div><div><font face="arial, sans-serif">;; yoda.geek.local. IN A</font></div>
<div><font face="arial, sans-serif"><br></font></div><div><font face="arial, sans-serif">;; ANSWER SECTION:</font></div><div><font face="arial, sans-serif">yoda.geek.local. 39 IN A 10.10.50.50</font></div>
<div><font face="arial, sans-serif"><br></font></div><div><font face="arial, sans-serif">;; AUTHORITY SECTION:</font></div><div><font face="arial, sans-serif"><br></font></div><div><font face="arial, sans-serif">;; ADDITIONAL SECTION:</font></div>
<div><font face="arial, sans-serif"><br></font></div><div><font face="arial, sans-serif">;; Query time: 0 msec</font></div><div><font face="arial, sans-serif">;; SERVER: 127.0.0.1</font></div><div><font face="arial, sans-serif">;; WHEN: Thu Mar 13 18:43:54 2014</font></div>
<div><font face="arial, sans-serif">;; MSG SIZE rcvd: 49</font></div><div><font face="arial, sans-serif"><br></font></div><div><font face="arial, sans-serif"><br></font></div><div><font face="arial, sans-serif">% drill -D @<a href="http://127.0.0.1">127.0.0.1</a> yoda.geek.local. A </font></div>
<div><font face="arial, sans-serif">;; ->>HEADER<<- opcode: QUERY, rcode: NOERROR, id: 49043</font></div><div><font face="arial, sans-serif">;; flags: qr rd ra ; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0 </font></div>
<div><font face="arial, sans-serif">;; QUESTION SECTION:</font></div><div><font face="arial, sans-serif">;; yoda.geek.local. IN A</font></div><div><font face="arial, sans-serif"><br></font></div><div><font face="arial, sans-serif">;; ANSWER SECTION:</font></div>
<div><font face="arial, sans-serif">yoda.geek.local. 36 IN A 10.10.50.50</font></div><div><font face="arial, sans-serif"><br></font></div><div><font face="arial, sans-serif">;; AUTHORITY SECTION:</font></div>
<div><font face="arial, sans-serif"><br></font></div><div><font face="arial, sans-serif">;; ADDITIONAL SECTION:</font></div><div><font face="arial, sans-serif"><br></font></div><div><font face="arial, sans-serif">;; Query time: 0 msec</font></div>
<div><font face="arial, sans-serif">;; EDNS: version 0; flags: do ; udp: 4096</font></div><div><font face="arial, sans-serif">;; SERVER: 127.0.0.1</font></div><div><font face="arial, sans-serif">;; WHEN: Thu Mar 13 18:43:57 2014</font></div>
<div><font face="arial, sans-serif">;; MSG SIZE rcvd: 60</font></div><div style="font-family:arial,sans-serif;font-size:13px"><br></div></div><div><br></div><div>So that is indeed odd, If i do this:</div><div><div>rill @<a href="http://127.0.0.1">127.0.0.1</a> yoda.geek.local. A</div>
<div>;; ->>HEADER<<- opcode: QUERY, rcode: SERVFAIL, id: 52645</div><div>;; flags: qr rd ra ; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0 </div><div>;; QUESTION SECTION:</div><div>;; yoda.geek.local. IN A</div>
<div><br></div><div>;; ANSWER SECTION:</div><div><br></div><div>;; AUTHORITY SECTION:</div><div><br></div><div>;; ADDITIONAL SECTION:</div><div><br></div><div>;; Query time: 374 msec</div><div>;; SERVER: 127.0.0.1</div><div>
;; WHEN: Thu Mar 13 18:40:58 2014</div></div><div><br></div><div><br></div><div><br></div><div>So its failing dnsec validation but the log doens't show it?</div></div>