[Unbound-users] problems resolving some sites
wouter at NLnetLabs.nl
Sat Nov 27 11:32:42 UTC 2010
-----BEGIN PGP SIGNED MESSAGE-----
On 11/26/2010 06:49 PM, lst_hoe02 at kwsoft.de wrote:
> Zitat von FRLinux <frlinux at gmail.com>:
>> Thanks, i have set this one to no, but still fails on a normal query
>> but works if I add +cdflag. Am I missing anything else? (my
>> configuration is the one i pasted on the first mail, with the change
>> you asked for, to set harden-referral-path: no).
> We use unbound 1.4.7 and it has no problem to resolv
> Fact is if it resolv with +cdflag (checking disable) there is something
> wrong with DNSSEC or someone is screwing the result records.
If you set val-log-level: 2 in the config file, it will report *why* the
DNSSEC failure is happening. It gives a single line with an error for
every query-name that fails DNSSEC.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
-----END PGP SIGNATURE-----
More information about the Unbound-users