[Unbound-users] What is needed for dnssec?

Marcel van Beurden marcel_unbound at datkan.net
Tue Feb 14 20:36:17 UTC 2012


On 14-02-12 19:20, Olaf Kolkman wrote:
> Orthogonally, You might want to check if your network environment is
> suitable with respect to EDNS0 and UDP packet sizes and there are no
> weird network elements blocking your DNS view to the authoritative
> world. A quick way for finding that out is running netalyzr
> (http://netalyzr.icsi.berkeley.edu/)

Nice toy! All seems fine except for some problem with fragmented IPv6
packets and blocked Windows networking (duh!).

Not sure if it's needed or important, but I have "options edns0" in my
/etc/resolv.conf (on my Ubuntu desktop).

Marcel



More information about the Unbound-users mailing list