On Tue, Jul 19, 2016 at 03:42:13AM -0500, Richard Laager wrote:
> FYI: state.mn.us DNS has broken DNSSEC and broken IPv6. I called
> yesterday, and they were aware of the DNSSEC issue.
I had to push out the early beta BIND 9.11 out to production so I
could use the new Negative Trust anchor option for them on my
frontline resolvers.
rndc nta state.mn.us [view]
I think only BIND based resolvers thought it was an error though.
--
Doug McIntyre <[log in to unmask]>
~.~ ipHouse ~.~
Network Engineer/Provisioning/Jack of all Trades
