
27.03.2013, 15:35
|
Novinec
Član od: May 2008
Sporočila: 22
|
|
Siol caching DNS DNSSEC
mate pri vas kaj slabo implementiran DNSSEC, or is it just me?
Citat:
$ dig +dnssec soa isc.org. @193.189.160.13
; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.17.rc1.el6.3 <<>> +dnssec soa isc.org. @193.189.160.13
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 64947
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 4096
;; QUESTION SECTION:
;isc.org. IN SOA
;; ANSWER SECTION:
isc.org. 7200 IN SOA ns-int.isc.org. hostmaster.isc.org. 2013032702 7200 3600 24796800 3600
isc.org. 7200 IN RRSIG SOA 5 2 7200 20130425232807 20130326232807 50012 isc.org. VUNX2GUQOYE9NiplnquB4avjCZr3/BsIVw6qBK0hHT3klQSILJufxB4r hhh57vpX+RMmyzO8rJFUfff8+ARTgFK5Uo9LEIYOuwRXHGm/ItmMSXJt VkVLyKo3G0B99Hlud2XiXO+MGorSZY1qkSNQKtP3xzsVpOE9Ls v+gre5 0vY=
;; Query time: 134 msec
;; SERVER: 193.189.160.13#53(193.189.160.13)
;; WHEN: Wed Mar 27 15:31:24 2013
;; MSG SIZE rcvd: 257
$ dig +dnssec soa isc.org. @193.189.160.23
; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.17.rc1.el6.3 <<>> +dnssec soa isc.org. @193.189.160.23
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 24730
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 4096
;; QUESTION SECTION:
;isc.org. IN SOA
;; ANSWER SECTION:
isc.org. 7200 IN SOA ns-int.isc.org. hostmaster.isc.org. 2013032702 7200 3600 24796800 3600
isc.org. 7200 IN RRSIG SOA 5 2 7200 20130425232807 20130326232807 50012 isc.org. VUNX2GUQOYE9NiplnquB4avjCZr3/BsIVw6qBK0hHT3klQSILJufxB4r hhh57vpX+RMmyzO8rJFUfff8+ARTgFK5Uo9LEIYOuwRXHGm/ItmMSXJt VkVLyKo3G0B99Hlud2XiXO+MGorSZY1qkSNQKtP3xzsVpOE9Ls v+gre5 0vY=
;; Query time: 140 msec
;; SERVER: 193.189.160.23#53(193.189.160.23)
;; WHEN: Wed Mar 27 15:31:26 2013
;; MSG SIZE rcvd: 257
$ dig +dnssec any isc.org. @193.189.160.13
; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.17.rc1.el6.3 <<>> +dnssec any isc.org. @193.189.160.13
;; global options: +cmd
;; connection timed out; no servers could be reached
$ dig +dnssec any isc.org. @193.189.160.23
; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.17.rc1.el6.3 <<>> +dnssec any isc.org. @193.189.160.23
;; global options: +cmd
;; connection timed out; no servers could be reached
|
|
|