Should I be signing my ip6.arpa. zones. Is ip6.arpa signed, and is so how do add my zone to the root. -- John Allen KLaM ------------------------------------------ If you are out to describe the truth, leave elegance to the tailor.
Am 04.02.2015 um 19:06 schrieb John:
Should I be signing my ip6.arpa. zones. Is ip6.arpa signed, and is so how do add my zone to the root.
i never ended reading the the ripe doku but anyway it may help you http://www.ripe.net/data-tools/dns/reverse-dns/how-to-set-up-reverse-delegat... http://www.ripe.net/ripe/docs/procedure-for-requesting-dnssec-delegations Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Marc Schiffbauer Aufsichtsratsvorsitzender: Florian Kirstein
Am 04.02.2015 13:06 schrieb John:
Should I be signing my ip6.arpa. zones. Is ip6.arpa signed, yes
and is so how do add my zone to the root. as usual, $your_prefix_reverse.ip6.arpa. is a normal zone.
Thanks for the question. Looks like (only my?) sixxs setup is broken. I think, zones available via sixxs *are/where* dnssec capable. But my zone isn't :( investigating ... -- Andreas Schulze Internetdienste | P252 DATEV eG 90329 Nürnberg | Telefon +49 911 319-0 | Telefax +49 911 319-3196 E-Mail info@datev.de | Internet www.datev.de Sitz: 90429 Nürnberg, Paumgartnerstr. 6-14 | Registergericht Nürnberg, GenReg Nr.70 Vorstand Prof. Dieter Kempf (Vorsitzender) Dr. Robert Mayr (stellv. Vorsitzender) Eckhard Schwarzer (stellv. Vorsitzender) Dr. Peter Krug Jörg Rabe von Pappenheim Vorsitzender des Aufsichtsrates: Dirk Schmale
"J" == John
writes:
J> Should I be signing my ip6.arpa. zones.
J> Is ip6.arpa signed, and is so how do add my zone to the root.
ip6.arpa itself is, as are the zones controlled by the regionals.
But most of the ISPs do not bother to sign theirs.
Sixxs uses dlv to secure any of its intermediate zones which are
parented by unsigned zones.
If your parent zone is signed, ask them whether they'll publish your DS.
Otherwise using dlv.isv.org is as good as it gets.
-JimC
--
James Cloos
participants (4)
-
Andreas Schulze -
James Cloos -
John -
Robert Schetterer