Re: Inline-signing / dnssec-policy: Signed SOA serial diverges from source serial causing monitoring warnings

Ondřej Surý <[email protected]> Tue, 21 Jul 2026 18:36:53 +0200
Newsgroups gmane.network.dns.bind.user
Message-ID <[email protected]>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