Re: how to get differing DNS results

Paul Wouters <[email protected]> Wed, 12 Mar 2003 14:06:47 +0100 (MET)
Newsgroups gmane.network.freeswan.devel
Message-ID <[email protected]>
On Mon, 10 Mar 2003, Michael Richardson wrote:

> Copy and edit the files that you want. If you want them DNSSEC signed, then
> you should add them to the Makefile. To sign them, you'll need at least bind9
> snapshot 20021115. DO NOT USE BIND 9.2.x.
> 
> Each UML root has a testing/baseconfigs/xxx/etc/bind/named.conf. Copy this
> to your test case. Your test case should be starting named manually anyway,
> so add -c /testing/pluto/my-test/named-east.conf or whatever.

Note that you can't securely resolve against the authorative nameserver. You need
to run another caching nameserver for that. (bind9 doesn't verify zones from disk)

Paul