<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
Hi Carlos,<br>
<br>
I am running VirtualBox on Snow Leopard with an XP guest. I have
it configured with vbox NAT, and I have a recursive DNS server on
a separate LAN through a router.<br>
<br>
Using dig +dnssec @<dnssec recursive server> isc.org, I am
able to get a response with AD set and a 1458 byte response, so it
appears to be handling EDNS and >512 byte responses properly
through NAT.<br>
<br>
Can you describe your configuration a bit more? Are you performing
recursion/validation within the VM, or are you sending a recursion
desired message to an external recursive server?<br>
<br>
A pcap dump of vbox communication would also be useful.<br>
<br>
Cheers,<br>
<br>
Matt Thompson<br>
HexWave Software Systems<br>
<br>
<blockquote
cite="mid:AANLkTinbhUJJxwEQBrQ+OzzbG7uGRyZXTdjcyVpzV5AY@mail.gmail.com"
type="cite">Hi all,
<div><br>
</div>
<div>I am building a set of virtual machines for a a DNSSEC
training course I will be teaching early next year. These VMs
are right now running under VirtualBox on a MacOSX (Snow
Leopard) host.</div>
<div>
<br>
</div>
<div>I've noticed that if I configure the VMs network to be
"bridged", DNSSEC validation works just fine, but if I move it
behind VirtualBox's NAT, I start getting "broken trust chain"
messages and most queries fail.</div>
<div><br>
</div>
<div>Any comments will be greatly appreciated!</div>
<div><br>
</div>
<div>regards</div>
<div><br>
</div>
<div>Carlos<br clear="all">
<br>
-- <br>
--<br>
=========================<br>
Carlos M. Martinez-Cagnazzo<br>
<a moz-do-not-send="true" href="http://cagnazzo.name">http://cagnazzo.name</a><br>
=========================<br>
</div>
<pre wrap="">
<fieldset class="mimeAttachmentHeader"></fieldset>
_______________________________________________
dns-operations mailing list
<a class="moz-txt-link-abbreviated" href="mailto:dns-operations@lists.dns-oarc.net">dns-operations@lists.dns-oarc.net</a>
<a class="moz-txt-link-freetext" href="https://lists.dns-oarc.net/mailman/listinfo/dns-operations">https://lists.dns-oarc.net/mailman/listinfo/dns-operations</a>
</pre>
</blockquote>
<br>
</body>
</html>