[dns-operations] signing a zone with NSEC3 records.
Ravi Kondamuru
ravikondamuru at gmail.com
Thu Sep 10 19:07:50 UTC 2009
I tried using a mix of algorithms. I cannot seem to mix algorithms when
signing zone to use NSEC3
# 1. Generate RSASHA1 keys
fbsd63# dnssec-keygen -a RSASHA1 -b 1024 testnsecnsec3.org
fbsd63# dnssec-keygen -a RSASHA1 -b 4096 -f KSK testnsecnsec3.org
# 2. Generate NSEC3RSASHA1 keys
fbsd63# dnssec-keygen -a NSEC3RSASHA1 -b 1024 testnsecnsec3.org
fbsd63# dnssec-keygen -a NSEC3RSASHA1 -b 4096 -f KSK testnsecnsec3.org
# 3. Copy all DNSKEY recods in the zone file.
fbsd63# cat Ktestnsecnsec3.org.+00*.key >> testnsecnsec3.org.db
# 4. sign the zone with both the keys and opt for NSEC records: generates
the signed domain
fbsd63# dnssec-signzone -o testnsecnsec3.org -k
Ktestnsecnsec3.org.+005+64081.private -k
Ktestnsecnsec3.org.+007+19293.private testnsecnsec3.org.db
Ktestnsecnsec3.org.+005+64917.private Ktestnsecnsec3.org.+007+56312.private
# 5. sign the zone with both the keys and opt for NSEC3 by using option -3:
does not generate a signed domain.
# indicates error: NSEC3 generation requested with NSEC only DNSKEY
fbsd63# dnssec-signzone -o testnsecnsec3.org -k
Ktestnsecnsec3.org.+005+64081.private -k
Ktestnsecnsec3.org.+007+19293.private -3 bb6945e66c82b958763f5fb69f745a78
testnsecnsec3.org.db Ktestnsecnsec3.org.+005+64917.private
Ktestnsecnsec3.org.+007+56312.private
dnssec-signzone: NSEC3 generation requested with NSEC only DNSKEY
Am I doing something wrong in step 5 or is it not possible to do (5)?
With step 4, I got a signed domain inline with what you have attached in
your email.
thanks,
Ravi.
On Thu, Sep 10, 2009 at 11:35 AM, Edward Lewis <Ed.Lewis at neustar.biz> wrote:
> At 11:12 -0700 9/10/09, Ravi Kondamuru wrote:
>
> I understand that on an authoritative server ZoneA can be signed using
>> RSASHA1
>> algorithm and ZoneB using RSASHA1-NSEC3-SHA1, but it is not possible to
>> have
>> ZoneC signed using both RSASHA1 and RSASHA1-NSEC3-SHA1. ZoneC has to
>> choose
>> one of the two.
>>
>
> You can't do NSEC and NSEC3 in the same zone (because a server has to know
> how to handle a negative response situation and that is keyed on the
> presence/abscence of an NSEC3PARAM RRset at the apex).
>
> But you can mix algorithms. Note that the only difference between RSASHA1
> and RSASHA1-NSEC3 is the algorithm number.
>
> See the example below:
>
>
> $ cat tld..signed
> ; File written on Thu Sep 10 14:32:59 2009
> ; dnssec_signzone version 9.6.1
> tld. 518400 IN SOA a.gtld.tld. hostmaster.tld. (
> 1000000 ; serial
> 900 ; refresh (15 minutes)
> 900 ; retry (15 minutes)
> 604800 ; expire (1 week)
> 86400 ; minimum (1 day)
> )
> 518400 RRSIG SOA 5 1 518400 20091010173259 (
> 20090910173259 48162 tld.
> fh35qvcxhAWFyJtZ80Y2fLVvTsnKNTYvtmso
> WxhnyQN36hEYtdsmRu3J5RxFAhHGkNdyc1hN
> FeL6qLWqU8BSgUjZ1g0X9jz/fypUV99dOYlq
> UvWzLVqdsVeAMcWXMcH7z4Cqhe9Jo5qQR5Yg
> VgUiK5ln9Ud59vc7Ap9xL1KlA1o= )
> 518400 RRSIG SOA 7 1 518400 20091010173259 (
> 20090910173259 55238 tld.
> GtGMOrtyC7k1Jyc1dHJhhXRvv3NpjU5ugIki
> maRaua/+L3Rt9GzLJZUhoYLus6k1gSmECorW
> XB6JL65Qw5Hg1bLSQgHgcUaZVdlAs1oNOTPs
> Ourx2Hrfuvr9pFuiXmGqKCE1QjO0zk7w3WF7
> QdOPTmQGVlgQCVu9ZgAx5OVpHuc= )
> 518400 NS a.gtld.tld.
> 518400 RRSIG NS 5 1 518400 20091010173259 (
> 20090910173259 48162 tld.
> ciwi1WzgCMY2nFtL9U8IlSLuPpsdY0FpQoEI
> Wn6YyyV3MMBl4j6egSaBmY+SU3U+pznEIN/k
> oca3y12e6V2DhhRn86TF9VpM8s6yYy56/0ee
> JgGVkY+IeN4tge9DkzF/MLSU0zpGKehQ+Dxa
> DCbnANmgIRWRxJ5/XUqg484BOWw= )
> 518400 RRSIG NS 7 1 518400 20091010173259 (
> 20090910173259 55238 tld.
> OHnoZEiREaVkx5MpVGGyXkEY6XVKk0mE6u4L
> rxy62LcZ0ftnliF8Egcqhh1RQ3PgK+B/BYO5
> ahWPhxeHYrjASTdNwFx6T5OaOsPOj1jc6FQl
> V8C9COLxxEy0pQJ9UetAeQN3de93IaEY0ypK
> ja3Hw2EuPZ2IKkPpxyvnY1rChDs= )
> 86400 NSEC a.gtld.tld. NS SOA RRSIG NSEC DNSKEY
> 86400 RRSIG NSEC 5 1 86400 20091010173259 (
> 20090910173259 48162 tld.
> VTmcj+236AX9LEBue6UU+7PdKTBFLwaRd8aY
> PBP9NUZV64NR0XhCwm0N6jGbQ1DviiNUlhs6
> fDXKNEGTMBnuh9u2fJkIObw8EZWL3aOORxP3
> qUWL/17pY7yVzx+3ZinfPH8esQlHCvdmOUeQ
> vPZAAGaDJ/BNuomochdtG543oSE= )
> 86400 RRSIG NSEC 7 1 86400 20091010173259 (
> 20090910173259 55238 tld.
> kfi8Kjvbtbtx9abMogxa6eUAuegbZ5uLF17M
> 9n/VK53tF00u+0Vle1rNykrFX/h5RHgEnXe+
> HZOxb6p2zv9LBvqsOGjFSLAa5aKOXps9lnph
> Rd7R0xApIJS1aw/Y1ddQQmepBR9uOfiGb2x5
> VGonEBDnIUUzQX/nv5RN66nJtc8= )
> 518400 DNSKEY 256 3 5 (
> BEAAAAO3njuWLL8PY7fdvDBHovnMl8EcuKik
> 2aza6L8nY+n/gAFCtdNSqXxVsadSkHNsPS6K
> lDD+ZHhXirxL8SmIS3V/2fSljizpOuJNwYiV
> FDcrTaIoaZLFiCoZkFj0BjB6lQVimdJ+2gGH
> zeWTrSVkrVlSRFCWJk8c3CiFXbwQG5/aBw==
> ) ; key id = 48162
> 518400 DNSKEY 256 3 7 (
> AwEAAfmMbaj/5Azq3CQuI50q39Dbs60HD70a
> 1kgtt8LlloWksK6GJbLR6fLSGyvqixesMIdw
> 4Wr7REdkkJ73TtqEAAZi12+gNTwi7IxigI2x
> N9NeYufcNJ8RcVyEk217Y+hxI/yxm4I9jtCO
> r86uRGuj8bv+6Tka6lC6Uz9OE2Gh4ZpN
> ) ; key id = 55238
> 518400 DNSKEY 257 3 5 (
> BEAAAAOz+tAF3EEj0lVu2q7/N3Hdn+Yziv7T
> 42BGEi2hWohJ9IHOHoHnKRvp2+VzphrFl/t0
> 6IUtLxbSK23e4O2zG1NJ6jhRAM1JOKnC5N2S
> kOT0AGuH575HSfm5RJdPapcdVpJnl4snCwbY
> 07Ye9CogyFEKHlKagagsqdW1GL4gMcrxG9V9
> E5E0g4eNhiLCAZ81suQWVuGnaphGF3MhzX5T
> UGdY5H82ZWOyY7XN7hCDtB/DXasRATJurDJD
> VAEi7zn7yZdTCpTl1ndrcSwUii4ZliiGIaQG
> GWmj5WiZk1Wbpaf1pWgkrcyB7Jftdjkted2u
> tJGwTzNxPM7cpzcYkEptk2v5
> ) ; key id = 15178
> 518400 DNSKEY 257 3 7 (
> AwEAAdgPOvdRGgmJxIyZc3XEcLKXFFgRFFtD
> IvBqJOVkj6jGKmelWypWgqvcn3YD5nqCxhe5
> 1wvgxPd1bjYvSDiI61Kvd6vc21eR3Z641mMM
> jGEv8NyJv53nlrXPIUrPGATlh6wJNOGZ/WVJ
> hhIRrxNBHazKMqXWaRw+lG4GvEtz4h48+k3u
> QfDr+gk1Z4m7Jf4mp3XRXZYA50Fm5iGxybjb
> 0ecigAlLbgdtAnoXhEOUNY/ZQsYKhFA//z1y
> wvhvr3/ujXULkkP5uDbSIHqObqjfMRu6Y/Aa
> CyY/pr80sbsMF/tabd5xnR5/Du32XJMpM9Tw
> NWv+aOTc2cGjNUIiyxcc3NE=
> ) ; key id = 25044
> 518400 RRSIG DNSKEY 5 1 518400 20091010173259 (
> 20090910173259 15178 tld.
> a9OjS6kmFc1pSYLTMi1j5xbBG+3SgN/WJ25R
> K7NidX0CMhyMtNHeA5rqyI1E6pTasTqeePOj
> jsEW6H8YuZ2OgJmulpZzIDXAGJlY0qVM01zd
> QSE4mzk20WXyiOykZhORB7OnPupNwmrWCZmv
> JWOPb/Eht5UVc9cghMepr+CQ8DI2qrlCtfJ7
> Up5Pa1RS5b2UTC0fKncXZwnRZXI/qGuDN1Sw
> cmlX5PlRx5D0hywGEJnK9MbgiR3Ds0zfqsM/
> d+DApbarBNHIyR9f0Wj6cBun6yd8lpzAzCll
> kqLquzmGidqqzITpWXnFZ51Ibt2RoFx0c/7Y
> N3vXlbCxqbYRNt7ACQ== )
> 518400 RRSIG DNSKEY 5 1 518400 20091010173259 (
> 20090910173259 48162 tld.
> KT7h9cexgtvAXWAnZsOmNIpta/ch1D+O1Y2V
> ghBrJoZ7p9czxxYDuA9ice5W/LAq3w0W4PKf
> fbgTYQMZdizLfsbk0ums/ddymAO+jnjT+QuF
> X23sf0P3a/DazSnMLWgvliadc0YECW8P30E7
> 9R+6VkRlyrXpa5T0cJKaG6BMZSE= )
> 518400 RRSIG DNSKEY 7 1 518400 20091010173259 (
> 20090910173259 25044 tld.
> PhbUW1d/o4j4C9BgkG52sMsALsQBvVEPAWow
> D4v8eq8ggtq3owtwT0jkSx0MXXec+KCQ8yfm
> 5zHx3VHKuFThJlJGqAPk90OFO0ylGF7fYY9f
> E0zP+7RbvjBksYfoi7axaxpW8lEfv8McZbNC
> bSdlRDuG3lwh9R2DBceImmnFHlGoiWzpuMzH
> kSKxNXQ/P4jfAViKagNEaza0I6HH+852a/gy
> IWNW5HK+QhqYjnXuxvYASku83NUNKedhUR9H
> HLKfyT6i+ROUF1eFuGdDOLYa9AQ5duxWy3M6
> Z9DnbcYvKvYiGgLEAdaLQpzxeMV9PkcvFd+b
> FFoKAEAUMs+btF/H9Q== )
> 518400 RRSIG DNSKEY 7 1 518400 20091010173259 (
> 20090910173259 55238 tld.
> GLYtiHmXlGDDAxtLKRmMCD4K6FT/Tw8vDciv
> 7LX78mQsU7OjSIjR0PhZYRlu7DgZWUu72dNp
> chymfoRfOHOApajwLXs9FqV5s5gKJnXSZ1nc
> AZ9TJZERQgP27rhrPfouVEaLVWM21AYLB9No
> /oJD25RwJi3jBwrSTNFrjD3Eh8E= )
> ns0.n0.tld. 518400 IN A 127.0.0.1
> ns1.n0.tld. 518400 IN A 127.0.0.1
> ns0.n1.tld. 518400 IN A 127.0.0.1
> ns1.n1.tld. 518400 IN A 127.0.0.1
> a.gtld.tld. 518400 IN A 127.0.0.1
> 518400 RRSIG A 5 3 518400 20091010173259 (
> 20090910173259 48162 tld.
> SZ6j3Ldw3IDZUTG9bESIfA+h7czdBsNz1ssm
> FZvJG3y6L2GBQxuZz2mC56UXtdoClXbRp5sS
> 1rgcnSVYwRMD8gmCP/AcNv79URi3Vn6Y1CaI
> MhPS7EmVkzXhpaVNMyWx/1dMISr9b1u+/l7j
> cgCrcTatWPCAlOwAeldSIkUI/48= )
> 518400 RRSIG A 7 3 518400 20091010173259 (
> 20090910173259 55238 tld.
> TTCcl5k76cMRElWIFEExzqLJIYBN6UbvUnFQ
> Q+eWojU2uP3kQV2SOyYX7lBa3h8Jt71z9DWK
> TctNoOfVIjYc/ZtNr4lTkIDJXnSGjrKu5hVV
> mPqxyCvYrOmq39LAU36MTsikciYylbQ4zNIg
> GUoG7yAeOodXIKsWQG+yBXhYRbI= )
> 86400 NSEC n0.tld. A RRSIG NSEC
> 86400 RRSIG NSEC 5 3 86400 20091010173259 (
> 20090910173259 48162 tld.
> mQtM3WYDY06Wk/9FDCYhsKONNzbL+IVtXNwb
> 0IuSTTvXjj53mS1RAADXAFO09Jy1xd3sZLxS
> ATj6kHkF0/5AzdDAv1gMT9rtMNLZFJ0kgaWm
> 3eFRZsb7KsqcmSs2tMH7sc9Hoyq8PRuZwNi+
> YUrDwXXfp9uGsbkxpZDENzEXZ90= )
> 86400 RRSIG NSEC 7 3 86400 20091010173259 (
> 20090910173259 55238 tld.
> FwDBgrnzDhU36qRpt+xm3gtk3Wa1BdsLpGrJ
> pxyO+wG8uONaxSZTEClxqzE3g/2PjF9Czh6g
> G826D5YV55SSarPv2R2xFCzaBeNpkxLLwbCl
> VNal62vlATpt66WZOwd6188guQxGgaDqD9CI
> AIQpfRdq/ObWsrOMavwrVeeWHts= )
> ns0.n2.tld. 518400 IN A 127.0.0.1
> ns1.n2.tld. 518400 IN A 127.0.0.1
> n0.tld. 518400 IN NS ns0.n0.tld.
> 518400 IN NS ns1.n0.tld.
> 86400 NSEC n1.tld. NS RRSIG NSEC
> 86400 RRSIG NSEC 5 2 86400 20091010173259 (
> 20090910173259 48162 tld.
> ZN3i5gz7WFdRkRMfifXCfJ3H3G119EyqsqPc
> ohwQD36feCDbB+cD+6f/RE+FU6FGOzfqhp31
> 6iWOyumPOBq3Y7qd31fYCrf0X57tocj+6StR
> j722wUc6OSutrAgv3TElQ2pZ6VaVCRYob7Nv
> 6iodhOBY37iiidt8bB1Cqlgskzw= )
> 86400 RRSIG NSEC 7 2 86400 20091010173259 (
> 20090910173259 55238 tld.
> JoR1S9Ugc8FYqxsKHSkslfWE6Di14Zz68p8W
> j5Au+Qf2Eueex9mDJE3AJa8sgewgAshsjVk/
> j5a3N/Cv+Fh0BFkW6P7A0JKGp8KTsaIHdND5
> kp95lZGOt8cWOE6oc3cDe18hJg/MIL0o1I5D
> Nj5Fv+myYzvq85uJD+Te20csYG8= )
> ns0.n3.tld. 518400 IN A 127.0.0.1
> ns1.n3.tld. 518400 IN A 127.0.0.1
> n1.tld. 518400 IN NS ns0.n1.tld.
> 518400 IN NS ns1.n1.tld.
> 86400 NSEC n2.tld. NS RRSIG NSEC
> 86400 RRSIG NSEC 5 2 86400 20091010173259 (
> 20090910173259 48162 tld.
> NH3RkSff6CVh5azLbyQ5lMKoc6PTf77oPG94
> 0M9NzMS238ZWlI8Y+By6yauam46luTGpVEhK
> noY+sF18iPbMBUQCjB39iId/BVhw5XzXxmAD
> jYVkbOSU1iOtIHW3vSMVFOle2i/xrV1EnEUu
> U18254dt3PKePntcgGOwS5jKh2U= )
> 86400 RRSIG NSEC 7 2 86400 20091010173259 (
> 20090910173259 55238 tld.
> KDnPQTVoyLakxjlEOQKQsjgq2PwiFZsd9x/N
> V2CE8lRL0aUuluzrlHc0d4RZ0K9xMSSCRvDT
> +oUW5THdTPRkc5IMhMdzvqnvUG8oK2KGzZf9
> kZo6VCnbm8hzghYNFQbSqF0jCrSC6xSP1wVb
> /if0IdyVHjE1PMtk9R16ozPVFkY= )
> ns0.n4.tld. 518400 IN A 127.0.0.1
> ns1.n4.tld. 518400 IN A 127.0.0.1
> n2.tld. 518400 IN NS ns0.n2.tld.
> 518400 IN NS ns1.n2.tld.
> 86400 NSEC n3.tld. NS RRSIG NSEC
> 86400 RRSIG NSEC 5 2 86400 20091010173259 (
> 20090910173259 48162 tld.
> sPWyGt70zgZZESXjwNpE1dQf09saBUY53vPe
> mZeXOPFpdWQdy3sfuhfPAkSeL80fNzqBTmXW
> mMAB2YSJTMfnuCp4FlDb7hO2Q1PR7ggJOoV1
> dE8VoD7QCDZogG8yqz2KljIPgPdX+LeYyu9D
> 3zujL2SO/frJnlG8iuPdsvIPssQ= )
> 86400 RRSIG NSEC 7 2 86400 20091010173259 (
> 20090910173259 55238 tld.
> FvQl8tnSFcPsTsjSoagsA7KstJltK+Z5DW75
> Oan4KmnzBdXSiiYiGK/aBlgQLOZ/FP30Wxif
> BvWBhcgn9JY3Mevndfdub746KG2w/sWfjJR/
> 3eeFM/Se+uvVMugk4urtzfNi3Rc6oYCK/m47
> TUCLLqmf1kKTTYBNRPOddeA00a0= )
> ns0.n5.tld. 518400 IN A 127.0.0.1
> ns1.n5.tld. 518400 IN A 127.0.0.1
> n3.tld. 518400 IN NS ns0.n3.tld.
> 518400 IN NS ns1.n3.tld.
> 86400 NSEC n4.tld. NS RRSIG NSEC
> 86400 RRSIG NSEC 5 2 86400 20091010173259 (
> 20090910173259 48162 tld.
> OmypXg7CT1p+26QJeI6Kkv3ylYtjFSPnmj4B
> oCRsN7zXgsZeqHzDOjwyU0QcJETC9SW8qH47
> k1H9hN+/91ne31CKVFdjMHCfgqi18PA98lgw
> OU89MsZb9zEYmog2PjwksHY6dqS893llOaLo
> ZwX6UrEH88gh+MZe1uTixSKHXMQ= )
> 86400 RRSIG NSEC 7 2 86400 20091010173259 (
> 20090910173259 55238 tld.
> WhZOZegNAugM8lM5lbBgiA47iv3PazLx2L4y
> xCiGYmk/a4BXV3dJxtDHZoREkUynPEoNTKL6
> AwtmITwqBk4ZzchBNZLsynQq0JAB/QUdKgIT
> 8I3KMsRMCY+g5LkdmRf7Zn+DPXFv2FnKZtCM
> 4Hix3EZX9F5LC12pxEWpAGASkw0= )
> ns0.n6.tld. 518400 IN A 127.0.0.1
> ns1.n6.tld. 518400 IN A 127.0.0.1
> n4.tld. 518400 IN NS ns0.n4.tld.
> 518400 IN NS ns1.n4.tld.
> 86400 NSEC n5.tld. NS RRSIG NSEC
> 86400 RRSIG NSEC 5 2 86400 20091010173259 (
> 20090910173259 48162 tld.
> F2AmxnGNsI+xzw8j1IPE5zUkPRSWEv3+optY
> clEaPtXzd5R0SeAvcPuWjFApkEQDf+bMPA3f
> VdB+QubitaPy7cy6dViVqaQ1FTlp/ppWZWGs
> F0x35SXFFwb+yE+MZWrs0bJkVtSJ1g0k13Fu
> TuhlAA9sfHHnaZDGCP7uOE2E8ak= )
> 86400 RRSIG NSEC 7 2 86400 20091010173259 (
> 20090910173259 55238 tld.
> GEnElrZOW+8a8MSVdbtIwv+CAJ3cuHmC9PbA
> vyDjhOu+xqOR2shGrI5IleiTRVWRLaICrD7V
> dv6Za7YKrawkWU8Gq96vWlDAQVlw50xB49Ay
> RDdqm5cT+F499xNL27Cz03pv45twYtDRixE2
> 4Olne4RWlvBRU1vRIxDHZtmShY8= )
> ns0.n7.tld. 518400 IN A 127.0.0.1
> ns1.n7.tld. 518400 IN A 127.0.0.1
> n5.tld. 518400 IN NS ns0.n5.tld.
> 518400 IN NS ns1.n5.tld.
> 86400 NSEC n6.tld. NS RRSIG NSEC
> 86400 RRSIG NSEC 5 2 86400 20091010173259 (
> 20090910173259 48162 tld.
> HdquVW48VASotbN1ku7Ito2kLLtXs9G6Clpm
> I59VECakH/zpJ6M7bKAK6VXMLeU+aVol0PVQ
> oIoOTUCJ0k8YtY3YPcoV09nGdZIHKKv/5Qr4
> vs1kCzu514nQldGYRKONe1FsRDAKzU4O0tb6
> 2zHJMDQnl7/XFKaNUis0CMHmNzo= )
> 86400 RRSIG NSEC 7 2 86400 20091010173259 (
> 20090910173259 55238 tld.
> FMC3NLbpl5PtZ1rF0aG0GKi8bXo/tk2tQPvG
> vt2n6W5XOp2bA9dDNvas2+9k0+rG48d4dnrz
> 3CospdxlzVDuH7HABzp0RAvDarCa/M6A0jre
> h90thiD5oXyrTrSLJV6j9H51GmPAFTTjFOmg
> POja85lhAExNNXtwB8V2dqY293E= )
> ns0.n8.tld. 518400 IN A 127.0.0.1
> ns1.n8.tld. 518400 IN A 127.0.0.1
> n6.tld. 518400 IN NS ns0.n6.tld.
> 518400 IN NS ns1.n6.tld.
> 86400 NSEC n7.tld. NS RRSIG NSEC
> 86400 RRSIG NSEC 5 2 86400 20091010173259 (
> 20090910173259 48162 tld.
> ACQQm3fihmm3oJC3eTMaYl8dwlCWFBKiaIsx
> qumYcT6W3ZGe6L5eV4SCsJpiAjInBQwXi7sw
> ILLp0/e/36Uj/Wh/AU03qYA5qBrwDix7k0iP
> sX9ovOlVb2EUgXdtMA+r+T9B3zXM+Rdss4e0
> s5O8/q67DxMAyjtbPljRCQ15Y5w= )
> 86400 RRSIG NSEC 7 2 86400 20091010173259 (
> 20090910173259 55238 tld.
> eTKjTFdKsGQ9jnTthME/1dC2vvvOD290B+S5
> aIdoNwN/gHZzk6ClM2fHGkfi22uXuh/fNFUx
> ZhNTulDuu+cewhqzy1BziuDzXCJP7boDxQRG
> EJlW2Eqcj+OnLVrjXBItBRc9NjDSH9QUPJKj
> HNG6H8nqFzae7/GB0qjrhLciRDs= )
> ns0.n9.tld. 518400 IN A 127.0.0.1
> ns1.n9.tld. 518400 IN A 127.0.0.1
> n7.tld. 518400 IN NS ns0.n7.tld.
> 518400 IN NS ns1.n7.tld.
> 86400 NSEC n8.tld. NS RRSIG NSEC
> 86400 RRSIG NSEC 5 2 86400 20091010173259 (
> 20090910173259 48162 tld.
> cZA6sFqKjsSPsmX+/ZLkeTbOiMKXBZVqk21d
> bH0LVKVI/3sXoWN89XGKCPGFlHt+vHYbZMeY
> d1GwO7UCpzAYa60UFlWOwemf6ShNpOtV1dUZ
> zmg9/pNvHtzhkJHp3FWZ1ovsujeSgk+/EhiO
> W9FjRwDBhPXgkGM8oTwrRefwR44= )
> 86400 RRSIG NSEC 7 2 86400 20091010173259 (
> 20090910173259 55238 tld.
> KkCsCmic7AeRmZ3PZj7HCSLaSO8uQZANdG1I
> qQGzuzVb3VIwE+hOXK/xU0KCIrCXCHV6iAZO
> GQdtRZ7T/Ifja00vt+vl3F7jq5hAXHCHbnxt
> uyiOAjTkCHyBBZLjiYJ4h1DbuwgmuTRRODHK
> Uj93xb5rhl1mjeEYXH/LKKXaeiM= )
> n8.tld. 518400 IN NS ns0.n8.tld.
> 518400 IN NS ns1.n8.tld.
> 86400 NSEC n9.tld. NS RRSIG NSEC
> 86400 RRSIG NSEC 5 2 86400 20091010173259 (
> 20090910173259 48162 tld.
> r5zGeJjIMYJIpXA3iP8NIaVm+FTIdCgcwFtk
> JFeLICMdg47o+s5hYTbOg6WdDe3xt/YK9PCm
> BEyS79rSCAmiv73oN63Q3qtdJXOjLvWQvNb0
> 9wophRtnr3z708g8ahsN8BKvL9uotfcAi7Vf
> KQgb2P9SF3Ub7PYwlhAp2EF7i/E= )
> 86400 RRSIG NSEC 7 2 86400 20091010173259 (
> 20090910173259 55238 tld.
> z8k/B61a6n/sKVfWpUYr4TQRIPb/0HNYohZO
> 7IPSm03FcYg0vg4Z+tYJDk5frhWR91HAlGim
> QkzTey/ZhKvqPAts7jjOygqTIrLpyQPoFmym
> R6lpErMiPkm7j5gVIUCq/o9EfwOhGdkSKIIT
> CZQunhdGMGG9+uDGmcdPDweEdrc= )
> n9.tld. 518400 IN NS ns0.n9.tld.
> 518400 IN NS ns1.n9.tld.
> 86400 NSEC tld. NS RRSIG NSEC
> 86400 RRSIG NSEC 5 2 86400 20091010173259 (
> 20090910173259 48162 tld.
> HckPcSw6ZT78PzUOksI3QDMcoqd5CkjoTzPf
> 3XIH4+yr/RTmXIhXqeMsyHqPt1CTOsAj55MB
> 9PH9NKnJehMlLPgZ3G6kMc98M3Atbrq+Fggq
> z/308PJc0Pakxs4y22jIUl2QGEjRYU52g5WI
> kqRYLUSLclggGgkE5hjReLsTSUc= )
> 86400 RRSIG NSEC 7 2 86400 20091010173259 (
> 20090910173259 55238 tld.
> YQwSthd4fIG+L8xYMCuFnM7cuDqgNHhiZkHE
> 75d3u4qMmgW0ym4eWcFRZ5JoXsTUa+XUae0h
> rBptie1WX3kmR+dfGdRETDa/gfNkWIqGwh/T
> XlEUTg0GMlYHkpivNZo/DqGKoX+RhD2IxgZS
> YLYAXluCbwYhZGI1J3g33UKs0x4= )
>
> --
> -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
> Edward Lewis
> NeuStar You can leave a voice message at +1-571-434-5468
>
> As with IPv6, the problem with the deployment of frictionless surfaces is
> that they're not getting traction.
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20090910/8c8a6f3a/attachment.html>
More information about the dns-operations
mailing list