[dns-operations] Verifying that a recursor is performing DNSSec validation

Frank Bulk frnkblk at iname.com
Tue Jul 14 05:08:08 UTC 2015


Is there an existing tool, ideally a NAGIOS-friendly one, that performs a
check against a resolver that it gets an AD back on DNSSec query for a zone
that is properly signed, failure for one that is not properly signed, and
nothing for one that isn't signed?
http://docs.menandmice.com/display/MM/How+to+test+DNSSEC+validation

I'd rather not re-invent the wheel if it already exists.

Regards,

Frank Bulk





More information about the dns-operations mailing list