[dns-operations] New DNS testing tool: Check My DNS (in development)

[Jerry Lundström]

Hi,

On 10/09/16 23:13, Sonic wrote:
> On Sun, Oct 9, 2016 at 10:23 AM, Jerry Lundström <jerry at dns-oarc.net> wrote:
>> Since you only have IPv4, did you explicitly set Unbound to not use IPv6
>> (do-ip6: no) ?
> 
> Yes.

Thanks for letting me know.

On 10/09/16 16:05, Niall O'Reilly wrote:
>> with no qname
>> minimization the dnssec and tcp connectivity tests always pass,
> 
>   that's what I was seeing
> 
>> with qname minimization enabled dnssec always fails
> 
>   also for me

Interesting observation, this might be an issue within Unbound but I
need more time to test which I currently don't have (need to prepare for
OARC 25 in Dallas).

If you would like to dig deeper into this then I'd recommend running
Unbound manually to get detailed debug output of what it is doing:

  unbound -d -d -v -v -v

Double -d to get everything to stderr and 3x -v to get enough
information on what it is doing (additional -v will get you even more).

Cheers,
Jerry