[dns-operations] Alternatives to ldns-verify-zone

[Emil Natan]

validns is great, I love how fast it is, but it suffers the same issue,
last update is 3 years old. Lately I discovered an issue and had to fix it
myself, hopefully I'll find time to make the fix better and try to push it
out. Bugs fixing with ldns are slow or non existing.

We do many sorts of checks on our zonefiles but in terms of tools we use
the combo of named-checkzone and dnssec-verify (for syntax and dnssec
verification), ldns-verify-zone and validns.

There is also a tool from Verisign - YAZVS (http://yazvs.verisignlabs.com/),
but I failed to build one of the dependencies (a perl module) so I never
actually tried it.

And there is also zonemaster ( https://www.zonemaster.net/ ) which have a
great set of checks, but I never used it for pre-publication checks. I
rather used its comprehensive documentation to implement few of its checks
in custom shell scripts.

Emil

On Thu, Sep 22, 2016 at 12:42 PM, Anand Buddhdev <anandb at ripe.net> wrote:

> On 22/09/16 11:18, Abdulkareem H. Ali wrote:
>
> Hi Kareem,
>
> Check out validns:
>
> https://github.com/tobez/validns
>
> Regards,
> Anand
>
> > Hi Everyone,
> >
> > We've been using ldns-verify-zone to check and validate our zones
> > including DNSSEC validation. It's a great tool and we've been using it
> > for years, but the latest stable release is Jan/2014.
> >
> > I'm wondering if anyone would recommend any other tool that can
> > verify/validate zones and be fully DNSSEC aware that might be good to
> > use alongside ldns-verify-zone?
> _______________________________________________
> dns-operations mailing list
> dns-operations at lists.dns-oarc.net
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations
> dns-operations mailing list
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20160922/03e2b422/attachment.html>