search

bortzmeyer / check-soa

A simple command-line DNS testing tool
33 stars 3 forks source link

Depending on the local resolver has some consequences #3

Open bortzmeyer opened 11 years ago

bortzmeyer commented 11 years ago

check-soa uses the local resolver to retrieve the list of NS.

For instance, if the local resolver validates with DNSSEC and the domain is broken (.MIL, today), the message is spurious:

% check-soa mil No NS records for "mil.". It is probably a domain but not a zone

(The SERVFAIL in response to the NS query was misinterpreted)

bortzmeyer commented 9 years ago

The new option -ns solves partially the problem:

% check-soa -ns "$(dig +short +nodnssec @a.root-servers.net NS mil)" mil