<div id="__MailbirdStyleContent" style="font-size: 10pt;font-family: Arial;color: #000000">
Hi All,<div><br></div><div>Just want to give you all an update on how this went as I ran into issues with this implementation.</div><div><br></div><div>What I did first:</div><div><ul><li><span style="font-size: 10pt;line-height: 1.5">Enabled DNSSEC on primary domain (domain.com)</span></li><li><span style="font-size: 10pt;line-height: 1.5">Added DS Records to domain registrar.</span></li></ul><div>What worked: All DNS records under the primary zone worked and resolved without any issues.</div></div><div>What broke : All subdomain DNS zones failed to resolve.</div><div>Resolution: Disabled DNSSEC and removed DS Records from regitrar. Everything worked after a short while</div><div><br></div><div>What I'm currently doing:</div><div><ul><li>Disabled DNSSEC on primary domain zome.</li><li>Enabled DNSSEC on subdomain zone (sub1.domain.com).</li><li>Added DS and NS records under primary zone (domain.com)</li><ul><li>sub1 NS 3600 ns1.domain.com</li><li>sub1 DS 3600 xxxxxxx</li></ul></ul><div>What works: all subdomain zones resolve without any issues.</div></div><div><br></div><div>I've not yet enabled DNSSEC on the primary DNS zone. Hoping to get it done over the weekend.</div><div><br></div><div><br></div><div><br></div><div class="mb_sig"><pre style="font-variant-ligatures: normal;orphans: 2;widows: 2;padding: 5px;font-family: Gotham, "Helvetica Neue", Helvetica, Arial, sans-serif;font-size: 14px;line-height: 1.3;vertical-align: top"><span style="font-variant-ligatures: normal;white-space: normal;color: rgb(174, 170, 170);font-family: arial, sans-serif;font-size: 8.5pt">Kind Regards,</span><br style="font-family: Geneva, Helvetica, Arial, sans-serif;font-size: 12px;font-variant-ligatures: normal;white-space: normal"><span style="font-variant-ligatures: normal;white-space: normal;color: rgb(174, 170, 170);font-family: arial, sans-serif;font-size: 8.5pt">Asanka Gunasekara</span><br style="font-family: Geneva, Helvetica, Arial, sans-serif;font-size: 12px;font-variant-ligatures: normal;white-space: normal"><br style="font-family: Geneva, Helvetica, Arial, sans-serif;font-size: 12px;font-variant-ligatures: normal;white-space: normal"><strong style="font-family: Geneva, Helvetica, Arial, sans-serif;font-size: 12px;font-variant-ligatures: normal;white-space: normal"><span style="color: rgb(177, 21, 21);font-family: arial, sans-serif;font-size: 8.5pt">P</span></strong><strong style="font-family: Geneva, Helvetica, Arial, sans-serif;font-size: 12px;font-variant-ligatures: normal;white-space: normal"><span style="color: gray;font-family: arial, sans-serif;font-size: 8.5pt">:</span></strong><span style="font-variant-ligatures: normal;white-space: normal;color: gray;font-family: arial, sans-serif;font-size: 8.5pt"> </span><span style="font-variant-ligatures: normal;white-space: normal;color: rgb(174, 170, 170);font-family: arial, sans-serif;font-size: 8.5pt">1300 825 587</span><br style="font-family: Geneva, Helvetica, Arial, sans-serif;font-size: 12px;font-variant-ligatures: normal;white-space: normal"><strong style="font-family: Geneva, Helvetica, Arial, sans-serif;font-size: 12px;font-variant-ligatures: normal;white-space: normal"><span style="color: rgb(177, 21, 21);font-family: arial, sans-serif;font-size: 8.5pt">E</span></strong><strong style="font-family: Geneva, Helvetica, Arial, sans-serif;font-size: 12px;font-variant-ligatures: normal;white-space: normal"><span style="color: rgb(174, 170, 170);font-family: arial, sans-serif;font-size: 8.5pt">: </span></strong><span style="font-variant-ligatures: normal;white-space: normal;color: rgb(174, 170, 170);font-family: arial, sans-serif;font-size: 8.5pt">support@<a href="http://talkup.com.au/" target="_blank">talkup.com.au</a><span style="color: rgb(166, 166, 166);"> </span></span><span style="font-variant-ligatures: normal;white-space: normal;color: rgb(144, 144, 144);font-family: arial, sans-serif;font-size: 8.5pt">| </span><strong style="font-family: Geneva, Helvetica, Arial, sans-serif;font-size: 12px;font-variant-ligatures: normal;white-space: normal"><span style="color: rgb(177, 21, 21);font-family: arial, sans-serif;font-size: 8.5pt">W:</span></strong><span style="font-variant-ligatures: normal;white-space: normal;color: rgb(144, 144, 144);font-family: arial, sans-serif;font-size: 8.5pt"> </span><span style="font-variant-ligatures: normal;white-space: normal;color: rgb(174, 170, 170);font-family: arial, sans-serif;font-size: 8.5pt"><a class="gmail-m_8622906762729073402m_-2635113235028946856moz-txt-link-abbreviated" href="http://www.talkup.com.au/" target="_blank">www.talkup.com.au</a></span><br style="font-family: Geneva, Helvetica, Arial, sans-serif;font-size: 12px;font-variant-ligatures: normal;white-space: normal"><strong style="font-family: Geneva, Helvetica, Arial, sans-serif;font-size: 12px;font-variant-ligatures: normal;white-space: normal"><span style="color: rgb(177, 21, 21);font-family: arial, sans-serif;font-size: 8.5pt">Postal Address: </span></strong><span style="font-variant-ligatures: normal;white-space: normal;color: rgb(174, 170, 170);font-family: arial, sans-serif;font-size: 8.5pt">PO Box 24, Varsity Lakes QLD 4227</span><br style="font-family: Geneva, Helvetica, Arial, sans-serif;font-size: 12px;font-variant-ligatures: normal;white-space: normal"><br style="font-family: Geneva, Helvetica, Arial, sans-serif;font-size: 12px;font-variant-ligatures: normal;white-space: normal"><span style="font-variant-ligatures: normal;white-space: normal;color: green;font-family: arial, sans-serif;font-size: 8pt">Please consider the environment before printing this e-mail</span><span style="font-family: Geneva, Helvetica, Arial, sans-serif;font-size: 12px;font-variant-ligatures: normal;white-space: normal"> </span><span style="font-variant-ligatures: normal;white-space: normal;color: gray;font-family: tahoma, sans-serif;font-size: 8pt">This email message and any attachments are confidential. If you are not the intended recipient, you are notified that any unauthorised disclosure, copying, distribution or use of this information is strictly prohibited. If you have received this email in error, please notify us immediately by return email, or telephone 1300 825 587, and destroy the original message. We have taken precautions to minimise the risk of transmitting software viruses, but we advise you to carry out your own virus checks on any attachment to this message. We cannot accept liability for any loss or damage caused by software viruses.</span></pre></div>
<blockquote class="history_container" type="cite" style="border-left-style: solid;border-width: 1px;margin-top: 20px;margin-left: 0px;padding-left: 10px;min-width: 500px">
<p style="color: #AAAAAA; margin-top: 10px;">On 5/03/2019 11:24:27 AM, Asanka Gunasekara <asankag@talkup.com.au> wrote:</p><div style="font-family:Arial,Helvetica,sans-serif"><div id="__MailbirdStyleContent" style="font-size: 10pt;font-family: Arial;color: #000000">
Hi Peter,<div><br></div><div>Thanks for information. I have done just that :)</div><div><br></div><div>Kind Regards,</div><div>Asanka</div><div><br></div><div class="mb_sig"><pre style="font-variant-ligatures: normal;orphans: 2;widows: 2;padding: 5px;font-family: Gotham, "Helvetica Neue", Helvetica, Arial, sans-serif;font-size: 14px;line-height: 1.3;vertical-align: top"><span style="font-variant-ligatures: normal;white-space: normal;color: rgb(174, 170, 170);font-family: arial, sans-serif;font-size: 8.5pt">Kind Regards,</span><br style="font-family: Geneva, Helvetica, Arial, sans-serif;font-size: 12px;font-variant-ligatures: normal;white-space: normal"><span style="font-variant-ligatures: normal;white-space: normal;color: rgb(174, 170, 170);font-family: arial, sans-serif;font-size: 8.5pt">Asanka Gunasekara</span><br style="font-family: Geneva, Helvetica, Arial, sans-serif;font-size: 12px;font-variant-ligatures: normal;white-space: normal"><br style="font-family: Geneva, Helvetica, Arial, sans-serif;font-size: 12px;font-variant-ligatures: normal;white-space: normal"><strong style="font-family: Geneva, Helvetica, Arial, sans-serif;font-size: 12px;font-variant-ligatures: normal;white-space: normal"><span style="color: rgb(177, 21, 21);font-family: arial, sans-serif;font-size: 8.5pt">P</span></strong><strong style="font-family: Geneva, Helvetica, Arial, sans-serif;font-size: 12px;font-variant-ligatures: normal;white-space: normal"><span style="color: gray;font-family: arial, sans-serif;font-size: 8.5pt">:</span></strong><span style="font-variant-ligatures: normal;white-space: normal;color: gray;font-family: arial, sans-serif;font-size: 8.5pt"> </span><span style="font-variant-ligatures: normal;white-space: normal;color: rgb(174, 170, 170);font-family: arial, sans-serif;font-size: 8.5pt">1300 825 587</span><br style="font-family: Geneva, Helvetica, Arial, sans-serif;font-size: 12px;font-variant-ligatures: normal;white-space: normal"><strong style="font-family: Geneva, Helvetica, Arial, sans-serif;font-size: 12px;font-variant-ligatures: normal;white-space: normal"><span style="color: rgb(177, 21, 21);font-family: arial, sans-serif;font-size: 8.5pt">E</span></strong><strong style="font-family: Geneva, Helvetica, Arial, sans-serif;font-size: 12px;font-variant-ligatures: normal;white-space: normal"><span style="color: rgb(174, 170, 170);font-family: arial, sans-serif;font-size: 8.5pt">: </span></strong><span style="font-variant-ligatures: normal;white-space: normal;color: rgb(174, 170, 170);font-family: arial, sans-serif;font-size: 8.5pt">support@<a href="http://talkup.com.au/" target="_blank">talkup.com.au</a><span style="color: rgb(166, 166, 166);"> </span></span><span style="font-variant-ligatures: normal;white-space: normal;color: rgb(144, 144, 144);font-family: arial, sans-serif;font-size: 8.5pt">| </span><strong style="font-family: Geneva, Helvetica, Arial, sans-serif;font-size: 12px;font-variant-ligatures: normal;white-space: normal"><span style="color: rgb(177, 21, 21);font-family: arial, sans-serif;font-size: 8.5pt">W:</span></strong><span style="font-variant-ligatures: normal;white-space: normal;color: rgb(144, 144, 144);font-family: arial, sans-serif;font-size: 8.5pt"> </span><span style="font-variant-ligatures: normal;white-space: normal;color: rgb(174, 170, 170);font-family: arial, sans-serif;font-size: 8.5pt"><a class="gmail-m_8622906762729073402m_-2635113235028946856moz-txt-link-abbreviated" href="http://www.talkup.com.au/" target="_blank">www.talkup.com.au</a></span><br style="font-family: Geneva, Helvetica, Arial, sans-serif;font-size: 12px;font-variant-ligatures: normal;white-space: normal"><strong style="font-family: Geneva, Helvetica, Arial, sans-serif;font-size: 12px;font-variant-ligatures: normal;white-space: normal"><span style="color: rgb(177, 21, 21);font-family: arial, sans-serif;font-size: 8.5pt">Postal Address: </span></strong><span style="font-variant-ligatures: normal;white-space: normal;color: rgb(174, 170, 170);font-family: arial, sans-serif;font-size: 8.5pt">PO Box 24, Varsity Lakes QLD 4227</span><br style="font-family: Geneva, Helvetica, Arial, sans-serif;font-size: 12px;font-variant-ligatures: normal;white-space: normal"><br style="font-family: Geneva, Helvetica, Arial, sans-serif;font-size: 12px;font-variant-ligatures: normal;white-space: normal"><span style="font-variant-ligatures: normal;white-space: normal;color: green;font-family: arial, sans-serif;font-size: 8pt">Please consider the environment before printing this e-mail</span><span style="font-family: Geneva, Helvetica, Arial, sans-serif;font-size: 12px;font-variant-ligatures: normal;white-space: normal"> </span><span style="font-variant-ligatures: normal;white-space: normal;color: gray;font-family: tahoma, sans-serif;font-size: 8pt">This email message and any attachments are confidential. If you are not the intended recipient, you are notified that any unauthorised disclosure, copying, distribution or use of this information is strictly prohibited. If you have received this email in error, please notify us immediately by return email, or telephone 1300 825 587, and destroy the original message. We have taken precautions to minimise the risk of transmitting software viruses, but we advise you to carry out your own virus checks on any attachment to this message. We cannot accept liability for any loss or damage caused by software viruses.</span></pre></div><blockquote class="history_container" type="cite" style="border-left-style: solid;border-width: 1px;margin-top: 20px;margin-left: 0px;padding-left: 10px;min-width: 500px">
<p style="color: #AAAAAA; margin-top: 10px;">On 26/02/2019 10:31:10 PM, Peter van Dijk <peter.van.dijk@powerdns.com> wrote:</p><div style="font-family:Arial,Helvetica,sans-serif">Hello<br>On 26 Feb 2019, at 5:43, Asanka Gunasekara wrote:<br><br>> I'm sure this is a pretty dumb question but my knowledge on DNSSEC is <br>> very limited so hope you guys/gals can help me out.<br>><br>> We use PowerDNS as our Authorative DNS and everything is configured <br>> here. We use PowerDNS-Admin <br>> [https://github.com/ngoduykhanh/PowerDNS-Admin] as our GUI.<br>><br>> I have our primary domain: domain.com and it is split up into several <br>> sub-domain zones for ease of management.<br>> Eg:<br>> Zone1 - domain.com<br>> Zone2 - sub1.domain.com<br>> Zone3 - sub2.domain.com<br>><br>> Q1) If I enable DNSSEC between Zone1 above and domain registrar, would <br>> zones 2 and 3 stop functioning?<br><br>They will keep working, but in insecure mode, as long as there is a <br>correct delegation (NS records for Zone2 and Zone3) in Zone1.<br><br>> Q2) How do I enable DNSSEC on sub zones?<br><br>For Zone1, you presumably enabled DNSSEC in your Admin and then sent the <br>DNSKEY or DS to the parent operator (.com), who then puts a DS in that <br>parent zone. For Zone2 and Zone3, you are the parent operator, so enable <br>DNSSEC, and then put the DS records in Zone1.<br><br>Kind regards,<br>-- <br>Peter van Dijk<br>PowerDNS.COM BV - https://www.powerdns.com/<br>_______________________________________________<br>Pdns-users mailing list<br>Pdns-users@mailman.powerdns.com<br>https://mailman.powerdns.com/mailman/listinfo/pdns-users<br></div></blockquote>
</div></div></blockquote></div><div id="DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2"><br />
<table style="border-top: 1px solid #D3D4DE;">
<tr>
<td style="width: 55px; padding-top: 13px;"><a href="https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=emailclient" target="_blank"><img src="https://ipmcdn.avast.com/images/icons/icon-envelope-tick-round-orange-animated-no-repeat-v1.gif" alt="" width="46" height="29" style="width: 46px; height: 29px;" /></a></td>
<td style="width: 470px; padding-top: 12px; color: #41424e; font-size: 13px; font-family: Arial, Helvetica, sans-serif; line-height: 18px;">Virus-free. <a href="https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=emailclient" target="_blank" style="color: #4453ea;">www.avast.com</a>
</td>
</tr>
</table><a href="#DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2" width="1" height="1"> </a></div>