<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<div class="moz-cite-prefix">On 18/08/2023 08:53, Huber, Peter via
Pdns-users wrote:<br>
</div>
<blockquote type="cite"
cite="mid:55b345732c38459498139ceef6eb8316@uni-wh.de">
<p class="MsoNormal"><span lang="EN-US">i have strange thing using
the pdns resolver. My domain uni-wh.de was ok for a long time,
now there seems to be a DNSSEC problem and I don’t know where
this comes from, nor how to fix this.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">What I am testing:<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">delv @193.175.243.110
uni-wh.de</span></p>
</blockquote>
<p><span lang="EN-US">You say the problem is with a "pdns resolver",
but 193.175.243.110 is an authoritative server, not a recursor.</span></p>
<span lang="EN-US">From the error output you gave, it looks like
you're using a tool which wants to talk to a recursor:</span>
<p class="MsoNormal"><span lang="EN-US">;; chase DS servers
resolving 'uni-wh.de/DS/IN': 193.175.243.110#53</span><span
lang="EN-US"><br>
;; REFUSED unexpected RCODE resolving 'de/NS/IN':
193.175.243.110#53<br>
;; REFUSED unexpected RCODE resolving './NS/IN':
193.175.243.110#53</span><span lang="EN-US"><br>
;; REFUSED unexpected RCODE resolving 'de/DS/IN':
193.175.243.110#53</span></p>
<p><span lang="EN-US">Your authoritative server is (correctly)
refusing to answer queries for domains it is not authoritative
for, like ".de" and the root.<br>
</span></p>
<p><span lang="EN-US">There are various online DNSSEC checkers. I
checked a couple with </span><span lang="EN-US">uni-wh.de and
they seem to think it's fine (and I can resolve it fine), so I
don't think there's any problem.<br>
</span></p>
<p><span lang="EN-US"></span></p>
<p><span lang="EN-US"></span><span lang="EN-US"></span></p>
</body>
</html>