[Pdns-users] Huge PDNS+DNSSEC setup-Need help

Peter van Dijk peter.van.dijk at netherlabs.nl
Fri Apr 13 05:57:48 UTC 2012


Hi!

On Apr 13, 2012, at 4:51 , José Arthur Benetasso Villanova wrote:

> When you add / remove records, you need to call 'pdnssec rectify-zone
> example.com' to make sure that the records orders are set properly.
> This is important to use NSEC, that need the record before and after
> to give a signed denial of existence. As far I remember, the field
> content is not use in NSEC, so you can change this at will.

Both NSEC and NSEC3 use the order name field; NSEC3-narrow does not.

Kind regards,
-- 
Peter van Dijk
Netherlabs Computer Consulting BV - http://www.netherlabs.nl/




More information about the Pdns-users mailing list