[Pdns-users] DKIM NXDOMAIN

Bart Mortelmans powerdns at bart.bim.be
Mon Apr 15 11:17:43 UTC 2019


Hi,

It seems like this doesn't cause any problems in the real world, only in 
a test like the one on internet.nl. But as far as I can tell, it's not 
okay with RFC8020. And I tested some other nameservers (Google cloud 
DNS, Dyn.com and Yadifa happened to be easy to test for me) and I can 
confirm that they all do return "NOERROR" instead of "NXDOMAIN" if a 
sub-host exists.

The situation still seems to be the same in the upcoming PowerDNS 4.2 
with MySQL backend (I didn't test other backends)

The only solution to this "problem" (or to get through the test...) I 
have found was to create any other record type on _domainkey (obviously 
not CNAME or NS, but any other record type should be okay).

Sincerely,
Bart Mortelmans



Op 15/04/19 om 12:37 schreef Steffan Noord:
>
> Hello,
>
> I have setup DKIM for a long time.
> But resent someone point me to a site: https://en.internet.nl 
> <https://en.internet.nl/>
>
> If i test one of my domains it says:
>
> Your domain does /not/ support DKIM records.
>
>
> If i use dig to test a domain like sidn.nl
> dig _domainkey.sidn.nl TXT
>
> Im getting a NOERROR
>
> If im using dig on one of my domains:
>
> dig _domainkey.heidewachter.nl TXT
>
> im getting a NXDOMAIN
>
>
> In the dns i have:
>
> default._domainkey.heidewachter.nl
>
> 	
>
> TXT
>
> 	
>
> v=DKIM1; t=s; p=MIICIjAN……
>
> Any idees what is wrong?
>
> Met vriendelijke groet,
>
> Steffan Noord
>
>
> _______________________________________________
> Pdns-users mailing list
> Pdns-users at mailman.powerdns.com
> https://mailman.powerdns.com/mailman/listinfo/pdns-users


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.powerdns.com/pipermail/pdns-users/attachments/20190415/dbe1329e/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3974 bytes
Desc: S/MIME-cryptografische ondertekening
URL: <http://mailman.powerdns.com/pipermail/pdns-users/attachments/20190415/dbe1329e/attachment-0001.bin>


More information about the Pdns-users mailing list