[Pdns-users] PowerDNS Recursor Performance and Tuning

[Otto Moerbeek]

On Thu, Jan 20, 2022 at 09:51:51AM +0330, Hamed Haghshenas via Pdns-users wrote:

> >> How can I secure my dns Recursor? I try read document about dnssec in
> powerdns wiki but can't understand what should I do ?
> 
> >>  <https://doc.powerdns.com/recursor/dnssec.html>
> https://doc.powerdns.com/recursor/dnssec.html
> 
> > In short:
> 
> > dnssec=validat
> 
>  
> 
> I set dnssec=validate, but one error exist  (Invalid signature: connected)
> 
>  
> 
> #################################
> 
> Your dns security:
> 
> DNSSEC (FAIL)
> 
> *	Valid signature: connected
> *	Invalid signature: connected
> *	Expired signature: not connected
> *	Missing signature: not connected
> 
>  
> 
> Best Regards,

This is interesting. AFAKS, the query used for this test is

dig badsig.go.dnscheck.tools TXT

According to the website, it should not validate. I will investigate.

	-Otto