Re: [DNSOP] Unexpected REFUSED from BIND when using example config from RFC7706

bert hubert <bert.hubert@powerdns.com> Fri, 07 April 2017 08:23 UTC

Return-Path: <bert.hubert@powerdns.com>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E9B26129687 for <dnsop@ietfa.amsl.com>; Fri, 7 Apr 2017 01:23:34 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level:
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lWwBvRkrpptx for <dnsop@ietfa.amsl.com>; Fri, 7 Apr 2017 01:23:32 -0700 (PDT)
Received: from tmpmail.powerdns.com (tmpmail.powerdns.com [128.199.32.142]) by ietfa.amsl.com (Postfix) with ESMTP id D5AB9129451 for <dnsop@ietf.org>; Fri, 7 Apr 2017 01:23:29 -0700 (PDT)
Received: from localhost (localhost [127.0.0.1]) by tmpmail.powerdns.com (Postfix) with ESMTP id 3F3EF6803D; Fri, 7 Apr 2017 04:23:30 -0400 (EDT)
Received: from tmpmail.powerdns.com ([127.0.0.1]) by localhost (tmpmail.powerdns.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TnQVFYLNcxNf; Fri, 7 Apr 2017 04:23:28 -0400 (EDT)
Received: from server.ds9a.nl (unknown [IPv6:2001:470:1f15:bba::42]) by tmpmail.powerdns.com (Postfix) with ESMTP id EDB566010F; Fri, 7 Apr 2017 04:23:27 -0400 (EDT)
Received: by server.ds9a.nl (Postfix, from userid 1000) id B4413AC322F; Fri, 7 Apr 2017 10:23:26 +0200 (CEST)
Date: Fri, 7 Apr 2017 10:23:26 +0200
From: bert hubert <bert.hubert@powerdns.com>
To: =?iso-8859-1?Q?Bj=F8rn?= Mork <bjorn@mork.no>
Cc: dnsop@ietf.org
Message-ID: <20170407082326.GH17910@server.ds9a.nl>
References: <87inmhrjpx.fsf@miraculix.mork.no> <2448193.4rPzoQ60ob@linux-hs2j> <f321b974-2149-478d-9b63-a19d10ed013e@Spark> <1560750.L0Fn6CvLxk@linux-hs2j> <8760igpr2n.fsf@miraculix.mork.no>
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
In-Reply-To: <8760igpr2n.fsf@miraculix.mork.no>
User-Agent: Mutt/1.5.23 (2014-03-12)
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/KcpsniffbMT3PJ5AJPEjZHejkdw>
Subject: Re: [DNSOP] Unexpected REFUSED from BIND when using example config from RFC7706
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 07 Apr 2017 08:23:35 -0000

On Fri, Apr 07, 2017 at 10:20:00AM +0200, Bjørn Mork wrote:
> Just to avoid any confusion: Although I demonstrated the issue by
> running BIND on my laptop only, the real usage scenario is resolver
> service for a few million distinct administrative domains (aka
> "customers").  Changing the trust anchor is not an option.

Perhaps https://lists.isc.org/mailman/listinfo/bind-users is a great place
to discuss BIND configurations and issues.

	Bert