[DNSSEC-Ops] Help

Ahmed ZERKOUK Ahmed.ZERKOUK at icosnet.com
Wed Oct 17 14:29:05 UTC 2018


Thanks,

We have updated our records, I think that now all is ok.

-----Original Message-----
From: Amreesh Phokeer <amreesh at afrinic.net> 
Sent: mercredi 17 octobre 2018 12:47
To: Ahmed ZERKOUK <Ahmed.ZERKOUK at icosnet.com>
Cc: dnssec-ops at afrinic.net; Tawfik BOURICHE <Tawfik.BOURICHE at icosnet.com>; Ahmed MORSLI <Ahmed.MORSLI at icosnet.com>
Subject: Re: [DNSSEC-Ops] Help

Hi Ahmed,

> On 17 Oct 2018, at 00:17, Ahmed ZERKOUK <Ahmed.ZERKOUK at icosnet.com> wrote:
> 
> The authoritative  name server for 11.140.197.in-addr.arpa is dns1.icosnethosting.com.

Have you signed the zone? I was not able to retrieve the DNSKEY from the zone.
Once you have the DNSKEY, you can generate the DS and send it to the parent.

> 
> Also we have the same problem with for ex. 9.140.197.in-addr.arpa that have ns1.aloline.com as authoritative name server .

See errors from DNSViz

http://dnsviz.net/d/9.140.197.in-addr.arpa/dnssec/

Errors (5)
	• 9.140.197.in-addr.arpa zone: The server(s) did not respond authoritatively for the namespace. (196.41.225.10, 196.41.225.11)
	• 9.140.197.in-addr.arpa/MX (NODATA): The response was an upward referral. (196.41.225.10, 196.41.225.11, UDP_0_EDNS0_32768_4096, UDP_0_EDNS0_32768_512)
	• 9.140.197.in-addr.arpa/NS (NODATA): The response was an upward referral. (196.41.225.10, 196.41.225.11, UDP_0_EDNS0_32768_4096)
	• 9.140.197.in-addr.arpa/SOA (NODATA): The response was an upward referral. (196.41.225.10, 196.41.225.11, TCP_0_EDNS0_32768_4096, UDP_0_EDNS0_32768_4096)
	• 9.140.197.in-addr.arpa/TXT (NODATA): The response was an upward referral. (196.41.225.10, 196.41.225.11, UDP_0_EDNS0_32768_4096) Warnings (2)
	• in-addr.arpa to 197.in-addr.arpa: The following NS name(s) were found in the authoritative NS RRset, but not in the delegation NS RRset (i.e., in the in-addr.arpa zone): ns2.lacnic.net
	• in-addr.arpa to 197.in-addr.arpa: The following NS name(s) were found in the delegation NS RRset (i.e., in the in-addr.arpa zone), but not in the authoritative NS RRset: ns3.lacnic.net

Regards,
Amreesh


More information about the DNSSEC-Ops mailing list