North American Network Operators Group Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical Re: AW: Odd policy question.
> Indeed all that is required is a way to detect that the > delegation is lame for bind vic^H^H^Husers dig +norec zone.name. @delegatee.name. soa to check the ns rrset at the [proposed] delegatee dig +norec zone.name. @delegatee.name. ns on later digs, you can also use the +short option if you don't want to see too much detail. serious pedants can also check for response via tcp, as opposed to just the default udp. > hopefully in a secure fashion could you amplify? > and remove the lame delegations. Of course that does leave the > problem of what to do if all of the delegations are lame or if a proper subset of the delegations are lame. or if the ns rrset at a delegatee does not match that which was specified to be installed in the delegating zone file. randy
|