Re: [Exim] DNSsec records and exim

[ On Sunday, September 16, 2001 at 15:30:52 (-0400), Michael Richardson wrote: ]
> Subject: Re: [Exim] DNSsec records and exim
>
> I still have suspicions, because I added these lines in an attempt to fix
> things. It may be that exim sites didn't start complaining until after I
> screwed up things. I still suspect that there are machines out there that are
> unwilling to ignore the SIG records.

I think the problems are still a bit more basic (no A RR for nox6):

$ host -a lox.sandelman.ottawa.on.ca nic.sandelman.ottawa.on.ca
lox.sandelman.ottawa.on.ca      LOC     45 24 29 N  75 42 44 W  0m  1m 10000m 10m
 *** expand error in NXT record for lox.sandelman.ottawa.on.ca, offset 84
lox.sandelman.ottawa.on.ca      NXT
 *** size error in NXT record for lox.sandelman.ottawa.on.ca, off by -36
lox.sandelman.ottawa.on.ca      SIG     NXT 1 5 (
                        7200            ;original ttl
                        20011016185222  ;signature expiration
                        20010916185222  ;signature inception
                        21577           ;key tag
                        sandelman.ottawa.on.ca
        GgHQ6EZUHbYJ+6j4G5ASMWRPBs+yO2AgQ9mvW3OMOLKcJQKmnGJDVDu3PseYazyy
        kYxC94waLiPUQl/tg2b5xz1qwKP4QIvh7wi4D62bdwPnLH6hrdoqjb4mG0a+iTq1
                        )
lox.sandelman.ottawa.on.ca      MX      10 mailhost.sandelman.ottawa.on.ca
lox.sandelman.ottawa.on.ca      MX      10 nox6.sandelman.ottawa.on.ca
 !!! lox.sandelman.ottawa.on.ca MX host nox6.sandelman.ottawa.on.ca has no A record
lox.sandelman.ottawa.on.ca      A       192.139.46.2

I do see a record for 'nox', but not 'nox6':

$ host -r -a nox.sandelman.ottawa.on.ca nic.sandelman.ottawa.on.c
nox.sandelman.ottawa.on.ca      A       192.139.46.6
nox.sandelman.ottawa.on.ca      AAAA    2001:410:402:3:0:0:0:6
nox.sandelman.ottawa.on.ca      AAAA    2002:C08B:2E21:3:0:0:0:6
 *** expand error in NXT record for nox.sandelman.ottawa.on.ca, offset 128
nox.sandelman.ottawa.on.ca      NXT
 *** size error in NXT record for nox.sandelman.ottawa.on.ca, off by -32
nox.sandelman.ottawa.on.ca      SIG     NXT 1 5 (
                        7200            ;original ttl
                        20011016185222  ;signature expiration
                        20010916185222  ;signature inception
                        21577           ;key tag
                        sandelman.ottawa.on.ca
        K6+xz2iAWYoI/GB+M7KqJ1Tf6wer/VonQj5OPr0RooHReCf+uVf+f+XsYuawR+UD
        0+39ZJhbdkwDt3uc2DJYwNjR7ct+83x/Oy8BmaL8RMRd5JzGdUQ+1piq9fbvmCBv
                        )

I'm not sure what impact the NXT errors might have on Exim though....

-- 
                            Greg A. Woods

+1 416 218-0098      VE3TCP      <gwoods@???>     <woods@???>
Planix, Inc. <woods@???>;   Secrets of the Weird <woods@???>