--no-shuffle --launch=bind --bind-config=./named.conf \
--send-root-referral \
--allow-2136-from=127.0.0.0/8 --experimental-rfc2136=yes \
- --cache-ttl=$cachettl --no-config &
+ --cache-ttl=$cachettl --no-config \
+ --bind-ignore-broken-records=yes &
skipreasons="nodnssec nodyndns"
bindwait
;;
--bind-dnssec-db=./dnssec.sqlite3 \
--send-root-referral \
--allow-2136-from=127.0.0.0/8 --experimental-rfc2136=yes --experimental-direct-dnskey=yes \
- --cache-ttl=$cachettl --no-config &
+ --cache-ttl=$cachettl --no-config \
+ --bind-ignore-broken-records=yes &
bindwait
;;
#!/bin/sh
-for zone in $(grep zone named.conf | cut -f2 -d\" | grep -v '^example.com$')
+for zone in $(grep zone named.conf | cut -f2 -d\" | grep -v '^\(example.com\|nztest.com\)$')
do
TFILE=$(mktemp)
dig axfr $zone @$nameserver -p $port | ldns-read-zone -z > $TFILE
OK
RETVAL: 0
---- ldns-verify-zone -V2 nztest.com
-RETVAL: 0
-
---- validns nztest.com
-RETVAL: 0
-
---- jdnssec-verifyzone nztest.com
-zone verified.
-RETVAL: 0
-
---- named-checkzone nztest.com
-zone nztest.com/IN: loaded serial 2005092501 (DNSSEC signed)
-OK
-RETVAL: 0
-
--- ldns-verify-zone -V2 dnssec-parent.com
RETVAL: 0