Root Zone DNSSEC Deployment Technical Status Update

Joe Abley jabley at
Thu May 20 17:54:06 UTC 2010

On 2010-05-20, at 12:18, itservices88 wrote:

> I have these in named.conf
>        dnssec-enable yes;
>        dnssec-validation yes;
> //      dnssec-lookaside "." trust-anchor "DLV.ISC.ORG";
> With the trust-anchor uncommented, as soon as i enable and reload bind, dig
> gives timeout, while dig has no issues with first two commands enabled.

You should probably take these questions to the bind-users list, where there are many people who will help you. See <>.

Configuring DLV is quite possibly not what you want in this instance.


More information about the NANOG mailing list