Maintained by: NLnet Labs

[Unbound-users] What is needed for dnssec?

Marcel van Beurden
Tue Feb 14 21:36:17 CET 2012

On 14-02-12 19:20, Olaf Kolkman wrote:
> Orthogonally, You might want to check if your network environment is
> suitable with respect to EDNS0 and UDP packet sizes and there are no
> weird network elements blocking your DNS view to the authoritative
> world. A quick way for finding that out is running netalyzr
> (

Nice toy! All seems fine except for some problem with fragmented IPv6
packets and blocked Windows networking (duh!).

Not sure if it's needed or important, but I have "options edns0" in my
/etc/resolv.conf (on my Ubuntu desktop).