Hello,
running diagnostic test at http://www.dnssy.com/
It claims
Glue is not provided by your nameservers. This means they did not
provide the IP address of your nameservers, so an extra step may be
required to resolve your domain. The following nameservers did not
have glue:
ns3.anetdns.com
ns2.anetdns.com
ns1.anetdns.com
You should add A records for your nameservers into your domain zone
to fix this.
This is what I have in zone file (before dnssec signing via ldns)
$ORIGIN tease.email.
$TTL 3600
@ IN SOA ( ns1.anetdns.com.
admin.deviant.email. 2019011808 14400 3600 1209600 3600 )
NS ns1.anetdns.com.
NS ns2.anetdns.com.
NS ns3.anetdns.com.
ns1.anetdns.com. A 45.56.122.65
ns2.anetdns.com. A 173.255.210.222
ns3.anetdns.com. A 178.79.185.217
ns1.anetdns.com. AAAA
2600:3c00::f03c:91ff:fe33:ac4b
ns2.anetdns.com. AAAA
2600:3c01::f03c:91ff:fe33:ddb6
ns3.anetdns.com. AAAA
2a01:7e00::f03c:91ff:fe18:8a7e
Am I doing it wrong, or is the diagnostic wrong?
On Fri, 18 Jan 2019, Michael A. Peters wrote:> running diagnostic test at http://www.dnssy.com/ > > It claims > > Glue is not provided by your nameservers. This means they did not > provide the IP address of your nameservers, so an extra step may be > required to resolve your domain. The following nameservers did not > have glue: > > ns3.anetdns.com > ns2.anetdns.com > ns1.anetdns.com> Am I doing it wrong, or is the diagnostic wrong?The diagnostic is wrong: $ dig ns anetdns.com @ns1.anetdns.com. ; <<>> DiG 9.9.4-RedHat-9.9.4-72.el7 <<>> ns anetdns.com @ns1.anetdns.com. ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 13779 ;; flags: qr aa rd; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 7 ;; WARNING: recursion requested but not available ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ;; QUESTION SECTION: ;anetdns.com. IN NS ;; ANSWER SECTION: anetdns.com. 3600 IN NS ns1.anetdns.com. anetdns.com. 3600 IN NS ns2.anetdns.com. anetdns.com. 3600 IN NS ns3.anetdns.com. ;; ADDITIONAL SECTION: ns1.anetdns.com. 3600 IN A 45.56.122.65 ns2.anetdns.com. 3600 IN A 173.255.210.222 ns3.anetdns.com. 3600 IN A 178.79.185.217 ns1.anetdns.com. 3600 IN AAAA 2600:3c00::f03c:91ff:fe33:ac4b ns2.anetdns.com. 3600 IN AAAA 2600:3c01::f03c:91ff:fe33:ddb6 ns3.anetdns.com. 3600 IN AAAA 2a01:7e00::f03c:91ff:fe18:8a7e ;; Query time: 38 msec ;; SERVER: 45.56.122.65#53(45.56.122.65) ;; WHEN: Fri Jan 18 10:50:05 EST 2019 ;; MSG SIZE rcvd: 226
On 18 Jan 2019, at 15:35, Michael A. Peters wrote:> Am I doing it wrong, or is the diagnostic wrong?I would say that the implementor of that test service doesn't understand when glue is required or appropriate. The diagnostic message seems to recommend gratuitously including un-necessary (and arguably, inappropriate) glue. I would recommend using a test service written by people who really "know their onions", such as zonemaster, which recently (when I requested it) gave this report on the tease.email zone: https://zonemaster.fr/result/a829596493000f88 I hope this helps. Best regards, Niall O'Reilly