<div dir="ltr"><div>Dear Subrata Dada,<br><br></div>Please Check the below screenshot. I have tested it on my local DNS. Run this command from your DNS server. You will find the <span style="color:rgb(255,0,0)"><b>"status: SERVERFAIL"</b></span> if you have successfully enable DNSSec on your DNS server.<br><br><div><img src="cid:ii_jmxnqb8u0" alt="image.png" width="471" height="229"><br><br></div><div>Best Regards,<br></div><div>Ripan Kumar Ray<br></div></div><br><div class="gmail_quote"><div dir="ltr">On Sat, Oct 6, 2018 at 8:55 PM Subrata Sarker <<a href="mailto:sarkersubrata@yahoo.com">sarkersubrata@yahoo.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div style="font-family:courier new,courier,monaco,monospace,sans-serif;font-size:13px"><div style="font-family:courier new,courier,monaco,monospace,sans-serif;font-size:13px"><div><div><span><div>Dear Ripan,</div><div><br></div><div>Please find the output: </div><div><br></div><div>dig @<a href="http://103.15.246.1" target="_blank">103.15.246.1</a> <a href="http://dnssec-failed.org" target="_blank">dnssec-failed.org</a> a +dnssec</div><div><br></div><div>; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.10.rc1.el6_3.6 <<>> @<a href="http://103.15.246.1" target="_blank">103.15.246.1</a> <a href="http://dnssec-failed.org" target="_blank">dnssec-failed.org</a> a +dnssec</div><div>; (1 server found)</div><div>;; global options: +cmd</div></span><br></div><div><br></div><div class="m_-9032059403886354453ydp508825csignature"><br><br>Best Regards<br>Subrata Sarker<br><br></div></div>
        <div><br></div><div><br></div>
        
        </div><div id="m_-9032059403886354453yahoo_quoted_8911577196" class="m_-9032059403886354453yahoo_quoted">
            <div style="font-family:'Helvetica Neue',Helvetica,Arial,sans-serif;font-size:13px;color:#26282a">
                
                <div>
                    On Saturday, 6 October 2018, 1:29:21 pm GMT+6, Ripan Kumar Ray <<a href="mailto:riponroy79@gmail.com" target="_blank">riponroy79@gmail.com</a>> wrote:
                </div>
                <div><br></div>
                <div><br></div>
                <div><div id="m_-9032059403886354453yiv7157230310"><div><div dir="ltr"><div dir="ltr"><div>
<strong>
</strong><strong></strong><pre><span style="font-weight:normal">Please use bellow command line to check DNSSec is enable or not.</span><br clear="none"></pre><pre><br clear="none">dig @xx.xx.xx.xx <a rel="nofollow" shape="rect" href="http://dnssec-failed.org" target="_blank">dnssec-failed.org</a> a +dnssec
</pre>

<p>In that command, replace the string <code><strong>xx.xx.xx.xx</strong></code><strong><code></code></strong> with the IP of your DNS server.</p>
<p>If the response includes the following:</p>
<strong>
</strong><pre>;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL</pre>

<p>then the resolver is doing DNSSEC validation. (The status indication of <strong><code>SERVFAIL</code></strong> here indicates that the validation failed, which means that the validation is in fact happening.)</p>
<p>If instead the response includes the following:</p>
<strong>
</strong><pre>;; ->>HEADER<<- opcode: QUERY, status: NOERROR</pre>

<p>the the resolver is not doing DNSSEC validation.</p>

<br clear="none"></div><span style="color:rgb(255,0,0)"><span style="background-color:rgb(255,255,255)"><span style="color:rgb(0,0,0)"><b>Reference: </b></span><a rel="nofollow" shape="rect" href="https://www.icann.org/dns-resolvers-checking-current-trust-anchors" target="_blank">https://www.icann.org/dns-resolvers-checking-current-trust-anchors</a><br clear="none"><br clear="none"></span></span></div><div><span style="color:rgb(0,0,0)"><span style="background-color:rgb(255,255,255)">Regard,<br clear="none"></span></span></div><div><span style="color:rgb(255,0,0)"><span style="background-color:rgb(255,255,255)"><span style="color:rgb(0,0,0)">Ripan Kumar Ray</span><br clear="none"></span></span></div></div><br clear="none"><div class="m_-9032059403886354453yiv7157230310gmail_quote"><div class="m_-9032059403886354453yiv7157230310yqt0504015231" id="m_-9032059403886354453yiv7157230310yqt61739"><div dir="ltr">On Fri, Oct 5, 2018 at 10:35 AM Subrata Sarker <<a rel="nofollow" shape="rect" href="mailto:sarkersubrata@yahoo.com" target="_blank">sarkersubrata@yahoo.com</a>> wrote:<br clear="none"></div><blockquote class="m_-9032059403886354453yiv7157230310gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div style="font-family:courier new,courier,monaco,monospace,sans-serif;font-size:13px"><div style="font-family:courier new,courier,monaco,monospace,sans-serif;font-size:13px"><div><div><span></span><div>MY DNS server details below:<br clear="none"></div><div><br clear="none"></div><div><strong>==========<br clear="none"></strong></div><div><strong>DNS-1:</strong> </div><div><strong>==========<br clear="none"></strong></div><div>#named -v<br clear="none">BIND 9.8.2rc1-RedHat-9.8.2-0.10.rc1.el6_3.6<br clear="none"></div><div>dnssec-enable yes;<br clear="none">dnssec-validation auto;</div><div><br clear="none"></div><div><strong>=========<br clear="none"></strong></div><div><strong>DNS-2:</strong><br clear="none"></div><div>=========<br clear="none"></div><div> #named -v<br clear="none">BIND 9.8.4-rpz2+rl005.12-P1</div><div>        dnssec-enable yes;<br clear="none">        dnssec-lookaside no;<br clear="none">        dnssec-validation auto;</div><div><br clear="none"></div><br clear="none"></div><div><br clear="none"></div><div>Please suggest, if need to add/modify any config/key.</div><div class="m_-9032059403886354453yiv7157230310m_-8836907867133443837ydp2264f24esignature"><br clear="none"><br clear="none">Best Regards<br clear="none">Subrata Sarker<br clear="none"><br clear="none">IT Connect Ltd.<br clear="none">cell:+8801747902663</div></div>
        <div><br clear="none"></div><div><br clear="none"></div>
        
        </div><div class="m_-9032059403886354453yiv7157230310m_-8836907867133443837yahoo_quoted" id="m_-9032059403886354453yiv7157230310m_-8836907867133443837yahoo_quoted_9010446355">
            <div style="font-family:'Helvetica Neue',Helvetica,Arial,sans-serif;font-size:13px;color:#26282a">
                
                <div>
                    On Monday, 1 October 2018, 9:02:53 am GMT+6, <a rel="nofollow" shape="rect">nog-request@bdnog.org</a> <<a rel="nofollow" shape="rect">nog-request@bdnog.org</a>> wrote:
                </div>
                <div><br clear="none"></div>
                <div><br clear="none"></div>
                <div><div dir="ltr">Send nog mailing list submissions to<br clear="none"></div><div dir="ltr">    <a rel="nofollow" shape="rect">nog@bdnog.org</a><br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">To subscribe or unsubscribe via the World Wide Web, visit<br clear="none"></div><div dir="ltr">    <a rel="nofollow" shape="rect">http://mailman.bdnog.org/mailman/listinfo/nog</a><br clear="none"></div><div dir="ltr">or, via email, send a message with subject or body 'help' to<br clear="none"></div><div dir="ltr">    <a rel="nofollow" shape="rect">nog-request@bdnog.org</a><br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">You can reach the person managing the list at<br clear="none"></div><div dir="ltr">    <a rel="nofollow" shape="rect">nog-owner@bdnog.org</a><br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">When replying, please edit your Subject line so it is more specific<br clear="none"></div><div dir="ltr">than "Re: Contents of nog digest..."<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">Today's Topics:<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">   1. Re: Board Approval of KSK Roll (GZ Kabir)<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">----------------------------------------------------------------------<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">Message: 1<br clear="none"></div><div dir="ltr">Date: Mon, 1 Oct 2018 09:03:10 +0600<br clear="none"></div><div dir="ltr">From: GZ Kabir <<a rel="nofollow" shape="rect">gzkabir@gmail.com</a>><br clear="none"></div><div dir="ltr">To: Champika Wijayatunga <<a rel="nofollow" shape="rect">champika.wijayatunga@icann.org</a>>,<br clear="none"></div><div dir="ltr">    <a rel="nofollow" shape="rect">nog@bdnog.org</a><br clear="none"></div><div dir="ltr">Subject: Re: [bdNOG] Board Approval of KSK Roll<br clear="none"></div><div dir="ltr">Message-ID: <<a rel="nofollow" shape="rect">3317CA8B-0657-4528-B246-36F670F54481@gmail.com</a>><br clear="none"></div><div dir="ltr">Content-Type: text/plain; charset="utf-8"<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">Thanks Champ, here it goes,<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">Dear bdNOG Members,<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">Pls. be informed about the KSK rollover happening on 11th October, 2018. Pls. Go through the trailing mail of Champ.<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">Regards,<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">GZ Kabir<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">> On 1 Oct, 2018, at 7:25 AM, Champika Wijayatunga <<a rel="nofollow" shape="rect">champika.wijayatunga@icann.org</a>> wrote:<br clear="none"></div><div dir="ltr">> <br clear="none"></div><div dir="ltr">>  Hi Sumon Bhai and Kabir Bhai,<br clear="none"></div><div dir="ltr">>  <br clear="none"></div><div dir="ltr">> Hope all is well.<br clear="none"></div><div dir="ltr">>  <br clear="none"></div><div dir="ltr">> Just wanted to let you know that ICANN board has approved the KSK rollover and it will go as scheduled on 11thOctober 2018.<br clear="none"></div><div dir="ltr">> <a rel="nofollow" shape="rect">https://www.icann.org/resources/press-material/release-2018-09-18-en </a><<a rel="nofollow" shape="rect">https://www.icann.org/resources/press-material/release-2018-09-18-en</a>><br clear="none"></div><div dir="ltr">>  <br clear="none"></div><div dir="ltr">> It would be good if you can share this announcement to BDNOG, BDIX and ISPAB community.<br clear="none"></div><div dir="ltr">>  <br clear="none"></div><div dir="ltr">> Thank you.<br clear="none"></div><div dir="ltr">>  <br clear="none"></div><div dir="ltr">> Best regards,<br clear="none"></div><div dir="ltr">> Champ.<br clear="none"></div><div dir="ltr">>  <br clear="none"></div><div dir="ltr">>  <br clear="none"></div><div dir="ltr">>  <br clear="none"></div><div dir="ltr">> From: Sumon Ahmed Sabir <<a rel="nofollow" shape="rect">sumon@office.bdcom.com</a> <mailto:<a rel="nofollow" shape="rect">sumon@office.bdcom.com</a>>><br clear="none"></div><div dir="ltr">> Date: Friday, July 20, 2018 at 3:41 PM<br clear="none"></div><div dir="ltr">> To: Champika Wijayatunga <<a rel="nofollow" shape="rect">champika.wijayatunga@icann.org</a> <mailto:<a rel="nofollow" shape="rect">champika.wijayatunga@icann.org</a>>><br clear="none"></div><div dir="ltr">> Cc: Gazi Zehadul Kabir <<a rel="nofollow" shape="rect">gzkabir@gmail.com</a> <mailto:<a rel="nofollow" shape="rect">gzkabir@gmail.com</a>>>, "<a rel="nofollow" shape="rect">gzkabir@bdcom.com</a> <mailto:<a rel="nofollow" shape="rect">gzkabir@bdcom.com</a>>" <<a rel="nofollow" shape="rect">gzkabir@bdcom.com</a> <mailto:<a rel="nofollow" shape="rect">gzkabir@bdcom.com</a>>>, Sumon Ahmed Sabir <<a rel="nofollow" shape="rect">sumon@fiberathome.net</a> <mailto:<a rel="nofollow" shape="rect">sumon@fiberathome.net</a>>><br clear="none"></div><div dir="ltr">> Subject: [Ext] Re: Awareness of KSK rollover date and request to IXP Admins<br clear="none"></div><div dir="ltr">>  <br clear="none"></div><div dir="ltr">> ? <><br clear="none"></div><div dir="ltr">> Dear Champ,<br clear="none"></div><div dir="ltr">>  <br clear="none"></div><div dir="ltr">> We will be happy to distribute it in our community and thanks for sharing.<br clear="none"></div><div dir="ltr">>  <br clear="none"></div><div dir="ltr">> As we know most of us(if not all) are very smart in BD and did not deployed complex DNS-SEC and very much relying on unsecured DNS systems, so not expecting any impact on ksk rollover.<br clear="none"></div><div dir="ltr">>  <br clear="none"></div><div dir="ltr">> But this message may also help as another awareness  for DNS-SEC deployment.<br clear="none"></div><div dir="ltr">>  <br clear="none"></div><div dir="ltr">>  <br clear="none"></div><div dir="ltr">> Best regards,<br clear="none"></div><div dir="ltr">>  <br clear="none"></div><div dir="ltr">>  <br clear="none"></div><div dir="ltr">> Sumon<br clear="none"></div><div dir="ltr">>  <br clear="none"></div><div dir="ltr">>  <br clear="none"></div><div dir="ltr">> ?? ?????, ???? ?:?? am ?, "Champika Wijayatunga" <<a rel="nofollow" shape="rect">champika.wijayatunga@icann.org</a> <mailto:<a rel="nofollow" shape="rect">champika.wijayatunga@icann.org</a>>> ???????:<br clear="none"></div><div dir="ltr">>>  <br clear="none"></div><div dir="ltr">>> Hi Sumon Bhai and Kabir Bhai,<br clear="none"></div><div dir="ltr">>>  <br clear="none"></div><div dir="ltr">>> I?m reaching out to IXP Administrators like yourselves regarding the KSK rollover date of 11 October 2018. I?m appending a letter from ICANN CTO requesting your help to raise awareness amongst the BD IXP peering partners please. If you can share this with BDIX and BDNOG members that would be great.<br clear="none"></div><div dir="ltr">>>  <br clear="none"></div><div dir="ltr">>>  <br clear="none"></div><div dir="ltr">>> ---<start of letter>---<br clear="none"></div><div dir="ltr">>>  <br clear="none"></div><div dir="ltr">>>  <br clear="none"></div><div dir="ltr">>> Dear IXP Administrator,<br clear="none"></div><div dir="ltr">>>  <br clear="none"></div><div dir="ltr">>> The ICANN organization is requesting your help in a very important matter that could affect some of the operators that connect to your Internet exchange.<br clear="none"></div><div dir="ltr">>>  <br clear="none"></div><div dir="ltr">>> ICANN is undertaking a project to update the Internet's root zone DNSSEC ?key signing? key or KSK. The process, known as the KSK rollover, is described here:  <a rel="nofollow" shape="rect">https://www.icann.org/kskroll </a>[<a rel="nofollow" shape="rect">icann.org</a>] <<a rel="nofollow" shape="rect">https://urldefense.proofpoint.com/v2/url?u=https-3A__www.icann.org_kskroll&d=DwMFaQ&c=FmY1u3PJp6wrcrwll3mSVzgfkbPSS6sJms7xcl4I5cM&r=whMuiz76IxmdJbBnWNPuUwHRa_HmUhi8cbyjOVXXy4j6ajas1OsDbkyxUnub9MEs&m=71uXLQEE5h6QZIW5aaJIv57oCsRvyudkPPG53I0512Y&s=5o6XrVLFoU5X1g_pfY_RtgrvqEX4wOoKTTxTp-zIN30&e=</a>>.  This project may have an operational impact on DNS resolution services if DNSSEC is deployed and offered by your members/customers.<br clear="none"></div><div dir="ltr">>>  <br clear="none"></div><div dir="ltr">>> The process to update the root zone?s KSK has been ongoing since 2015. Last year, ICANN paused this rollover project due to indications that some operators may not have been prepared for the change in keys despite the fact that we have presented to numerous network fora for several years, sought global trade press coverage and written to various government agencies. Even today, there is data suggesting that some operators will encounter trouble when the KSK is changed.  The data is available at <a rel="nofollow" shape="rect">http://root-trust-anchor-reports.research.icann.org </a>[<a rel="nofollow" shape="rect">root-trust-anchor-reports.research.icann.org</a>] <<a rel="nofollow" shape="rect">https://urldefense.proofpoint.com/v2/url?u=http-3A__root-2Dtrust-2Danchor-2Dreports.research.icann.org&d=DwMFaQ&c=FmY1u3PJp6wrcrwll3mSVzgfkbPSS6sJms7xcl4I5cM&r=whMuiz76IxmdJbBnWNPuUwHRa_HmUhi8cbyjOVXXy4j6ajas1OsDbkyxUnub9MEs&m=71uXLQEE5h6QZIW5aaJIv57oCsRvyudkPPG53I0512Y&s=V1-MzICDEMor9kabvG1nreyOWhFOVz3EJd1IwRqfgvc&e=</a>>.<br clear="none"></div><div dir="ltr">>>  <br clear="none"></div><div dir="ltr">>> As part of an ongoing campaign to increase awareness of the KSK rollover and reach the resolver operators that are causing the announcements that suggest their resolvers are unprepared for the KSK rollover, we are now seeking your help. Despite our previous outreach, we need to make even greater efforts to reach operators of DNS servers, many of which are ISPs.<br clear="none"></div><div dir="ltr">>>  <br clear="none"></div><div dir="ltr">>> Specifically, the goal of our outreach is to call the attention of network operators to the information on this page:<br clear="none"></div><div dir="ltr">>> <a rel="nofollow" shape="rect">https://www.icann.org/dns-resolvers-updating-latest-trust-anchor </a>[<a rel="nofollow" shape="rect">icann.org</a>] <<a rel="nofollow" shape="rect">https://urldefense.proofpoint.com/v2/url?u=https-3A__www.icann.org_dns-2Dresolvers-2Dupdating-2Dlatest-2Dtrust-2Danchor&d=DwMFaQ&c=FmY1u3PJp6wrcrwll3mSVzgfkbPSS6sJms7xcl4I5cM&r=whMuiz76IxmdJbBnWNPuUwHRa_HmUhi8cbyjOVXXy4j6ajas1OsDbkyxUnub9MEs&m=71uXLQEE5h6QZIW5aaJIv57oCsRvyudkPPG53I0512Y&s=jVHhVXRtwqbss2dGSftHL-Rn4X-U0lysknyRWiof3tE&e=</a>><br clear="none"></div><div dir="ltr">>>  <br clear="none"></div><div dir="ltr">>> We would appreciate your assistance and/or advice on contacting network operators that are connecting through your IXP.  We are willing to participate in any customer focused communications, supplying materials, media outreach or any other forms of communication deemed appropriate for an IXP and are willing to sign non-disclosure agreements should that be necessary.<br clear="none"></div><div dir="ltr">>>  <br clear="none"></div><div dir="ltr">>> Thank you for your assistance in this important matter.<br clear="none"></div><div dir="ltr">>>  <br clear="none"></div><div dir="ltr">>> Respectfully,<br clear="none"></div><div dir="ltr">>> David Conrad<br clear="none"></div><div dir="ltr">>> ICANN Chief Technology Officer<br clear="none"></div><div dir="ltr">>>  <br clear="none"></div><div dir="ltr">>> ---<end>----<br clear="none"></div><div dir="ltr">>>  <br clear="none"></div><div dir="ltr">>>  <br clear="none"></div><div dir="ltr">>>  <br clear="none"></div><div dir="ltr">>> Thank you.<br clear="none"></div><div dir="ltr">>>  <br clear="none"></div><div dir="ltr">>> Best regards,<br clear="none"></div><div dir="ltr">>> Champika<br clear="none"></div><div dir="ltr">>>  <br clear="none"></div><div dir="ltr">>> ??????????????<br clear="none"></div><div dir="ltr">>> Champika Wijayatunga<br clear="none"></div><div dir="ltr">>> Security, Stability and Resiliency (SSR)<br clear="none"></div><div dir="ltr">>> Regional SSR Engagement Manager - APAC<br clear="none"></div><div dir="ltr">>> Internet Corporation for Assigned Names and Numbers (ICANN)<br clear="none"></div><div dir="ltr">>> Email: <<a rel="nofollow" shape="rect">champika.wijayatunga@icann.org</a> <mailto:<a rel="nofollow" shape="rect">champika.wijayatunga@icann.org</a>>><br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">-------------- next part --------------<br clear="none"></div><div dir="ltr">An HTML attachment was scrubbed...<br clear="none"></div><div dir="ltr">URL: <<a rel="nofollow" shape="rect">http://mailman.bdnog.org/pipermail/nog/attachments/20181001/4fad85e2/attachment.html</a>><br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">------------------------------<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">_______________________________________________<br clear="none"></div><div dir="ltr">nog mailing list<br clear="none"></div><div dir="ltr"><a rel="nofollow" shape="rect">nog@bdnog.org</a><br clear="none"></div><div dir="ltr"><a rel="nofollow" shape="rect">http://mailman.bdnog.org/mailman/listinfo/nog</a><br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">End of nog Digest, Vol 59, Issue 1<br clear="none"></div><div dir="ltr">**********************************<br clear="none"></div></div>
            </div>
        </div></div></div>_______________________________________________<br clear="none">
nog mailing list<br clear="none">
<a rel="nofollow" shape="rect">nog@bdnog.org</a><br clear="none">
<a rel="nofollow" shape="rect">http://mailman.bdnog.org/mailman/listinfo/nog</a><br clear="none">
</blockquote></div></div></div></div></div>
            </div>
        </div></div></div></blockquote></div>