Validate

Service Running?

What is listening on the 'domain' port (53)?

$ sudo netstat -anfinet | grep '.53'

NTP Date Configuration

]Ref: ntpd(8)

The date/time needs to be accurate for DNSSEC to work correctly.

$ sudo /usr/sbin/ntpd -sv

The "-v" will give us more information in syslog if time adjustments were necessary.

]Ref: DNSSEC]

$ dig org. SOA +dnssec
$ dig com. SOA +dnssec
$ dig +norec +dnssec @localhost . NS