Re: How to enable EDNS for an authoritative name server?

2015-01-22 Thread Jackie Lui
Thanks so much for info.

Is there any tentative schedule when 9.11 will be released?

Just want to see which quarter of 2015 we can try the production release.
Thanks again.


2015-01-22 15:47 GMT+08:00 Evan Hunt :

> On Thu, Jan 22, 2015 at 03:25:38PM +0800, Jackie Lui wrote:
> > I have installed bind 9.10.1 and enable GeoIP features. This works fine
> > except the EDNS feature.
> >
> > When I dig Google DNS server with +subnet parameter, Google DNS server
> can
> > respond the CLIENT-SUBNET value. However, when I dig my DNS server, it
> > can't show the CLIENT-SUBNET value. It seems that my server cannot
> > handle ECS query?
>
> BIND 9.10 only has support for the client-subnet option in dig, not in
> the name server.
>
> Authoritative server support for client-subnet will be in BIND 9.11.
> You can try it now by cloning the git repository at source.isc.org, if
> you like (I'd be happy to have your feedback on it).
>
> --
> Evan Hunt -- e...@isc.org
> Internet Systems Consortium, Inc.
>
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Re: Automatic flushing of the jnl files

2015-01-22 Thread Eric.BERTHIAUME.external
Thanks all for your replies.  Lots of interesting information!

I’ll keep a eye out for those jnl files.

Thanks again!

E. Berthiaume
**
Ce courrier électronique, y compris les pièces jointes, est à l'attention 
exclusive des destinataires désignés et revêt un caractère confidentiel.
Si vous recevez ce courrier électronique par erreur, merci d'en informer sans 
délai l'expéditeur et de supprimer son contenu et ses pièces jointes.

Le contenu de ce courrier électronique ne pourrait engager la responsabilité de 
la Banque de France que s'il a été émis par une personne dûment habilitée 
agissant dans le strict cadre des fonctions auxquelles elle est employée et à 
des fins non étrangères à ses attributions.

L'expéditeur de ce courrier électronique ne peut pas garantir la sécurité de 
l'acheminement par voie électronique et ne saurait dès lors encourir une 
quelconque responsabilité en cas d'altération de son contenu.

**

This e-mail, attachments included, is intended solely for the addressees and 
should be considered as confidential.
Should you receive this message by error, please notify the sender immediately 
and destroy this e-mail and its attachments.

Banque de France cannot be considered as liable for the content of this message 
unless the sender has been duly authorized and has acted strictly in the course 
of his/her tasks as an employee.

The sender of this e-mail cannot ensure the security of its electronic 
transmission and consequently will not be liable should its content be altered.
**
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Re: How to enable EDNS for an authoritative name server?

2015-01-22 Thread Evan Hunt
On Thu, Jan 22, 2015 at 04:03:20PM +0800, Jackie Lui wrote:
> Is there any tentative schedule when 9.11 will be released?

We're aiming for third quarter of 2015.

-- 
Evan Hunt -- e...@isc.org
Internet Systems Consortium, Inc.
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Swedish and Danish "ö" conflicts with eachother

2015-01-22 Thread Tommy Borginger
We get the following error during start of bind. The problem we suspect is that 
the machine or bind thinks the Danish and Swedish letter "ö" is the same.

This is the error showing up in syslog:

loading configuration from '/etc/bind/named.conf'
/etc/bind/zones.conf:3015: zone 'dr\032\032mpor.no': already exists previous 
definition: /etc/bind/ zones.conf:3013
loading configuration: failure
exiting (due to fatal error)

Line 3013 contains:
zone "drømpor.no" { type slave; masters {193.14.90.50;}; file 
"/etc/bind/db/drømpor.no";};

Line 3015 contains:
zone "drömpor.no" { type slave; masters {193.14.90.50;}; file 
"/etc/bind/db/drömpor.no";};

Any ideas what may cause this?
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Re: Swedish and Danish "ö" conflicts with eachother

2015-01-22 Thread Anand Buddhdev
On 22/01/15 23:30, Tommy Borginger wrote:

Hi Tommy,

> We get the following error during start of bind. The problem we
> suspect is that the machine or bind thinks the Danish and Swedish letter
> "ö" is the same.
> 
> This is the error showing up in syslog:
> 
> loading configuration from '/etc/bind/named.conf'
> /etc/bind/zones.conf:3015: zone 'dr\032\032mpor.no': already exists previous 
> definition: /etc/bind/ zones.conf:3013
> loading configuration: failure
> exiting (due to fatal error)
> 
> Line 3013 contains:
> zone "drømpor.no" { type slave; masters {193.14.90.50;}; file 
> "/etc/bind/db/drømpor.no";};
> 
> Line 3015 contains:
> zone "drömpor.no" { type slave; masters {193.14.90.50;}; file 
> "/etc/bind/db/drömpor.no";};
> 
> Any ideas what may cause this?

I don't think you can use non-ascii characters in the BIND
configuration. You'll have to convert your domain names into their
punycode representation, such as:

zone xn--drmpor-cya.no { type slave ... };
zone xn--drmpor-xxa.no { type slave ... };

Regards,

Anand
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Re: Swedish and Danish "ö" conflicts with eachother

2015-01-22 Thread Mark Andrews

It looks like something has mapped the 0x80..0xff octets to space.

That said the use non-ascii in the DNS is not well defined.  If you
add the UTF8 code point using \XXX\XXX where XXX are the decimal
values that make up the code point it should pass.  This keeps named.conf
as ascii but still allows the use of utf8 (or whatever coding you like)
in labels.

Mark

In message <517c9484d8744da88841ab30944c5e60@jon-int-exh13.ports.local>, Tommy 
Borginger writes:
> We get the following error during start of bind. The problem we suspect is =
> that the machine or bind thinks the Danish and Swedish letter "=F6" is the =
> same.
> 
> This is the error showing up in syslog:
> 
> loading configuration from '/etc/bind/named.conf'
> /etc/bind/zones.conf:3015: zone 'dr\032\032mpor.no': already exists previou=
> s definition: /etc/bind/ zones.conf:3013
> loading configuration: failure
> exiting (due to fatal error)
> 
> Line 3013 contains:
> zone "dr=F8mpor.no" { type slave; masters {193.14.90.50;}; file "/etc/bind/=
> db/dr=F8mpor.no";};
> 
> Line 3015 contains:
> zone "dr=F6mpor.no" { type slave; masters {193.14.90.50;}; file "/etc/bind/=
> db/dr=F6mpor.no";};
> 
> Any ideas what may cause this?
> 
> --_000_517c9484d8744da88841ab30944c5e60jonintexh13portslocal_
> Content-Type: text/html; charset="iso-8859-1"
> Content-Transfer-Encoding: quoted-printable
> 
>  osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
> xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml"; xmlns=3D"http:=
> //www.w3.org/TR/REC-html40">
> 
>  1">
> 
> 
> 
> 
> 
> We get the following error duri=
> ng start of bind. The problem we suspect is that the machine or bind thinks=
>  the Danish and Swedish letter “=F6” is the same. pan>
>  
> This is the error showing up in=
>  syslog:
>  
> loading configuration from '/et=
> c/bind/named.conf’
> /etc/bind/zones.conf:3015: zone=
>  'dr\032\032mpor.no': already exists previous definition: /etc/bind/ zones.=
> conf:3013
> loading configuration: failure<=
> o:p>
> exiting (due to fatal error) p>
>  
> Line 3013 contains:<=
> /span>
> zone "dr=F8mpor.no" {=
>  type slave; masters {193.14.90.50;}; file "/etc/bind/db/dr=F8mpor.no&=
> quot;;};
>  
> Line 3015 contains:<=
> /span>
> zone "dr=F6mpor.no" {=
>  type slave; masters {193.14.90.50;}; file "/etc/bind/db/dr=F6mpor.no&=
> quot;;};
>  
> Any ideas what may cause this?<=
> o:p>
> 
> 
> 
> 
> --_000_517c9484d8744da88841ab30944c5e60jonintexh13portslocal_--
> 
> --===0394047629525854943==
> Content-Type: text/plain; charset="us-ascii"
> MIME-Version: 1.0
> Content-Transfer-Encoding: 7bit
> Content-Disposition: inline
> 
> ___
> Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
>  from this list
> 
> bind-users mailing list
> bind-users@lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
> --===0394047629525854943==--
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: Swedish and Danish "ö" conflicts with eachother

2015-01-22 Thread Evan Hunt
On Fri, Jan 23, 2015 at 12:36:38PM +1100, Mark Andrews wrote:
> 
> It looks like something has mapped the 0x80..0xff octets to space.
> 
> That said the use non-ascii in the DNS is not well defined.  If you
> add the UTF8 code point using \XXX\XXX where XXX are the decimal
> values that make up the code point it should pass.  This keeps named.conf
> as ascii but still allows the use of utf8 (or whatever coding you like)
> in labels.

I believe in UTF8 it would be:

zone "dr\195\182pmor.no" { ... }; # dröpmor.no
zone "dr\195\184pmor.no" { ... }; # drøpmor.no

But note that you'll need to use "check-names ignore;" to get the zones to
load, because named doesn't recognize those octal encodings as letters, and
will block them as invalid hostnames for any A,  or MX record.

(This assumes the .no zone allows those characters in delegations. I
would guess it does, but I don't actually know.)

-- 
Evan Hunt -- e...@isc.org
Internet Systems Consortium, Inc.
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Bind in FreeBSD 10

2015-01-22 Thread LuKreme
I know FreeBSD requires you to install bind if you need it as of version 10, 
but what i can’t find is if the packages bind910 and bind-tools overlap 
completely or not. That is, do I install bind-tools if bind is installed?

Also, just quickly, is there a consensus on running 9.10 over 9.9?

-- 
Look, that's why there's rules, understand? So that you *think* before
you break 'em.

___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Re: How to enable EDNS for an authoritative name server?

2015-01-22 Thread Jackie Lui
Thanks for your help.

2015-01-22 23:59 GMT+08:00 Evan Hunt :

> On Thu, Jan 22, 2015 at 04:03:20PM +0800, Jackie Lui wrote:
> > Is there any tentative schedule when 9.11 will be released?
>
> We're aiming for third quarter of 2015.
>
> --
> Evan Hunt -- e...@isc.org
> Internet Systems Consortium, Inc.
>
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Re: Bind in FreeBSD 10

2015-01-22 Thread /dev/rob0
On Thu, Jan 22, 2015 at 07:17:44PM -0700, LuKreme wrote:
> I know FreeBSD requires you to install bind if you need it as of 
> version 10, but what i can’t find is if the packages bind910 and 
> bind-tools overlap completely or not. That is, do I install 
> bind-tools if bind is installed?

That question is better suited for a FreeBSD support list.

> Also, just quickly, is there a consensus on running 9.10 over 9.9?

That's tough to say.  Depends on your needs.

Look at the 9.10 new features.  If you need those, you probably do 
want 9.10.  A couple of nice ones off the top of my head: the new 
"in-view" zone option for sharing zones among views (useful in 
multiple-view authoritative nameservers); and the prefetch feature 
for recursive resolvers.  And of course on the tools side, 9.10 
boasts the new delv(1) tool.

9.9 is the current Extended Support Version (ESV), so it's likely to 
outlive 9.10.  If you're after long-term stability, ESV might be 
important to you.
-- 
  http://rob0.nodns4.us/
  Offlist GMX mail is seen only if "/dev/rob0" is in the Subject:
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users