Re: BIND 9.16.13 and Mac OS X 10.13.6 - problems with ./configure
alcol alcol wrote: > seriously? is like linux/unix FAQ 😄 Please, if you can't be helpful, don't reply at all. We all have to learn somehow, and the best way to show your knowledge is to share it generously. Tony. -- f.anthony.n.finchhttps://dotat.at/ Trafalgar: Easterly 6 to gale 8 in southeast, otherwise mainly northeasterly 4 to 6. Moderate or rough. Thundery showers. Good, occasionally moderate. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: BIND 9.16.13 and Mac OS X 10.13.6 - problems with ./configure
Well said! On Mon, 29 Mar 2021 16:11:54 +0100 Tony Finch wrote: > alcol alcol wrote: > > > seriously? is like linux/unix FAQ 😄 > > Please, if you can't be helpful, don't reply at all. We all have to learn > somehow, and the best way to show your knowledge is to share it generously. > > Tony. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
9.16.12 tries to read keys that it does not need?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 dns_dnssec_findmatchingkeys: error reading key file Kfive-ten- sg.com.+008+39376.private: permission denied Those key files are 0600 root:root. Bind should never need to read them since we are not doing in-line signing or key rotation within bind. That is just a log message - it does not seem to have any operational impact. -BEGIN PGP SIGNATURE- iHMEAREKADMWIQSuFMepaSkjWnTxQ5QvqPuaKVMWwQUCYGIZYBUcY2FybEBmaXZl LXRlbi1zZy5jb20ACgkQL6j7milTFsEBoQCcD5Ohlvnf9NnLKLX7VRZKelM62akA n03DV9O+59R6CBUMlQz/0qdeyj8p =yFia -END PGP SIGNATURE- ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: BIND 9.16.13 and Mac OS X 10.13.6 - problems with ./configure
On 26 Mar 2021, at 14:32, alcol alcol wrote: > seriously? is like linux/unix FAQ 😄 Oh, I would say learning how to post to mailing lists in linux/unix 101. Perhaps you could review that yourself and not send bloated messages full of HTML garbage? -- "Are you pondering what I'm pondering?" "Well, I think so, Brain, but snort no, no, it's too stupid!" ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: BIND 9.16.13 and Mac OS X 10.13.6 - problems with ./configure
Please lets not react to one aggression with yet another aggression. I think all has been said on this topic, so if everyone could refrain from piling more emails on this topic I would be very much delighted. Thanks, Ondřej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 29. 3. 2021, at 23:17, @lbutlr wrote: > > On 26 Mar 2021, at 14:32, alcol alcol wrote: >> seriously? is like linux/unix FAQ 😄 > > Oh, I would say learning how to post to mailing lists in linux/unix 101. > Perhaps you could review that yourself and not send bloated messages full of > HTML garbage? > > -- > "Are you pondering what I'm pondering?" > "Well, I think so, Brain, but snort no, no, it's too stupid!" > > ___ > Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe > from this list > > ISC funds the development of this software with paid support subscriptions. > Contact us at https://www.isc.org/contact/ for more information. > > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: 9.16.13 overwrote master files
Carl,
can you add a “#” in front of "dnssec-policy” in bin/named/config.c
and see how that goes for you. That will comment out the default
‘dnssec-policy “none”;’.
Please let us know how that goes for you.
Mark
> On 29 Mar 2021, at 15:02, Carl Byington wrote:
>
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA512
>
> On Mon, 2021-03-29 at 12:54 +1100, Mark Andrews wrote:
>> What do you have in options?
>
> options {
>directory "/var/named";
>allow-recursion { "friends"; };
>dnssec-enable yes;
>dnssec-validation auto;
>bindkeys-file "/etc/named.bind.keys";
>managed-keys-directory "/var/named/dynamic";
>listen-on-v6 {any;};
>ixfr-from-differences yes;
>max-journal-size 2m;
>notify yes;
>response-policy { zone "rpz.five-ten-sg.com";}
>qname-wait-recurse no;
>rate-limit {
>responses-per-second 500;
>errors-per-second50;
>nxdomains-per-second 500;
>qps-scale4000;
>exempt-clients { "friends"; };
>};
>max-recursion-queries 200; qname-minimization disabled;
>fetches-per-server 50;
>fetches-per-zone 50;
>server-id hostname;
> };
>
> This is on Centos 8. I will setup a VM tomorrow for more testing on
> this. For now, reverted back to 9.16.12.
>
>
>
>
> -BEGIN PGP SIGNATURE-
>
> iHMEAREKADMWIQSuFMepaSkjWnTxQ5QvqPuaKVMWwQUCYGFRRxUcY2FybEBmaXZl
> LXRlbi1zZy5jb20ACgkQL6j7milTFsFm/wCbBpzr/W/QdtUMG0hhstYcI1wpsBcA
> nRdv220ju0R0IIEgbLzfbXs8CjHX
> =+zDb
> -END PGP SIGNATURE-
>
>
>
>
--
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
from this list
ISC funds the development of this software with paid support subscriptions.
Contact us at https://www.isc.org/contact/ for more information.
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
