Re: Contents of bind-users digest...

2021-07-06 Thread MURTARI, JOHN 
Folks, let me add my desire for a quick download dig supporting DoH.  It could 
really help with some testing, some ready stuff for Ubuntu 18/20,  
Redhat/CentOS, could make a lot of people happy.   Maybe the libs included and 
we set the LD_LIBRARY_PATH, or a 'static' link?


It only takes a 'few minutes' more -- once you spend a few hours getting the 
whole environment setup.  some don't build it all the time.


I'll give ISC Five Stars on Google! 😃


> On 6 Jul 2021, at 05:56, Eric Germann via bind-users 
>  wrote:
>
> Has ISC given any thought to releasing dig as a separate source package?
>
> It?s good for testing DoH, but you need to build the entire bind package to 
> get it.  It would be useful for support analysts without the overhead of 
> compiling all of bind to get it

Really, it a couple of extra megabytes of disk space and a couple of extra 
minutes of compile
time.  Dig is not a stand alone component.  It depends on libisc, libdns, 
libisccfg, libirs, and
libbind9.  Thats most of the libraries we build.  It makes no sense to have a 
seperate source
package for dig.



___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Re: Contents of bind-users digest...

2021-07-06 Thread Ondřej Surý 
Like this?

https://kb.isc.org/docs/isc-packages-for-bind-9

--
Ondřej Surý — ISC (He/Him)

My working hours and your working hours may be different. Please do not feel 
obligated to reply outside your normal working hours.

> On 6. 7. 2021, at 14:44, MURTARI, JOHN  wrote:
> 
> 
> Folks, let me add my desire for a quick download dig supporting DoH.  It 
> could really help with some testing, some ready stuff for Ubuntu 18/20,  
> Redhat/CentOS, could make a lot of people happy.   Maybe the libs included 
> and we set the LD_LIBRARY_PATH, or a 'static' link?
> 
> 
> 
> It only takes a 'few minutes' more -- once you spend a few hours getting the 
> whole environment setup.  some don't build it all the time.
> 
> 
> 
> I'll give ISC Five Stars on Google! 😃
> 
> 
> 
> > On 6 Jul 2021, at 05:56, Eric Germann via bind-users 
> >  wrote:
> > 
> > Has ISC given any thought to releasing dig as a separate source package?
> > 
> > It?s good for testing DoH, but you need to build the entire bind package to 
> > get it.  It would be useful for support analysts without the overhead of 
> > compiling all of bind to get it
> 
> Really, it a couple of extra megabytes of disk space and a couple of extra 
> minutes of compile
> time.  Dig is not a stand alone component.  It depends on libisc, libdns, 
> libisccfg, libirs, and
> libbind9.  Thats most of the libraries we build.  It makes no sense to have a 
> seperate source
> package for dig.
> 
> 
> ___
> Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
> from this list
> 
> ISC funds the development of this software with paid support subscriptions. 
> Contact us at https://www.isc.org/contact/ for more information.
> 
> 
> bind-users mailing list
> bind-users@lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Re: Contents of bind-users digest...

2021-07-06 Thread MURTARI, JOHN 
Ondřej -   I have to smile.  I should have known!  Thank you for the reminder. 
You get 5 Stars!  😃

Although this would require you install all of BIND?  Might be inconvenient for 
folks who want the upgraded dig -- but don't want to disturb the rest of an 
existing install?

Like this?

https://kb.isc.org/docs/isc-packages-for-bind-9

--
Ondřej Surý — ISC (He/Him)

My working hours and your working hours may be different. Please do not feel 
obligated to reply outside your normal working hours.

On 6. 7. 2021, at 14:44, MURTARI, JOHN  wrote:


Folks, let me add my desire for a quick download dig supporting DoH.  It could 
really help with some testing, some ready stuff for Ubuntu 18/20,  
Redhat/CentOS, could make a lot of people happy.   Maybe the libs included and 
we set the LD_LIBRARY_PATH, or a 'static' link?

It only takes a 'few minutes' more -- once you spend a few hours getting the 
whole environment setup.  some don't build it all the time.

I'll give ISC Five Stars on Google! 😃


Like this?

https://kb.isc.org/docs/isc-packages-for-bind-9

--
Ondřej Surý — ISC (He/Him)

My working hours and your working hours may be different. Please do not feel 
obligated to reply outside your normal working hours.

On 6. 7. 2021, at 14:44, MURTARI, JOHN  wrote:


Folks, let me add my desire for a quick download dig supporting DoH.  It could 
really help with some testing, some ready stuff for Ubuntu 18/20,  
Redhat/CentOS, could make a lot of people happy.   Maybe the libs included and 
we set the LD_LIBRARY_PATH, or a 'static' link?

It only takes a 'few minutes' more -- once you spend a few hours getting the 
whole environment setup.  some don't build it all the time.

I'll give ISC Five Stars on Google! 😃



From: Ondřej Surý 
Sent: Tuesday, July 6, 2021 11:26:52 AM
To: MURTARI, JOHN
Cc: bind-users@lists.isc.org
Subject: Re: Contents of bind-users digest...

Like this?

https://kb.isc.org/docs/isc-packages-for-bind-9

--
Ondřej Surý — ISC (He/Him)

My working hours and your working hours may be different. Please do not feel 
obligated to reply outside your normal working hours.

On 6. 7. 2021, at 14:44, MURTARI, JOHN  wrote:



Folks, let me add my desire for a quick download dig supporting DoH.  It could 
really help with some testing, some ready stuff for Ubuntu 18/20,  
Redhat/CentOS, could make a lot of people happy.   Maybe the libs included and 
we set the LD_LIBRARY_PATH, or a 'static' link?


It only takes a 'few minutes' more -- once you spend a few hours getting the 
whole environment setup.  some don't build it all the time.


I'll give ISC Five Stars on Google! 😃


> On 6 Jul 2021, at 05:56, Eric Germann via bind-users 
>  wrote:
>
> Has ISC given any thought to releasing dig as a separate source package?
>
> It?s good for testing DoH, but you need to build the entire bind package to 
> get it.  It would be useful for support analysts without the overhead of 
> compiling all of bind to get it

Really, it a couple of extra megabytes of disk space and a couple of extra 
minutes of compile
time.  Dig is not a stand alone component.  It depends on libisc, libdns, 
libisccfg, libirs, and
libbind9.  Thats most of the libraries we build.  It makes no sense to have a 
seperate source
package for dig.



___
Please visit 
https://lists.isc.org/mailman/listinfo/bind-users
 to unsubscribe from this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at 
https://www.isc.org/contact/
 for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailma

Re: Contents of bind-users digest...

2021-07-06 Thread Paul Kosinski via bind-users 
On Tue, 6 Jul 2021 12:44:15 +
"MURTARI, JOHN"  wrote:

> Folks, let me add my desire for a quick download dig supporting DoH.  It 
> could really help with some testing, some ready stuff for Ubuntu 18/20,  
> Redhat/CentOS, could make a lot of people happy.   Maybe the libs included 
> and we set the LD_LIBRARY_PATH, or a 'static' link?
> 
> 
> It only takes a 'few minutes' more -- once you spend a few hours getting the 
> whole environment setup.  some don't build it all the time.
> 
> 
> I'll give ISC Five Stars on Google! 😃
> 
> 
> > On 6 Jul 2021, at 05:56, Eric Germann via bind-users 
> >  wrote:
> >
> > Has ISC given any thought to releasing dig as a separate source package?
> >
> > It?s good for testing DoH, but you need to build the entire bind package to 
> > get it.  It would be useful for support analysts without the overhead of 
> > compiling all of bind to get it  
> 
> Really, it a couple of extra megabytes of disk space and a couple of extra 
> minutes of compile
> time.  Dig is not a stand alone component.  It depends on libisc, libdns, 
> libisccfg, libirs, and
> libbind9.  Thats most of the libraries we build.  It makes no sense to have a 
> seperate source
> package for dig.


It isn't mainly the disk space and extra build time, it's the complexity. 
Somebody who only wants 'dig' would have to figure out how to isolate it from 
the result of the build. This would be especially troublesome after doing a 
"make install" (which I suspect is necessary to get the 'dig' executable 
properly set up) as there would be a whole lot of undesired stuff installed. 
Perhaps adding a "install-dig-only" option to the make file would be possible 
and not a lot of work?
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Re: Contents of bind-users digest...

2021-07-06 Thread Eric Germann via bind-users 
Or “make dig”

> On Jul 6, 2021, at 11:47, Paul Kosinski via bind-users 
>  wrote:
> 
> On Tue, 6 Jul 2021 12:44:15 +
> "MURTARI, JOHN"  wrote:
> 
>> Folks, let me add my desire for a quick download dig supporting DoH.  It 
>> could really help with some testing, some ready stuff for Ubuntu 18/20,  
>> Redhat/CentOS, could make a lot of people happy.   Maybe the libs included 
>> and we set the LD_LIBRARY_PATH, or a 'static' link?
>> 
>> 
>> It only takes a 'few minutes' more -- once you spend a few hours getting the 
>> whole environment setup.  some don't build it all the time.
>> 
>> 
>> I'll give ISC Five Stars on Google! 😃
>> 
>> 
 On 6 Jul 2021, at 05:56, Eric Germann via bind-users 
  wrote:
>>> 
>>> Has ISC given any thought to releasing dig as a separate source package?
>>> 
>>> It?s good for testing DoH, but you need to build the entire bind package to 
>>> get it.  It would be useful for support analysts without the overhead of 
>>> compiling all of bind to get it  
>> 
>> Really, it a couple of extra megabytes of disk space and a couple of extra 
>> minutes of compile
>> time.  Dig is not a stand alone component.  It depends on libisc, libdns, 
>> libisccfg, libirs, and
>> libbind9.  Thats most of the libraries we build.  It makes no sense to have 
>> a seperate source
>> package for dig.
> 
> 
> It isn't mainly the disk space and extra build time, it's the complexity. 
> Somebody who only wants 'dig' would have to figure out how to isolate it from 
> the result of the build. This would be especially troublesome after doing a 
> "make install" (which I suspect is necessary to get the 'dig' executable 
> properly set up) as there would be a whole lot of undesired stuff installed. 
> Perhaps adding a "install-dig-only" option to the make file would be possible 
> and not a lot of work?
> ___
> Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
> from this list
> 
> ISC funds the development of this software with paid support subscriptions. 
> Contact us at https://www.isc.org/contact/ for more information.
> 
> 
> bind-users mailing list
> bind-users@lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users

___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

compile flag to disable AAAA responses is unrecognized

2021-07-06 Thread Scott Strattner 
I successfully built 9.16.18 on my RH8.4 ppc64el VM. But after doing so I wanted to set it up so that if it receives a query over IPv4 it will not return any  records in the reply.
 
I found this: https://kb.isc.org/docs/aa-00576
 
Which mentions using --enable-filter- and then applying the right option in named.conf. However when I added this to my configure flags, it says it is not recognized (see below).
 
What is the current way to enforce this behavior? I tried adding the "filter--on-v4 yes;" in named.conf (perhaps that compile option was now enabled by default?) but did not work (queries still return both A and  results).
 
Configuration summary:---Optional features enabled:    GSS-API (--with-gssapi)    Allow 'fixed' rrset-order (--enable-fixed-rrset)    Print backtrace on crash (--enable-backtrace)    Use symbol table for backtrace, named only (--enable-symtable)    Use GNU libtool (--with-libtool)    CMocka Unit Testing Framework (--with-cmocka)    DNSSEC validation active by default (--enable-auto-validation)    Dynamically loadable zone (DLZ) drivers:    Filesystem (--with-dlz-filesystem)---Features disabled or unavailable on this platform:    Small-system tuning (--with-tuning)    Allow 'dnstap' packet logging (--enable-dnstap)    GeoIP2 access control (--enable-geoip)    DNS Response Policy Service interface (--enable-dnsrps)    Using PKCS#11 for Public-Key Cryptography (--with-native-pkcs11)    Very verbose query trace logging (--enable-querytrace)    IDN support (--with-libidn2)---Configured paths:    prefix: /usr/local    sysconfdir: ${prefix}/etc    localstatedir: ${prefix}/var---Compiler: gcc    gcc (GCC) 8.4.1 20200928 (Red Hat 8.4.1-1)    Copyright (C) 2018 Free Software Foundation, Inc.    This is free software; see the source for copying conditions.  There is NO    warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Unrecognized options:    --enable-filter-
Scott Strattner

___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Re: compile flag to disable AAAA responses is unrecognized

2021-07-06 Thread Rick Dicaire 
On Tue, Jul 6, 2021 at 3:06 PM Scott Strattner  wrote:

> I successfully built 9.16.18 on my RH8.4 ppc64el VM. But after doing so I
> wanted to set it up so that if it receives a query over IPv4 it will not
> return any  records in the reply
>

Hi Scott, just curious, why do you need this?
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Re: compile flag to disable AAAA responses is unrecognized

2021-07-06 Thread Mark Andrews 
 filtering is now a plug-in (as of 9.14).  This is documented in the ARM.

> On 7 Jul 2021, at 05:05, Scott Strattner  wrote:
> 
> I successfully built 9.16.18 on my RH8.4 ppc64el VM. But after doing so I 
> wanted to set it up so that if it receives a query over IPv4 it will not 
> return any  records in the reply.
>  
> I found this: https://kb.isc.org/docs/aa-00576
>  
> Which mentions using --enable-filter- and then applying the right option 
> in named.conf. However when I added this to my configure flags, it says it is 
> not recognized (see below).
>  
> What is the current way to enforce this behavior? I tried adding the 
> "filter--on-v4 yes;" in named.conf (perhaps that compile option was now 
> enabled by default?) but did not work (queries still return both A and  
> results).
>  
> Configuration summary:
> ---
> Optional features enabled:
> GSS-API (--with-gssapi)
> Allow 'fixed' rrset-order (--enable-fixed-rrset)
> Print backtrace on crash (--enable-backtrace)
> Use symbol table for backtrace, named only (--enable-symtable)
> Use GNU libtool (--with-libtool)
> CMocka Unit Testing Framework (--with-cmocka)
> DNSSEC validation active by default (--enable-auto-validation)
> Dynamically loadable zone (DLZ) drivers:
> Filesystem (--with-dlz-filesystem)
> ---
> Features disabled or unavailable on this platform:
> Small-system tuning (--with-tuning)
> Allow 'dnstap' packet logging (--enable-dnstap)
> GeoIP2 access control (--enable-geoip)
> DNS Response Policy Service interface (--enable-dnsrps)
> Using PKCS#11 for Public-Key Cryptography (--with-native-pkcs11)
> Very verbose query trace logging (--enable-querytrace)
> IDN support (--with-libidn2)
> ---
> Configured paths:
> prefix: /usr/local
> sysconfdir: ${prefix}/etc
> localstatedir: ${prefix}/var
> ---
> Compiler: gcc
> gcc (GCC) 8.4.1 20200928 (Red Hat 8.4.1-1)
> Copyright (C) 2018 Free Software Foundation, Inc.
> This is free software; see the source for copying conditions.  There is NO
> warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR 
> PURPOSE.
> Unrecognized options:
> --enable-filter-
> Scott Strattner
> 
> 
> ___
> Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
> from this list
> 
> ISC funds the development of this software with paid support subscriptions. 
> Contact us at https://www.isc.org/contact/ for more information.
> 
> 
> bind-users mailing list
> bind-users@lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users

-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742  INTERNET: ma...@isc.org

___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users