Re: DSA_do_verify fix for BIND 9.2

2009-01-15 Thread Doug Barton
Lalvani, Hiro wrote: > Could any one of help me, regarding this fix in BIND 9.2. I am unable to find > function same function in BIND 9.2 or could any one just share the > corresponding related the code architecture between BIND9.2 and BIND 9.3. http://oldwww.isc.org/sw/bind/view/?release=9.2.9

DNS lookups getting blocked , cant trace where is the block

2009-01-15 Thread ram
This is slightly OT, I am not able to resolve some domains from a server hosted at thePlanet (Centos-5.2 with bind 9.3.3 ) - [r...@smtpout1 ~]# dig @localhost bsnl.in ; <<>> DiG 9.3.3rc2 <<>> @localhost bsnl.in ; (1 server found) ;; global optio

Re: FIX for BIND-9.2

2009-01-15 Thread Danny Mayer
Lalvani, Hiro wrote: > Hi , > > I need small help regarding this issue. > > I have looked at the file " openssldsa_link.c " under the BIND-9.3 and found > below code snapshot where the problem occured. > > > status = DSA_do_verify(digest, ISC_SHA1_DIGESTLENGTH, dsasig, dsa); > DSA_SIG

Re: DNS forwarders

2009-01-15 Thread Danny Mayer
Thilanka Samarasekera wrote: > Can someone tell me how a BIND 9 server selects what forwarder its going > to use? I read that BIND 8 used roundtrip time through a ping but I > cannot find how BIND 9 does that. Does it round-robin between the > forwarders that are set? Thanks in advance. > > T You

Re: SERVFAIL issues

2009-01-15 Thread Jeremy C. Reed
> Is this intermittent SERVFAIL issue resolved in 9.5.1-P1? 9.5.1 has many improvements that solve various SERVFAIL issues seen in the 9.5.0-P1/P2 code and includes /dev/poll, kqueue, or epoll on supported systems. ___ bind-users mailing list bind-user

SERVFAIL issues

2009-01-15 Thread Frank Bulk
http://marc.info/?l=bind-users&m=122239920822324&w=2 http://marc.info/?l=bind-users&m=122243068905656&w=2 We upgraded to 9.5.0-P1 when the Kaminsky DNS vulnerability was announced and have had intermittent issues with SERVFAIL problems for some DSL modems that don't properly fail over to a seconda

Re: Assertion Failure

2009-01-15 Thread JINMEI Tatuya / 神明達哉
At Thu, 15 Jan 2009 15:57:17 -0600, Rich Goodson wrote: > I had the same issue on one of my caching resolvers just yesterday for > the first time. This is one of the lowest utilized servers out of 6 > that are all on identical hardware and identical versions of BIND > (9.4.3). > > Jan 14

Re: Unified Root - Domain Configuration Issue

2009-01-15 Thread Peter Dambier
Hi ozgurs, can you give me your address so I can settup a zone for you? e.g. ozgurs A 127.0.0.1 Then you have the proof that it is working. Please have a look at http://www.cesidianroot.net/ to find how to settup your DNS for the test. If you have a dynamic ip address things are a li

Re: Assertion Failure

2009-01-15 Thread Rich Goodson
I had the same issue on one of my caching resolvers just yesterday for the first time. This is one of the lowest utilized servers out of 6 that are all on identical hardware and identical versions of BIND (9.4.3). Jan 14 17:46:38 wdmdc-dns-dts2 named[1415]: [ID 873579 daemon.crit] name.c

Re: DNS forwarders

2009-01-15 Thread JINMEI Tatuya / 神明達哉
At Thu, 15 Jan 2009 11:52:37 -0600, "Thilanka Samarasekera" wrote: > Can someone tell me how a BIND 9 server selects what forwarder its going to > use? I read that BIND 8 used roundtrip time through a ping but I cannot find > how BIND 9 does that. Does it round-robin between the forwarders that a

DSA_do_verify fix for BIND 9.2

2009-01-15 Thread Lalvani, Hiro
Hi , I need small help regarding this issue. I have looked at the file " openssldsa_link.c " under the BIND-9.3 and found below code snapshot where the problem occured. status = DSA_do_verify(digest, ISC_SHA1_DIGESTLENGTH, dsasig, dsa); DSA_SIG_free(dsasig); if (status == 0)

RE: FIX for BIND-9.2

2009-01-15 Thread Lalvani, Hiro
Hi , I need small help regarding this issue. I have looked at the file " openssldsa_link.c " under the BIND-9.3 and found below code snapshot where the problem occured. status = DSA_do_verify(digest, ISC_SHA1_DIGESTLENGTH, dsasig, dsa); DSA_SIG_free(dsasig); if (status == 0)

Re: Multiple PTR records

2009-01-15 Thread Chris Buxton
On Jan 15, 2009, at 6:33 AM, Halassy Zoltán wrote: My configuration: Have a router, two computers behind it. comp1 has webserver (no mailserver), comp2 has mailserver (no webserver), have one IPv4 address, and few IPv6 addresses. The IPv4 address configured on the router, DNAT-ing the TCPv

DNS forwarders

2009-01-15 Thread Thilanka Samarasekera
Can someone tell me how a BIND 9 server selects what forwarder its going to use? I read that BIND 8 used roundtrip time through a ping but I cannot find how BIND 9 does that. Does it round-robin between the forwarders that are set? Thanks in advance. T _

Re: Unified Root - Domain Configuration Issue

2009-01-15 Thread Joe Baptista
Unifiedroot is a scam. I suggest you do some due diligence on them before you pay them any money. Let them know I gave you this heads up - I'm sure they will appreciate it. cheers joe baptista On Thu, Jan 15, 2009 at 5:48 AM, ozgurs wrote: > We want to buy a unified root domain, > but they sa

Re: [LEGACY DOMAIN: COL.CZ] Re: Is 9.5 broken

2009-01-15 Thread Daniel Ryslink
Hello, I can also confirm this for BIND 9.5.0-P2 for DNSSec enabled resolvers using DLV (an ISP environment, arout 500-600 queries per second according to BIND query log). After several hours of operation, the server stopped answering on certain cached records in signed zones (no packets ca

Unified Root - Domain Configuration Issue

2009-01-15 Thread ozgurs
We want to buy a unified root domain, but they say we can not use the domain only one word. like ozgurs so that it opens http://ozgurs but we have to use a connected word to this TLD, like example.ozgurs here, my quetion comes! :) i bet with my friend that we can not use the domain itself. NOW

Multiple PTR records

2009-01-15 Thread Halassy Zoltán
Hello! (sorry for my trash-english) I have a problem and finally i found out a "solution", but also i read the thread about multiple PTRs are not recommended. My configuration: Have a router, two computers behind it. comp1 has webserver (no mailserver), comp2 has mailserver (no webserver),