looking for libbind 6.0 prebuild for windows

2009-07-31 Thread dong
Hi All, I am working on a project need libresolv support on windows, and I tried to build libbind 6.0 using mingw but failed. So anyone know where to find a libbind 6.0 prebuild for windows? Or give me some hints how to build libbind on windows. -- Best Regards. -Vincent ___

Re: Format of 'dig -k' "TSIG key file"?

2009-07-31 Thread Joseph S D Yao
On Sat, Aug 01, 2009 at 08:07:16AM +1000, Mark Andrews wrote: ... > Network Working GroupD. Eastlake 3rd > Request for Comments: 4635 Motorola Laboratories > Category: Standards TrackAugust 2006 ... Ya

Re: socket.c:4524: unexpected error in BIND 9.4.3 P3

2009-07-31 Thread Le Vu
I have just reported this bug. Ticket number is [ISC-Bugs #20030]. Regards, Vu On Sat, Aug 1, 2009 at 4:06 AM, Paul E wrote: > > Le Vu, > > lev> BTW, what can I do to help debugging this problem? If it doesn't > lev> involve with programming I will try. > > Submit this to ISC by emailing bind9-b

Re: stats brainteaser

2009-07-31 Thread Hauke Lampe
Todd wrote: > Yesterday I needed to flush the cache on a number of my servers, and I > saw a big spike in queries recorded by the server in the "success" > category. The spike was about 40% more than the usual traffic. After a cache flush, the server has to re-fetch glue and nameserver records fr

Re: BIND 9.6.1-P1

2009-07-31 Thread Martin.Wismer.
SUN Freeware http://sunfreeware.com/index.html With many thank to Steve Christensen. Does anyone knows if there is any solaris .pkg distribution for BIND 9.6.1-P1? Im looking to replace old versions as per: https://www.isc.org/node/474 Thank you, Julian

BIND 9.6.1-P1

2009-07-31 Thread ic.nssip
Does anyone knows if there is any solaris .pkg distribution for BIND 9.6.1-P1? Im looking to replace old versions as per: https://www.isc.org/node/474 Thank you, Julian___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman

BIND 9.6.1-P1

2009-07-31 Thread ic.nssip
Does anyone knows if there is any solaris .pkg distribution for BIND 9.6.1-P1? Im looking to replace old versions as per: https://www.isc.org/node/474 Thank you, Julian___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/l

Re: Format of 'dig -k' "TSIG key file"?

2009-07-31 Thread Mark Andrews
In message <20090731171804.b23...@gwyn.tux.org>, Joseph S D Yao writes: > On Fri, Jul 31, 2009 at 03:32:48PM +1000, Mark Andrews wrote: > > In message <20090730174054.h23...@gwyn.tux.org>, Joseph S D Yao writes: > ... > > > Plus, I'm curious to know what 'dig -k' really wants to see. > > > > A ke

Re: Format of 'dig -k' "TSIG key file"?

2009-07-31 Thread Joseph S D Yao
On Fri, Jul 31, 2009 at 01:43:58PM +0200, Mark Elkins wrote: > On Thu, 2009-07-30 at 17:40 -0400, Joseph S D Yao wrote: > > > What does work is: > > dig -y mynet.:Ain/tGonnaTellNoWay== axfr example.zone > > @other.example.zone > > but I really, really find this not altogether pleasant. > > T

Re: Format of 'dig -k' "TSIG key file"?

2009-07-31 Thread Joseph S D Yao
On Fri, Jul 31, 2009 at 03:32:48PM +1000, Mark Andrews wrote: > In message <20090730174054.h23...@gwyn.tux.org>, Joseph S D Yao writes: ... > > Plus, I'm curious to know what 'dig -k' really wants to see. > > A keyfile as generated by "dnssec-keygen -a HMAC-*". ... Of which there are two - a .key

Re: socket.c:4524: unexpected error in BIND 9.4.3 P3

2009-07-31 Thread Paul E
Le Vu, lev> BTW, what can I do to help debugging this problem? If it doesn't lev> involve with programming I will try. Submit this to ISC by emailing bind9-b...@isc.org. Thanks! ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.or

Re: Can't transfer RFC2317 reverse zone

2009-07-31 Thread Steve Brown
> With the "file" statement in the zone declaration for that zone. > > Zone "0/27.146.68.12.in-addr.arpa" { >        ... >        file "blah-blah"; > # or    file "0.27.146.68.12.in-addr.arpa";  as I believe Mark Andrews > suggested >        ... > }; > > (See also Jeff Lightner's example earlier i

RE: Can't transfer RFC2317 reverse zone

2009-07-31 Thread Ben Bridges
With the "file" statement in the zone declaration for that zone. Zone "0/27.146.68.12.in-addr.arpa" { ... file "blah-blah"; # orfile "0.27.146.68.12.in-addr.arpa"; as I believe Mark Andrews suggested ... }; (See also Jeff Lightner's example earlier in this thread.)

Re: Can't transfer RFC2317 reverse zone

2009-07-31 Thread Steve Brown
>> Nope, no such file exists.  I've got bak.* for all my other zones, but >> not that one. > > The filename you use to *save* the zone file as is arbitrary, try > blah-blah How do I specify that? ___ bind-users mailing list bind-users@lists.isc.org

Re: Can't transfer RFC2317 reverse zone

2009-07-31 Thread Rick Dicaire
On Fri, Jul 31, 2009 at 1:16 PM, Steve Brown wrote: >>        I suspect you have 'file "bak.0/27.146.68.12.in-addr.arpa";' >>        in your zone declaration.  You can't alway use the zone name >>        as a file name as a zone name may contain "/" which is a > Nope, no such file exists.  I've go

Re: Can't transfer RFC2317 reverse zone

2009-07-31 Thread Steve Brown
>> From what I have seen on this list, BIND typically spits out this >> error when it doesn't have write permission on its working directory. > >        No.  Read the error message.  It says "file not found" in >        this case the file not found was the directory "bak.0". > >> However, I know th

RE: Can't transfer RFC2317 reverse zone

2009-07-31 Thread Jeff Lightner
What I did for our reverse zones due to the AT&T way of delegating was create two entries like this: # Special notation required for internet delegation (e.g. dig -x ...) # zone "49-62.65.210.63.IN-ADDR.ARPA" { type master; file "arpa.63.210.65"; allow-query { any; }; }; #

Re: Can't transfer RFC2317 reverse zone

2009-07-31 Thread Mark Andrews
In message <1f4ef0970907310934p2916336fy1f91485f8c17a...@mail.gmail.com>, Steve Brown writes: > I'm trying to setup a new server as a slave to our master DNS server. > I am able to transfer several zones just fine, but when will not > transfer. AT&T uses RFC2317-style zones for reverse delegatio

Can't transfer RFC2317 reverse zone

2009-07-31 Thread Steve Brown
I'm trying to setup a new server as a slave to our master DNS server. I am able to transfer several zones just fine, but when will not transfer. AT&T uses RFC2317-style zones for reverse delegation, so I've been delegated 0/27.146.68.12.in-addr.arpa. However, when I fired up BIND and tried to tra

Re: stats brainteaser

2009-07-31 Thread Rick Dicaire
On Fri, Jul 31, 2009 at 10:58 AM, Todd wrote: > I've got a monitoring script in place that does an rndc stats and > parses the output, then graphs it for me nicely. How is this being monitored? Are you sure its not an artifact of your monitoring software? I see this behaviour in mrtg/rrdtool whe

Re: RHEL backports for dynamic update fix are available

2009-07-31 Thread Ray Van Dolson
On Fri, Jul 31, 2009 at 06:25:50AM -0700, Jeff Lightner wrote: > For those of you using the canned RHEL BIND packages they sent out > errata information for RHEL3, RHEL4 and RHEL5 overnight. They’ve > backported the fix into the BIND 9 versions used. > > As noted in Q&A here the dynamic update i

stats brainteaser

2009-07-31 Thread Todd
I've got a monitoring script in place that does an rndc stats and parses the output, then graphs it for me nicely. Yesterday I needed to flush the cache on a number of my servers, and I saw a big spike in queries recorded by the server in the "success" category. The spike was about 40% more than t

RHEL backports for dynamic update fix are available

2009-07-31 Thread Jeff Lightner
For those of you using the canned RHEL BIND packages they sent out errata information for RHEL3, RHEL4 and RHEL5 overnight. They've backported the fix into the BIND 9 versions used. As noted in Q&A here the dynamic update issue affects all BIND 9 but only 9.4 on were patched by ISC so if you'

Re: Format of 'dig -k' "TSIG key file"?

2009-07-31 Thread Mark Elkins
On Thu, 2009-07-30 at 17:40 -0400, Joseph S D Yao wrote: > What does work is: > dig -y mynet.:Ain/tGonnaTellNoWay== axfr example.zone > @other.example.zone > but I really, really find this not altogether pleasant. This gets a bit more funkie when you are not using the default key-algorithm

dns zone delegation

2009-07-31 Thread Gopinath Achari
Hi, i have configured a Master DNS server, i have also created records to delegate a zone to child dns server But when named service is started it says Jul 31 14:33:30 localhost named[21581]: dns.zone:9: ignoring out-of-zone data (child.dns.com) I am using bind-9.3.4-10.P1.el5

Re: idsable ipv6 in config?

2009-07-31 Thread Niall O'Reilly
JINMEI Tatuya / 神明達哉 wrote: At Thu, 30 Jul 2009 12:10:14 +0200, Gilles Massen wrote: In that case I would humbly suggest to enhance the syntax of query-source[-6v] and transfer-source[-v6] to accept 'none' as argument, in some future release. I personally don't see a need for it (what's wro

Re: socket.c:4524: unexpected error in BIND 9.4.3 P3

2009-07-31 Thread Le Vu
It happens on all of our DNS servers. We have 6 servers run RHEL 4.4 or Centos 5. This error appears more frequently on servers with high load. I saw the same problem with BIND 9.6. That is the reason why I stay with 9.4.2 as long as I can. Performance is acceptable with 9.4.2 P2. I will try the w

Re: Correction to signatures on yesterday's BIND 9 releases

2009-07-31 Thread Niall O'Reilly
Evan Hunt wrote: reading carefully to the end of the line and notice that the 2006 Perhaps some people who did validate the files were similarly incautious. Or decided, taking account of the circumstances, not to treat "expired" as a synonym for "not trustworthy". /Nia

Re: socket.c:4524: unexpected error in BIND 9.4.3 P3

2009-07-31 Thread JINMEI Tatuya / 神明達哉
At Thu, 30 Jul 2009 22:16:47 +0700, Le Vu wrote: > I have updated BIND from 9.4.2-P2 to 9.4.3-P3 to mitigate the Dynamic Update > DOS attack. I have noted a lot of errors from socket.c (which I have never > seen before with v9.4.2) > > Jul 30 06:25:18 DNS1 named[2]: socket.c:4524: unexpected

RE: The Year of the Sevenfold Increase

2009-07-31 Thread Jason Mitchell
Completely off topic, but another solution to our (my?) woes would be people refraining from using URL shortening/obfuscating services when posting URL's to public mailing lists. What's really ironic is the shortened/obfuscated URL is the same length as the original, http://dnscurve.org Fro