Re: managed-keys.bind's directory problem

2009-12-14 Thread Chris Buxton
On Dec 14, 2009, at 6:28 PM, Doug Barton wrote: > Chris Buxton wrote: > >> The options { directory ""; }; statement specifies named's working >> directory (its 'cwd'), not the location of the configuration >> directory. > > I continue to assert that both the code and long custom say that it > sp

Re: managed-keys.bind's directory problem

2009-12-14 Thread Doug Barton
fujiw...@wide.ad.jp wrote: > I'm using BIND 9.7.0b3 an DLV (dns-lookaside auto;). FYI I recently committed the port for 9.7.0rc1. Hopefully this will make it easier for you to continue testing. Please try the port and let me know if you have any problems with it. > The named tried to write "manag

Re: Handling of RSASHA256 and RSASHA512 in BIND 9.6.0 and BIND 9.6.0-P1

2009-12-14 Thread Doug Barton
While this reminder is timely and helpful, more welcome would be the news that BIND 9.6.2 is going to have actual support for RSASHA{256|512}. My cursory reading of the 9.6.2b1 code does not seem to indicate that it does, although I would be happy to be proven wrong. I personally don't think it's

Handling of RSASHA256 and RSASHA512 in BIND 9.6.0 and BIND 9.6.0-P1

2009-12-14 Thread Mark Andrews
With upcoming deployment of RSASHA256 to sign the root zone, ISC would like to remind BIND 9.6.0 and BIND 9.6.0-P1 users that use DLV, but have not yet upgraded, that they will need to upgrade to a more recent version of BIND 9.6.x as BIND 9.6.0 and BIND 9.6.0-P1 will not correctly handle RSASHA25

Re: managed-keys.bind's directory problem

2009-12-14 Thread Doug Barton
Chris Buxton wrote: > On Dec 13, 2009, at 5:40 PM, Doug Barton wrote: >> On Fri, 11 Dec 2009, Mark Andrews wrote: To repeat my primary >> objection, if the named user can write to the configuration >> directory it can change the contents of named.conf. That's a >> security problem.\ > > So don't p

Re: managed-keys.bind's directory problem

2009-12-14 Thread Chris Buxton
On Dec 13, 2009, at 5:40 PM, Doug Barton wrote: > On Fri, 11 Dec 2009, Mark Andrews wrote: > To repeat my primary objection, if the named user can write to the > configuration directory it can change the contents of named.conf. That's a > security problem.\ So don't put named.conf inside the wor

Re: Best practices or known issues with split-dns

2009-12-14 Thread Sue Graves
Hi Gord, There are a couple of references available from ISC: https://www.isc.org/software/bind/documentation/arm95#id2549568 and https://www.isc.org/faq, the question about views using TSIG. Regards, Sue Taylor, Gord wrote: > I should also clarify, before someone states it, that I don't WANT to >

Re: Hi

2009-12-14 Thread Danny Mayer
supriya samanta wrote: > Hello All, > > As per ISC security bulletin *CVE-2009-4022* There is a problem with > BIND 9 Cache Update From Additional Section > > *Problem Description:* A Nameserver with DNSSEC validation enabled may > incorrectly add records to its cache from the additiona

Re: Bonjour! I wish to compile 9.7.0b3

2009-12-14 Thread Danny Mayer
jv wrote: > Thank you! Evan, > > I have not VisualStudio which is commercial. Do you think I can use an > other compiler or do you think VisualStudio light is enough (Version > 2008 seems available). > > Best It should work fine. Danny -- This message has been scanned for viruses and dangerou

Re: Windows : compilation options

2009-12-14 Thread Romain De Rasse
Danny Mayer a écrit : > Romain De Rasse wrote: > >> Hi, >> >> I succeeded in compile ISC Bind for Windows. I'm now trying to enable >> "fixed rrset" (--enable-fixed-rrset for the configure file). But I >> did'nt find how to change options for a Windows compilation. >> >> Can anyone help me ? >>

Re: Bonjour! I wish to compile 9.7.0b3

2009-12-14 Thread Danny Mayer
jv wrote: > This is my first mail on this list. I hope I am at the right place. I > have loaded BIND 9.7.0b3 under Windows. Now I would like to compile it. > Could someone help me with what is exactly to be done (and if I should > install a special compiler). > Thank you for your help! > > -- >

Re: non-ascii zone

2009-12-14 Thread Martin Fuxa
ok, I understand ... domain name must bee processed by idn / libidn idn --idna-to-ascii españa.eu result xn--espaa-rta.eu PHP equivalent function is idn_to_ascii. Right zone definition zone "xn--espaa-rta.eu" IN { type master; file "zone/master/españa.eu"; } For whois (4.7.24) I can use UTF

Re: How to find out DNS Server version ?

2009-12-14 Thread Khusro Jaleel
On 13 Nov 2009, at 14:20, Tibo wrote: > > We have 4 little datacenters over the world. > I would like to check if all DNS servers are up to date but only people > responsible of a datacenter can access their servers for security reasons. > I know some tools on the net can do that but it's not easy

Re: non-ascii zone

2009-12-14 Thread Şener ATAŞ
hi, you can write your zone to browser, so you can see how does it write www.españa.eu -> www.xn--espaa-rta.eu On 12/14/2009 10:45 AM, Martin Fuxa wrote: Hi guys, how to define zone for domain with non-ascii characters by right way? Something like zone "españa.eu" IN { type master; fil

non-ascii zone

2009-12-14 Thread Martin Fuxa
Hi guys, how to define zone for domain with non-ascii characters by right way? Something like zone "españa.eu" IN { type master; file "zone/master/españa.eu"; } Regards Martin ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/