RE: DNSSEC, views & trusted keys...

2010-09-10 Thread Timothe Litt
Mark, I must be opaque; I don't see how to make this approach work in any reasonable way. I tried this: (DLV is enabled, and my external keys for example.com are there.) view "r-internal" in { match-clients { !any_external; all_internal; }; match-recursive-only yes; transfer-source

Re: ipv6 implementation in an ipv4 camp

2010-09-10 Thread Mike Mackintosh
Although its not perfect, you can look into IP protocol 41 which is IPv6 in IPv4. Helps provide some functionality in a last resort case. Jim Pazarena wrote: >I am curious if anyone can point out articles or deeper instructions >regarding an implementation and launch of ipv6 in a fully ipv4 cam

Re: DNSSEC, views & trusted keys...

2010-09-10 Thread Cathy Almond
Phil Mayers wrote: > On 09/10/2010 03:05 AM, Mark Andrews wrote: >> >> In message<4c891404.3000...@imperial.ac.uk>, Phil Mayers writes: >>> On 09/09/2010 03:45 PM, Timothe Litt wrote: >>> There is other advice in the ARM that says to put 'your organization's public keys in the truste

Re: ipv6 implementation in an ipv4 camp

2010-09-10 Thread Lyle Giese
Jim Pazarena wrote: > I am curious if anyone can point out articles or deeper instructions > regarding an implementation and launch of ipv6 in a fully ipv4 camp? > > If the upstream ISP still provides the end user an ipv4 number > as a gateway, and the end user still has a /24 or /23 assigned by >

ipv6 implementation in an ipv4 camp

2010-09-10 Thread Jim Pazarena
I am curious if anyone can point out articles or deeper instructions regarding an implementation and launch of ipv6 in a fully ipv4 camp? If the upstream ISP still provides the end user an ipv4 number as a gateway, and the end user still has a /24 or /23 assigned by the ISP, need they be concerne

Re: Can't get BIND to use GSSAPI from /usr/local on FreeBSD

2010-09-10 Thread Sam Liddicott
For lack of response here, the heimdal guys are putting in a work-around for this bind bug. Sam On 25/08/10 17:41, Sam Liddicott wrote:  I've also reported this as a bind bug, but I'm posting it here as I think it answers the case for the BSD user i

Re: Clarification about DNS notify

2010-09-10 Thread Sherin George
Hello Torsten, Thanks for looking into this. Basically, my previous question came from my ignorance. But, I learned more and I think found the answer. "The SOA MNAME field is used by NOTIFY and by dynamic update. Authoritative name servers send NOTIFY messages to all name servers in NS records t

Re: Clarification about DNS notify

2010-09-10 Thread Torsten
Am Fri, 10 Sep 2010 12:51:11 +0530 schrieb Sherin George : > Hey Guys, > > I have an issue which need some help. > > I have two master DNS servers, say A & B. > > A is running freebsd & B is running centos. B is running BIND 9 also. > Now, I want to add one more to this cluster say C. > > I ha

Clarification about DNS notify

2010-09-10 Thread Sherin George
Hey Guys, I have an issue which need some help. I have two master DNS servers, say A & B. A is running freebsd & B is running centos. B is running BIND 9 also. Now, I want to add one more to this cluster say C. I have installed centos in C with BIND 9. Now, I have copied /etc/named.conf & /var/