Re: Problems in views in a zone transfer

2011-05-05 Thread Jeff Pang
2011/5/6 Luis Silva : > Hi all, > > I'm using bind as frontend solution and I have another server as backend and > I'm implementing zone transfer between the two (bind is the slave and my > server is the master). The problem is that I want to use dns views. Bind > supports it but my backend server

Re: DNSSEC submit of DLV vs DNSKEY records?

2011-05-05 Thread
On Fri, 06 May 2011 12:45 +1000, "Mark Andrews" wrote: > > > [I hope someone will correct me if I'm wrong.] > > > > > > My understanding: if the parent is signed, that is the only way a > > > child zone can be validated, unless of course using trusted-keys. > > > DLV is only done when the paren

Re: DNSSEC submit of DLV vs DNSKEY records?

2011-05-05 Thread Mark Andrews
In message <1304628473.25384.1448737...@webmail.messagingengine.com>, dchilton+ b...@bestmail.us writes: > "missed it by THAT much ...". thx! relocating to bind-users. > > On Thu, 05 May 2011 14:37 -0500, "/dev/rob0" wrote: > > FWIW I think you hit the wrong list. Did you mean bind-users@isc? >

Re: Error when trying to make secondary nameserver from copying primary nameserver

2011-05-05 Thread Eivind Olsen
Samad Agha wrote: > 1- found out which version of bind dsn1 is running and installed exactly > that version on dns2: > [root@dns1 named]# named -v > BIND 9.3.6-P1-RedHat-9.3.6-16.P1.el5 That version is quite old. In general, just because server 1 has an old BIND isn't a reason to choose an old BI

current downloads ?

2011-05-05 Thread Dennis Clarke
Why does "current downloads" on the isc.org homepage report 9.7.3 for bind and ignore 9.8.x entirely. -- Dennis ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: named crashed (mem.c:1099: INSIST(ctx->stats[i].gets == 0U) failed)

2011-05-05 Thread Evan Hunt
On Thu, May 05, 2011 at 01:07:24PM -0700, Fr34k wrote: > Thanks Evan. > > Should the Community expect a BIND 9.7.3 train update/maintenance release > which, among other things, addresses this mem.c issue? There will be a 9.7.4 release fairly soon--the beta is in the pipeline already. 9.8.1 will

BIND 9.8.0-P1 is now available for download

2011-05-05 Thread Larissa Shapiro
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 BIND 9.8.0-P1 is now available for download. This release fixes one security related issue. The full up to date advisory regarding this issue is available at: https://www.isc.org/CVE-2011-1907. A text version of the advisory will be provided for ease

DNS BIND Security Advisory: RRSIG Queries Can Trigger Server Crash When Using Response Policy Zones

2011-05-05 Thread Larissa Shapiro
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Note: https://www.isc.org/CVE-2011-1907 is the authoritative source for this Security Advisory. Please check the source for any updates. Summary: When a name server is configured with a response policy zone (RPZ), queries for type RRSIG can trigger a

Error when trying to make secondary nameserver from copying primary nameserver

2011-05-05 Thread Samad Agha
I have a working primary nameserver (dns1) and am trying to configure secondary nameserver (dns2) by copying zone files, config file, etc. from dns1 onto dns2. I have performed the following on dns2 server: 1- found out which version of bind dsn1 is running and installed exactly that version on dn

Re: DNSSEC submit of DLV vs DNSKEY records?

2011-05-05 Thread Torinthiel
On 05/05/11 22:47, dchilton+b...@bestmail.us wrote: > "missed it by THAT much ...". thx! relocating to bind-users. > > On Thu, 05 May 2011 14:37 -0500, "/dev/rob0" wrote: >> FWIW I think you hit the wrong list. Did you mean bind-users@isc? > > >> On Thu, May 05, 2011 at 12:25:27PM -0700, dchil

Re: DNSSEC submit of DLV vs DNSKEY records?

2011-05-05 Thread dchilton+bind
"missed it by THAT much ...". thx! relocating to bind-users. On Thu, 05 May 2011 14:37 -0500, "/dev/rob0" wrote: > FWIW I think you hit the wrong list. Did you mean bind-users@isc? > On Thu, May 05, 2011 at 12:25:27PM -0700, dchilton+b...@bestmail.us >wrote: > > after signing my zones wit

Re: named crashed (mem.c:1099: INSIST(ctx->stats[i].gets == 0U) failed)

2011-05-05 Thread Fr34k
Hello All, Thanks Evan. Should the Community expect a BIND 9.7.3 train update/maintenance release which, among other things, addresses this mem.c issue? If so, any ETA? It is not my intent to sound pushy. Let me explain. We were in the process of rolling 9.7.3 out but we stopped figuring a

Re: how to check if a slave zone is expired

2011-05-05 Thread Doug Barton
On 05/05/2011 04:35, Chris Thompson wrote: On May 4 2011, Doug Barton wrote: On 05/04/2011 01:22, hugo hugoo wrote: So..no way to check that a zone is expired? You're asking the wrong question. The correct question is, "How can I make sure that a zone is up to date on all of the slaves?" You

Re: forward first: iterative or recursive query

2011-05-05 Thread Chris Buxton
If recursion is disabled, forwarding doesn't happen. I think you've confused some terms and configurations. Don't use forwarding from a recursive server to a non-recursive server. Use a stub zone instead, if you can't rely on the recursion process to find the correct server to query. If server

Problems in views in a zone transfer

2011-05-05 Thread Luis Silva
Hi all, I'm using bind as frontend solution and I have another server as backend and I'm implementing zone transfer between the two (bind is the slave and my server is the master). The problem is that I want to use dns views. Bind supports it but my backend server is currently not supporting. I'm

Re: bind-9.8 for openSUSE / SLES

2011-05-05 Thread Uwe Gansert
on Wednesday 04 May 2011 Flex Banana wrote: > Anyone have the link or the software for obtaining (if exist) the rpm > x86_64 compiled for openSUSE-11.4 / SLES-11 of bind-9.8.0 ? > > The last release offered by the community is 9.7.3 as of this writing. I have submitted a 9.8.0 You can download i

Re: how to check if a slave zone is expired

2011-05-05 Thread Chris Thompson
On May 4 2011, Doug Barton wrote: On 05/04/2011 01:22, hugo hugoo wrote: So..no way to check that a zone is expired? You're asking the wrong question. The correct question is, "How can I make sure that a zone is up to date on all of the slaves?" You do that by querying the SOA record for th

Re: how to check if a slave zone is expired

2011-05-05 Thread John Bond
On 5/4/11 10:22 AM, hugo hugoo wrote: > > So..no way to check that a zone is expired? Hello Hugo, I recently wrote a small script which mails me about any zones that is due to expire within the next 24 hours. This works by using the last change time of the file on disk and the SOA expiry time

RE: forward first: iterative or recursive query

2011-05-05 Thread iharrathi.ext
Hi, i have a server called server1 that is acting as a cache server( recursion none). And i forward the zone example.com to server2 which has recursion enabled and master on some zone like example.com. this is the forwarding zone on server1: zone "example.com" { type forward; for