BIND 9.9.0rc4 is now available

2012-02-23 Thread Michael McNally
Introduction BIND 9.9.0rc4 is the fourth release candidate for BIND 9.9.0 This document summarizes changes from BIND 9.8 to BIND 9.9. Please see the CHANGES file in the source code release for a complete list of all changes. Download The latest versions of BIND 9 software can alw

Re: lists.isc.org rDNS failed, DNSSEC?

2012-02-23 Thread Kevin Oberman
On Thu, Feb 23, 2012 at 9:00 PM, michoski wrote: > On 2/23/12 8:48 PM, "vinny_abe...@dell.com" wrote: > >> I kind of had the same thought... If ISC had a DNS outage due to expired >> signatures of a zone, what chance do I have in successfully deploying and >> maintaining DNSSEC for my zones? Sure

Re: lists.isc.org rDNS failed, DNSSEC?

2012-02-23 Thread michoski
On 2/23/12 8:48 PM, "vinny_abe...@dell.com" wrote: > I kind of had the same thought... If ISC had a DNS outage due to expired > signatures of a zone, what chance do I have in successfully deploying and > maintaining DNSSEC for my zones? Sure, everyone makes mistakes, but I think it > speaks volum

RE: lists.isc.org rDNS failed, DNSSEC?

2012-02-23 Thread Vinny_Abello
I kind of had the same thought... If ISC had a DNS outage due to expired signatures of a zone, what chance do I have in successfully deploying and maintaining DNSSEC for my zones? Sure, everyone makes mistakes, but I think it speaks volumes to the inherent complexity and the further need for sim

Re: lists.isc.org rDNS failed, DNSSEC?

2012-02-23 Thread Kevin Oberman
On Thu, Feb 23, 2012 at 2:47 PM, Mark Andrews wrote: > > There was a issues with the delegation of some zones.  NS records > were not added to the parent zone when they should have been but > the scripts which sign the zones added DS records which caused the > parent zone not to be resigned.  The

Re: lists.isc.org rDNS failed, DNSSEC?

2012-02-23 Thread Mark Andrews
There was a issues with the delegation of some zones. NS records were not added to the parent zone when they should have been but the scripts which sign the zones added DS records which caused the parent zone not to be resigned. The signatures for the parent zone eventually expired which caused

bind9.9.0rc4 rndc retransfer appears to be fixed

2012-02-23 Thread Spain, Dr. Jeffry A.
> With the properly patched bind 9.9.0rc3 running, 'rndc retransfer > jaspain.biz' generated no output, presumably indicating success. > The log showed some related error messages, however... > Seems like it is confusing the serial numbers of the signed and unsigned > zones. I installed the bi

lists.isc.org rDNS failed, DNSSEC?

2012-02-23 Thread /dev/rob0
Yesterday I looked in mail logs for something else and stumbled upon this (times are UTC): rob0@harrier:~$ grep 'unknown\[149\.20\.64\.75\]' /var/log/maillog | wc 2713607 44087 rob0@harrier:~$ grep 'unknown\[149\.20\.64\.7

AW: block ddns by name

2012-02-23 Thread Melbinger Christian
Hi Thank you, i think this will do the trick... just have to make sure if the dhcp uses signed updates or by ip - because it only works with signed updates. I think it's by ip, since there's no such key config in dhcpd.conf :( Thanks! --- Ing. Christian Melbinger Netzwerk & Security WienIT ED