Re: Dig 9.9.1 AD-bit

2012-08-04 Thread Tony Finch
On 3 Aug 2012, at 02:25, "Marco Davids (SIDN)" wrote: > Dig 9.9.1 is setting the AD-bit in queries by default. > Does anyone know why? It means "I want the results of DNSSEC validation but not all the RRSIG and NSEC records I would get from DO=1." Tony. -- f.anthony.n.finchhttp://dotat.at/

Re: security BIND

2012-08-04 Thread Carsten Strotmann
Hello Alberto, On Sat, 4 Aug 2012, Alberto Rasillo wrote: Hi what are recomendations regarding security and DNS service?Thnks it is difficult (impossible?) to answer such a generic question. Generic security advice for a DNS service: * read your DNS servers documentation carefully * understa

security BIND

2012-08-04 Thread Alberto Rasillo
Hi what are recomendations regarding security and DNS service? Thnks ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo

Re: getaddrinfo and TTL

2012-08-04 Thread Phil Mayers
On 08/03/2012 05:48 PM, Martin McCormick wrote: Can one read the TTL for a given lookup in getaddrinfo? I don't believe so. Better yet, is there a listing of the entire range of values one can read from all the structures? The getaddrinfo() interface is specified in RFC 349