Re: Version statement...

2012-08-16 Thread Mark Andrews
In message <342bc321-feb7-4b82-bdff-1848fcc60...@starionline.com>, Jeff Justice writes: > Doesn't seem to work with or without the brackets. Does it matter what order > it appears in the > options list? Or a limit on number of characters? > > Jeff Make sure you are updating the correct named

Re: Version statement...

2012-08-16 Thread Michael Hoskins (michoski)
You can specifically set version, authors, etc. but why not just block all "CHAOS" queries? Do you really need it? view "chaos" chaos { match-clients { any; }; allow-transfer { none; }; allow-query { none; }; allow-recursion { none; }; recursion no;

Re: Version statement...

2012-08-16 Thread Jeff Justice
Doesn't seem to work with or without the brackets. Does it matter what order it appears in the options list? Or a limit on number of characters? Jeff On Aug 17, 2012, at 12:34 AM, David Miller wrote: > > On 8/17/2012 1:13 AM, Jeff Justice wrote: >> I am trying to mask our DNS servers versio

Re: Version statement...

2012-08-16 Thread David Miller
On 8/17/2012 1:13 AM, Jeff Justice wrote: > I am trying to mask our DNS servers version output to a custom string, but it > doesn't seem to be working for me. In a nutshell, I have added this to my > options block of my named.conf: > >version "[DNS Server]"; options { version "str

Version statement...

2012-08-16 Thread Jeff Justice
I am trying to mask our DNS servers version output to a custom string, but it doesn't seem to be working for me. In a nutshell, I have added this to my options block of my named.conf: version "[DNS Server]"; But when I do a query, it still shows the actual version number i.e. BIND 9.9.1-P2

Re: playing with 9.9.2b1 and ECDSA

2012-08-16 Thread Doug Barton
On 08/16/2012 03:49 AM, Tony Finch wrote: > Tony Finch wrote: > >> 15-Aug-2012 19:56:31.969 general: error: zone fanf2.ucam.org/IN: >> update_sigs:add_sigs -> sign failure > > This turned out to be because /dev/random inside my chroot was set up > incorrectly. FreeBSD has a somewhat unusual way

Re: SRV query with no domain?

2012-08-16 Thread Niall O'Reilly
On 16 Aug 2012, at 15:42, Christopher Cain wrote: > Of course a dig query will fail without the domain appended. Dig takes > you query at face value and will not append domains from your search > suffix list like nslookup and ping will. You ALWAYS have to fully qualify > your requests when usin

Re: SRV query with no domain?

2012-08-16 Thread Christopher Cain
Of course a dig query will fail without the domain appended. Dig takes you query at face value and will not append domains from your search suffix list like nslookup and ping will. You ALWAYS have to fully qualify your requests when using dig. Chris. On 12-08-15 3:29 PM, "wbr...@e1b.org" wrote

Re: playing with 9.9.2b1 and ECDSA

2012-08-16 Thread Tony Finch
Tony Finch wrote: > 15-Aug-2012 19:56:31.969 general: error: zone fanf2.ucam.org/IN: > update_sigs:add_sigs -> sign failure This turned out to be because /dev/random inside my chroot was set up incorrectly. FreeBSD has a somewhat unusual way of dealing with device nodes. Tony. -- f.anthony.n.

Anycast and views match-destination

2012-08-16 Thread sasa sasa
So I use match-destination in BIND views on a server with multiple interfaces. If I want to configure one of these interfaces to be part of an anycast network, should I change match-destination to the anycast loopback address in that particular view? Any thoughts? Thanks ___