Re: DLZ $client% parameter segfault

2013-04-01 Thread Michael McConnell
The $client$ parameter appears to work for zone transfers, as per this example https://github.com/opennetadmin/ona/wiki/bind-dlz However if I use $client$ on any other queries bind segfaults. Strace doesn't seem to show anything useful... Ideas? Thanks again, Mike On Apr 1, 2013, at 2:51 PM, M

Re: Does 9.9.2-P2 support rate-limit configuration?

2013-04-01 Thread Vernon Schryver
> From: Red Cricket > Does 9.9.2-P2 (the recent release that fixes > CVE-2013-2266: A Maliciously Crafted Regular Expression Can Cause Memory > Exhaustion in named) > support rate-limit ? not without patching. > If not is there a way to patch the source code to > allow for

Does 9.9.2-P2 support rate-limit configuration?

2013-04-01 Thread Red Cricket
Hi, Does 9.9.2-P2 (the recent release that fixes CVE-2013-2266: A Maliciously Crafted Regular Expression Can Cause Memory Exhaustion in named) support rate-limit ? If not is there a way to patch the source code to allow for rate-limiting? Thanks ___ Ple

DLZ $client% parameter segfault

2013-04-01 Thread Michael McConnell
Hello All, I am trying to use Bind 9.9.2-P2 with the DLZ module, however I continue to run into segfault issues when trying to use $client$ {SELECT SQL_CACHE zone_name FROM dns_zones … } {{select zone_ttl AS ttl …. WHERE geo_ip LIKE '$client$'} I am trying to user $client$ in the A record looku

Re: Auto-dnssec maintain and 'continous' resigning

2013-04-01 Thread Alan Clegg
On Apr 1, 2013, at 2:36 PM, Carlos M. Martinez wrote: > Reframing the question in more general terms... Which events trigger a > zone re-sign and reload when using "auto-dnssec maintain" ? Obvious ones: modifications to the dynamic zone Less obvious ones: key events (publication/activatio

Re: Forward First on Master Zone (bypass SOA)

2013-04-01 Thread Mike Hoskins (michoski)
-Original Message- From: Kevin Darcy Date: Monday, April 1, 2013 2:46 PM To: "bind-users@lists.isc.org" Subject: Re: Forward First on Master Zone (bypass SOA) >On 3/29/2013 12:09 AM, Doug Barton wrote: >> On 03/28/2013 12:28 PM, Ben-Eliezer, Tal (ITS) wrote: >>> My organization is evalu

BIND cannot load backup of slaved root zone

2013-04-01 Thread Kevin Morgan
Steps to reproduce: 1.Delete or move root.zone out of the bind directory if it exists. 1.Slave the root zone by adding the following to named.conf: zone "." { type slave; file "root.zone"; notify no; masters{192.0.32.140; 192.0.47.140; }; }; 2.Restart BIND 3.restart BIND again Unexpected r

Re: Forward First on Master Zone (bypass SOA)

2013-04-01 Thread Kevin Darcy
On 3/29/2013 12:09 AM, Doug Barton wrote: On 03/28/2013 12:28 PM, Ben-Eliezer, Tal (ITS) wrote: My organization is evaluating the use of split-view DNS in our environment. Simple ... don't do it. It's almost never the right answer, and as you're learning carries with it more administrative ov

Re: BIND 9.8.2: forward zone not working

2013-04-01 Thread Kevin Darcy
On 3/19/2013 8:30 PM, Gerry Reno wrote: On 03/19/2013 08:10 PM, b...@bitrate.net wrote: On Mar 18, 2013, at 23.04, Gerry Reno wrote: On 03/18/2013 10:25 PM, b...@bitrate.net wrote: On Mar 18, 2013, at 20.27, Gerry Reno wrote: Using BIND 9.8.2 When you setup Samba 4 AD DC using BIND9_DLZ

Re: Auto-dnssec maintain and 'continous' resigning

2013-04-01 Thread Carlos M. Martinez
Reframing the question in more general terms... Which events trigger a zone re-sign and reload when using "auto-dnssec maintain" ? regards, ~Carlos On 4/1/13 12:04 PM, Carlos M. Martinez wrote: > Hello all, > > I have a few zones signed with DNSSEC and "autodnssec maintain". I have > one partic

RE: Dynamic Update Policy.....

2013-04-01 Thread Gary Greene
From: Chris Buxton [cli...@buxtonfamily.us] Sent: Saturday, March 30, 2013 08:23 PM To: Gary Greene Cc: bind-users@lists.isc.org Subject: Re: Dynamic Update Policy. > On Mar 28, 2013, at 4:03 PM, Gary Greene wrote: > >> I'm trying to get bind to use ddns updates for our environment, however I'

Auto-dnssec maintain and 'continous' resigning

2013-04-01 Thread Carlos M. Martinez
Hello all, I have a few zones signed with DNSSEC and "autodnssec maintain". I have one particular zone that every now and then (I'm working on finding a pattern or trigger) This re-signing process runs for a while, incrementing the serial each time and growing the journal until stopping. I know

RE: bind-users Digest, Vol 1485, Issue 1

2013-04-01 Thread Ben-Eliezer, Tal (ITS)
ardis> Content-Type: text/plain; charset="utf-8" On Mon, 2012-11-05 at 21:21 +1100, Mark Andrews wrote: > > Ignore them. They will be addressed in the next maintenance release. > it was, but now seems to have reared its ugly head again in 9.9.2-p2 Apr 1 12:20:35 fox named[5