Re: New Versions of BIND are available (9.9.4, 9.8.6, and 9.6-ESV-R10)

2013-09-19 Thread Noel Butler
On Fri, 2013-09-20 at 01:59 +, Vernon Schryver wrote: > > From: Noel Butler > > > now, I never ran it as patches, my policy is only use official upstream > > sources, so my first play around was with 9.9.3.b2 I think it was. > > BIND 9.9.4 and its immediately preceding "beta" and "release >

Re: New Versions of BIND are available (9.9.4, 9.8.6, and 9.6-ESV-R10)

2013-09-19 Thread Vernon Schryver
> From: Noel Butler > now, I never ran it as patches, my policy is only use official upstream > sources, so my first play around was with 9.9.3.b2 I think it was. BIND 9.9.4 and its immediately preceding "beta" and "release candidate" releases are the first versions of BIND that were not "patche

Re: BIND 9.9.4 is now available. Do we still need RRL & RPZ patches?

2013-09-19 Thread Brian Conry
On 09/19/2013 07:36 PM, jen...@promessage.com wrote: > Hi Bryan, > > Thanks for the quick reply. You're welcome. Unfortunately, sometimes the reply suffers from the quickness. > The fact that at > > http://ss.vix.su/~vjs/rrlrpz.html > > There was a patch for 9.9.4rc1 > > Multiple Zone R

Re: New Versions of BIND are available (9.9.4, 9.8.6, and 9.6-ESV-R10)

2013-09-19 Thread Noel Butler
Hi Vernon, On Thu, 2013-09-19 at 23:42 +, Vernon Schryver wrote: > BIND RRL has had whitelisting for trusted DNS clients that send repeated > DNS requests since early days, long before any version of BIND 9.9.4. > Look for 'exempt-clients{address_match_list};' in either the ARM that > comes w

Re: New Versions of BIND are available (9.9.4, 9.8.6, and 9.6-ESV-R10)

2013-09-19 Thread Noel Butler
On Thu, 2013-09-19 at 23:40 +, Evan Hunt wrote: > On Fri, Sep 20, 2013 at 09:20:29AM +1000, Noel Butler wrote: > > I have been using this since 9.9.4bx, and although documentation is/was > > lacking at the time, so there might be a whitelisting somewhere , but in > > its absence, I highly advi

Re: BIND 9.9.4 is now available. Do we still need RRL & RPZ patches?

2013-09-19 Thread jen142
Hi Bryan, Thanks for the quick reply. On Thu, Sep 19, 2013, at 05:26 PM, Brian Conry wrote: > Hi Jen, > > On 09/19/2013 07:00 PM, jen...@promessage.com wrote: > > > Is that patch functionality fully integrated now in 9.9.4? Or do I > > still need to wait for & apply a next version patch? > >

Re: BIND 9.9.4 is now available. Do we still need RRL & RPZ patches?

2013-09-19 Thread Brian Conry
Hi Jen, On 09/19/2013 07:00 PM, jen...@promessage.com wrote: > Is that patch functionality fully integrated now in 9.9.4? Or do I > still need to wait for & apply a next version patch? 9.9.4 includes the full functionality of the Vixie/Schryver RPZ and RRL patches, using the same syntax. Thank

Re: BIND 9.9.4 is now available. Do we still need RRL & RPZ patches?

2013-09-19 Thread jen142
Hi, The new version announcement just came across the wire. Reading the CHANGES, I see that there have been both RRL & RPZ changes/additions. I'm not clear if we still need the patches from Vixie/Shryer. I've been running a build of 9.9.3-p2, patched with http://ss.vix.su/~vjs/rpz2+rl-9.9.3-P2.

RHEL, Centos, Fedora rpm 9.9.4

2013-09-19 Thread Carl Byington
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 http://www.five-ten-sg.com/mapper/bind contains links to the source rpms, and build instructions. -BEGIN PGP SIGNATURE- Version: GnuPG v2.0.14 (GNU/Linux) iEYEARECAAYFAlI7jo0ACgkQL6j7milTFsHY5wCdEhfUrUtGUbmxvnElv0HDYpZN a/oAnjlKqkNxTm9AGHB46

Re: New Versions of BIND are available (9.9.4, 9.8.6, and 9.6-ESV-R10)

2013-09-19 Thread Vernon Schryver
> From: Noel Butler > I have been using this since 9.9.4bx, and although documentation is/was > lacking at the time, so there might be a whitelisting somewhere , but in > its absence, I highly advise against using RRL if your mail servers use > those DNS servers I believe there been no significa

Re: New Versions of BIND are available (9.9.4, 9.8.6, and 9.6-ESV-R10)

2013-09-19 Thread Evan Hunt
On Fri, Sep 20, 2013 at 09:20:29AM +1000, Noel Butler wrote: > I have been using this since 9.9.4bx, and although documentation is/was > lacking at the time, so there might be a whitelisting somewhere , but in > its absence, I highly advise against using RRL if your mail servers use > those DNS ser

Re: New Versions of BIND are available (9.9.4, 9.8.6, and 9.6-ESV-R10)

2013-09-19 Thread Noel Butler
On Thu, 2013-09-19 at 16:04 -0700, Michael McNally wrote: > New versions of BIND are now available from http://www.isc.org/downloads > New Features 9.9.4 Added Response Rate Limiting (RRL) functionality to reduce the effectiveness of DNS as an amplifier for reflected denial-of-service

New Versions of BIND are available (9.9.4, 9.8.6, and 9.6-ESV-R10)

2013-09-19 Thread Michael McNally
New versions of BIND are now available from http://www.isc.org/downloads See the messages in bind-announce announcing BIND 9.9.4, 9.8.6, and 9.6-ESV-R10 or read the release notes in the ISC Knowledge Base ( https://kb.isc.org/category/81/0/10/Software-Products/BIND9/Release-Notes/ ) for more in

Re: bind-users Digest, Vol 1629, Issue 1

2013-09-19 Thread Timothe Litt
At the risk of continuing an off-topic thread: I have toyed with trying to find a cheap Stratum-1 server for home. I've had success with a Raspberry Pi & GPS. You can build a very respectable stratum 1 server for less than USD $200, if you can handle a soldering iron and build a Linux ker