Re: Clients Matching Multiple Views

2014-04-11 Thread Doug Barton
On 04/11/2014 10:59 AM, John Wobus wrote: My understanding has been that two views that are masters for a zone can safely share a zone file if the zone isn't dynamic (e.g. dnsupdate, dnssec auto signing, etc), but that two views of a slave zone shouldn't do that: you could have two different vie

Re: Clients Matching Multiple Views

2014-04-11 Thread Marty Lee
On 11 Apr 2014, at 18:59, John Wobus wrote: > On Apr 9, 2014, at 4:14 AM, Steven Carr wrote: >> However, assuming you are using views on the same IP address and not >> splitting it across internal/external servers as that would screw up >> NS records), you can reuse the same zone file so those z

Re: Clients Matching Multiple Views

2014-04-11 Thread John Wobus
On Apr 9, 2014, at 4:14 AM, Steven Carr wrote: However, assuming you are using views on the same IP address and not splitting it across internal/external servers as that would screw up NS records), you can reuse the same zone file so those zones that appear in both internal and external views ref

Inline signing and views.

2014-04-11 Thread Jack Tavares
Hello - Is it possible to enable inline signing of a zone in 2 different views with 2 different keys? I have the following config: view "external" { match-clients { 1.1.1.1; }; zone "test.com." { type master; file "external.test.com."; allow-update {

Re: Windows dig & resolv.conf

2014-04-11 Thread Chris Thompson
On Apr 11 2014, Frederic Woodbridge wrote: Apologies if this has been discussed; I searched the archives and didn't find anything. I'd like to know why the "search" and "domain" settings in the Windows %systemroot%\system32\drivers\etc\resolv.conf don't seem to make a difference. Anyone know?

Windows dig & resolv.conf

2014-04-11 Thread Frederic Woodbridge
Apologies if this has been discussed; I searched the archives and didn't find anything. I'd like to know why the "search" and "domain" settings in the Windows %systemroot%\system32\drivers\etc\resolv.conf don't seem to make a difference. Anyone know? Thanks. Fred Woodbridge ___

BIND, DHCP, and CVE-2014-0160 (the OpenSSL "Heartbleed" bug)

2014-04-11 Thread Michael McNally
Earlier this week, the OpenSSL project (http://openssl.org) announced CVE-2014-0160, disclosing a very serious security flaw in the OpenSSL library, affecting versions 1.0.1 and 1.0.2-beta (including OpenSSL 1.0.1f and 1.0.2-beta1) In many stories, this vulnerability is being referred to as the "H