RE: Install BIND 9.9.7-P2 to fix vulnerability CVE-2015-5477

2015-09-07 Thread stavrostseriotis
Ok here is what I did: . After extracting the package I looked out at directories /usr/local/bin and /usr/local/sbin as mentioned in the procedure but I found that there are no files there. . I run configure command without openssl because I had trouble with the openssl library wh

Re: Install BIND 9.9.7-P2 to fix vulnerability CVE-2015-5477

2015-09-07 Thread Carl Byington
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 > I have a RedHat 5.11 machine and currently I am facing the issue with > BIND vulnerability CVE-2015-5477. I cannot update my BIND using yum > because I didn't install BIND from RedHat at the first place so I need > to do it manually. You might look

SOLVED - Re: Secondarying DLZ zones

2015-09-07 Thread Robert Moskowitz
At least the 'right' way with turning down the SOA TTL for the zone. This is one of the set it and forget it items (at least for me), and once I started reading finding enough articles on secondaries it was an oh yeah moment. On 09/07/2015 04:09 PM, Robert Moskowitz wrote: On the Samba list,

Re: How are DNS Records added dynamically in DNS Servers?

2015-09-07 Thread Mark Andrews
In message <55ed6354.8060...@runbox.com>, Ken Peng writes: > Stephane, May I ask why not using outlook for email? > > On 2015/9/7 18:09, Stephane Bortzmeyer wrote: > > By not using outlook.com for email Because outlook.com's nameservers are not EDNS compliant which breaks anyone attempting to us

Re: Secondarying DLZ zones

2015-09-07 Thread Robert Moskowitz
On the Samba list, I was told that it is working (bug from2 years ago, still open, was fixed): https://bugzilla.samba.org/show_bug.cgi?id=9634 But Notify does not work: "yes it does work. But the DLZ bind will not notify any slaves, when the repository changes. This can be painful, especially

Re: DNSSEC ZSK key rollover, why is my zone double signed?

2015-09-07 Thread Robert Senger
Hi Holger, thanks, I just checked and can confirm your results, everything is fine now. No manual action done. But when I look at the dnsviz.net's analysis, I see this http://dnsviz.net/d/microscopium.de/Ve0Nnw/dnssec/ 15 hours ago (analyzed 2015-09-07 04:07:59 UTC), and this http://dnsviz.net

Secondarying DLZ zones

2015-09-07 Thread Robert Moskowitz
It seems I have this working, but... I have a regular Centos7 Bind 9.9 server that I want to secondary a Samba AD (Also Centos7) DLZ zone. On the DNS server (192.168.192.5) I have: zone "home.htt" { type slave; file "slaves/bak.home.htt";

Re: Install BIND 9.9.7-P2 to fix vulnerability CVE-2015-5477

2015-09-07 Thread /dev/rob0
On Mon, Sep 07, 2015 at 12:24:36PM +0300, stavrostseriotis wrote: > I have a RedHat 5.11 machine and currently I am facing the issue > with BIND vulnerability CVE-2015-5477. I cannot update my BIND > using yum because I didn't install BIND from RedHat at the first > place so I need to do it manu

Re: Install BIND 9.9.7-P2 to fix vulnerability CVE-2015-5477

2015-09-07 Thread Timothe Litt
> Subject: > Install BIND 9.9.7-P2 to fix vulnerability CVE-2015-5477 > From: > stavrostseriotis > Date: > 07-Sep-15 05:24 > > To: > bind-users@lists.isc.org > > > Hello, > > > > I have a RedHat 5.11 machine and currently I am facing the issue with > BIND vulnerability CVE-2015-5477. I cannot up

Re: Install BIND 9.9.7-P2 to fix vulnerability CVE-2015-5477

2015-09-07 Thread Reindl Harald
Am 07.09.2015 um 11:24 schrieb stavrostseriotis: I have a RedHat 5.11 machine and currently I am facing the issue with BIND vulnerability CVE-2015-5477. I cannot update my BIND using yum because I didn’t install BIND from RedHat at the first place so I need to do it manually. I downloaded the

Re: How are DNS Records added dynamically in DNS Servers?

2015-09-07 Thread Ken Peng
Stephane, May I ask why not using outlook for email? On 2015/9/7 星期一 18:09, Stephane Bortzmeyer wrote: By not using outlook.com for email ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mai

Re: How are DNS Records added dynamically in DNS Servers?

2015-09-07 Thread Stephane Bortzmeyer
On Mon, Sep 07, 2015 at 03:33:00PM +0530, Harshith Mulky wrote a message of 60 lines which said: > How do System administrators add DNS Zone records in DNS Servers? By not using outlook.com for email :-) No, I'm kidding, there are several ways: > Is there a specific way the records are added

Re: How are DNS Records added dynamically in DNS Servers?

2015-09-07 Thread Ken Peng
sure. we use nsupdate for adding records dynamically. On 2015/9/7 星期一 18:03, Harshith Mulky wrote: Just a query, How do System administrators add DNS Zone records in DNS Servers? I do testing at campus, and I do everything, by manually adding the Records Is there a specific way the records a

How are DNS Records added dynamically in DNS Servers?

2015-09-07 Thread Harshith Mulky
Just a query, How do System administrators add DNS Zone records in DNS Servers? I do testing at campus, and I do everything, by manually adding the Records Is there a specific way the records are added in DNS Servers dynamically? __

Install BIND 9.9.7-P2 to fix vulnerability CVE-2015-5477

2015-09-07 Thread stavrostseriotis
Hello, I have a RedHat 5.11 machine and currently I am facing the issue with BIND vulnerability CVE-2015-5477. I cannot update my BIND using yum because I didn't install BIND from RedHat at the first place so I need to do it manually. I downloaded the package of version 9.9.7-P2 from isc websi