On 8/22/18, Darcy, Kevin wrote:
> So, the short answer is that check-names is pretty granular, doing
> "check-names response fail" is just asking for trouble, for a resolver at
> the Internet edge, since there's too much squirrely stuff out there. Most
> folks just limit check-names "fail" to auth
> On 23 Aug 2018, at 3:31 am, 潘政宇 wrote:
>
>
>
>> 在 2018年8月22日，下午8:54，Matus UHLAR - fantomas 写道：
>>
>> On 22.08.18 20:37, Zhengyu Pan wrote:
>>> Thank you for your reply. How to switch slave to master in real time?
>>
>> If you store the data in a file, simply redefine the zone type, cha
Hey guys,
We received an email today about one of our recursive DNS servers that did
not support the new KSK for DNSSEC.
On 11 October 2018, ICANN will change or "roll over" the DNSSEC key
signing key (KSK) of the DNS root zone. Based on information from your
netw
On Wednesday, August 22, 2018 11:42:35 Grant Taylor via bind-users wrote:
> On 08/22/2018 01:15 AM, Zhengyu Pan wrote:
> > In my application scenario, I have two master. Each master connect
> > several slave dns. When users update zone, i update these two master
> > respectively in a for loop. Ho
On 08/22/2018 01:15 AM, Zhengyu Pan wrote:
In my application scenario, I have two master. Each master connect
several slave dns. When users update zone, i update these two master
respectively in a for loop. However, when any master update fails, i
will roll bock. you know, whenever any up
> 在 2018年8月22日，下午8:54，Matus UHLAR - fantomas 写道：
>
> On 22.08.18 20:37, Zhengyu Pan wrote:
>> Thank you for your reply. How to switch slave to master in real time?
>
> If you store the data in a file, simply redefine the zone type, change
> "type master;" to
> "type slave;”
>
However, I hav
So, the short answer is that check-names is pretty granular, doing
"check-names response fail" is just asking for trouble, for a resolver at
the Internet edge, since there's too much squirrely stuff out there. Most
folks just limit check-names "fail" to authoritative data (master or slave).
The lo
Validating input is good & rejecting invalid data is the way to go..
but has the Internet moved on and check-names is now too restrictive?
I have this bit in named.conf
check-names response fail;
# restrict the character set and syntax of domain names
# The rules for legal hostnames a
On 22.08.18 20:37, Zhengyu Pan wrote:
Thank you for your reply. How to switch slave to master in real time?
If you store the data in a file, simply redefine the zone type, change
"type master;"
to
"type slave;"
If you don't keep slave zones in files, you are out of luck.
Does bind have co
Thank you for your reply. How to switch slave to master in real time? Does
bind have command?
On 8/22/2018 18:32，Reindl Harald wrote：
Am 22.08.2018 um 12:17 schrieb Zhengyu Pan:
Because I need to a master as a cold standby. Another master need to
have the same zone and configuration with t
Because I need to a master as a cold standby. Another master need to have the
same zone and configuration with the former. When a master is down, I need
to switch to another master right away.
On 8/22/2018 16:39，Reindl Harald wrote：
Am 22.08.2018 um 09:15 schrieb Zhengyu Pan:
Hi:
In my ap
Hi:
In my application scenario, I have two master. Each master connect several
slave dns. When users update zone, i update these two master respectively in a
for loop. However, when any master update fails, i will roll bock. you know,
whenever any update, zone's serial will increase. this
12 matches
Mail list logo
