Re: A little baffled by bind 9.14.2 wanting some special python?

2019-05-28 Thread Michał Kępień
> For reasons unknown the configure process blows up even if I specify > the option --disable-python and in the config.log I see : The option is actually called --without-python; the fix for that mistake is already committed: https://gitlab.isc.org/isc-projects/bind9/merge_requests/1964 Apol

bug in ifiter_getifaddrs.c cannot find include file: ??

2019-05-28 Thread Dennis Clarke
Not sure where the need for ifaddrs.h came from but it doesn't exist in ye old Solaris 10 sparc boxen : /opt/developerstudio12.6/bin/cc -I/usr/local/build/bind-9.14.2_SunOS5.10_sparc64vii+.002 -I../../.. -I./include -I./../pthreads/include -I../include -I./../include -I./.. -I/usr/local/inc

A little baffled by bind 9.14.2 wanting some special python?

2019-05-28 Thread Dennis Clarke
For reasons unknown the configure process blows up even if I specify the option --disable-python and in the config.log I see : configure:8855: checking for perl5 configure:8885: result: /usr/local/bin/perl configure:8952: checking for python configure:8982: result: /opt/python/bin/python3.7 co

Re: [External] Re: Request assistance configuring RPZ

2019-05-28 Thread Carl Byington via bind-users
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On Tue, 2019-05-28 at 13:13 -0400, David Bank wrote: > Perhaps I'm missing something, but I don't see how to make zurg reply > with 192.168/16 IPs for andy and sid, but correctly resolve the rest > of *.internal.local On zurg, add a new dns zone rpz

Re: [External] Re: Request assistance configuring RPZ

2019-05-28 Thread Grant Taylor via bind-users
On 5/28/19 11:13 AM, David Bank wrote: Hello, Grant! Thanks for replying. Hi. You're welcome.     No - the bubble is its own world for the most part. No reason for general 10/8 inhabitants to try to talk to 192.168/16 - the very, very few hosts that need to talk in 192.168/16 already have

Re: [External] Re: Request assistance configuring RPZ

2019-05-28 Thread Sten Carlsen
To me this looks like it could be done with a bit of programming. If the addresses of the two hosts needed in 192.168.x.x don't change too often, a cron job could read those addresses and set them in zurg as dynamic entries using nsupdate. The time for cron would be smaller than the TTL of the RRs

Re: [External] Re: Request assistance configuring RPZ

2019-05-28 Thread David Bank
On Tue, 28 May 2019, Grant Taylor via bind-users wrote: Hello, Grant! Thanks for replying. On 5/28/19 10:16 AM, David Bank wrote: To recap what I'm attempting to create: a host in the 10. network knows to ask buzz or woody for DNS resolution, and if such a host wants to resolve andy.internal.l

Re: Request assistance configuring RPZ

2019-05-28 Thread Grant Taylor via bind-users
On 5/28/19 10:16 AM, David Bank wrote: I want to configure zurg so that it will refer ALL requests to buzz or woody; however, when a request is made to resolve andy.internal.local or sid.internal.local, then zurg rewrites those IPs from the 10. addresses that buzz and woody know about to 192.16

Request assistance configuring RPZ

2019-05-28 Thread David Bank
Hello to the list. Long-time BIND user here - a big "Thank You!" to ISC for all they do. I'm finding myself out past the limits of my knowledge, and I'm asking for help. My environment is BIND 9.11.2, on SLES 12 SP4. I'm thinking of using the Response Policy Zones feature to solve a problem,

Re: isc-bind-esv Repository - "yum update" doing undesirable things!

2019-05-28 Thread Michał Kępień
> Purely out of curiosity, I did try building libevent which failed > miserably:- > > (...) > > For my part, I am not concerned about this as I am not using DNSTAP and > only mention the issue in case others encounter it. Ah, thanks for checking this. I was wrong - SRPMs for dnstap dependencies

Re: Logging of notify sending

2019-05-28 Thread Tony Finch
Greg Rivers wrote: > As Rick Dicaire said previously, "Notifications themselves don't use TSIG". Depends on your configuration :-) 28-May-2019 01:43:13.162 notify: info: client @0x5591b0877080 2001:630:212:8::d:aa#31085/key tsig-ipreg: view main: received notify for zone 'cam.ac

Re: bind qname minimization thoughts

2019-05-28 Thread Tony Finch
Daniel Stirnimann wrote: > > I would like BIND to also more gracefully handle qmin errors. This could > mean changing the to the query type A (See attached patch for BIND > 9.14.2) or disabling qmin on errors. I tend to think that making A queries instead of NS is the best way to reduce the compl