Re: [External] Re: Request assistance configuring RPZ

2019-05-29 Thread Grant Taylor via bind-users
On 5/29/19 3:15 PM, Jon wrote: Hi Grant, Hi, I don't usually wade in on these but I also believe RPZ would be the simplest way to achieve this. I tend to agree. DNSSEC can complicate this a bit (requiring additional settings). In order to keep the same zone working with 10. Addressing for

Re: [External] Re: Request assistance configuring RPZ

2019-05-29 Thread Jon
Hi Grant, I don't usually wade in on these but I also believe RPZ would be the simplest way to achieve this. You're close I think. Using Carl's information and what you've done there, add the following. In order to keep the same zone working with 10. Addressing for all other (not in bubble) clie

Re: BIND 9.14 configure error

2019-05-29 Thread Stacey Marshall
On 29 May 2019, at 18:28, greg.ra...@bt.com wrote: Having trouble running 'configure' script for BIND 9.14.2 on CentOS 7 system. I have python 2.7.5 installed, but not the PLY package. The configure script complains: configure: error: Python >= 2.7 or >= 3.2 and the PLY package are require

BIND 9.14 configure error

2019-05-29 Thread greg.rabil
Having trouble running 'configure' script for BIND 9.14.2 on CentOS 7 system. I have python 2.7.5 installed, but not the PLY package. The configure script complains: configure: error: Python >= 2.7 or >= 3.2 and the PLY package are required for dnssec-keymgr and other Python-based tools. PLY

Re: A little baffled by bind 9.14.2 wanting some special python?

2019-05-29 Thread Mukund Sivaraman
On Wed, May 29, 2019 at 11:09:45AM -0400, Dennis Clarke wrote: > On 5/29/19 2:22 AM, Michał Kępień wrote: > > > For reasons unknown the configure process blows up even if I specify > > > the option --disable-python and in the config.log I see : > > > > The option is actually called --without-pytho

Re: A little baffled by bind 9.14.2 wanting some special python?

2019-05-29 Thread Dennis Clarke
On 5/29/19 2:22 AM, Michał Kępień wrote: For reasons unknown the configure process blows up even if I specify the option --disable-python and in the config.log I see : The option is actually called --without-python; the fix for that mistake is already committed: https://gitlab.isc.org/isc

Re: [External] Re: Request assistance configuring RPZ

2019-05-29 Thread Carl Byington via bind-users
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On Wed, 2019-05-29 at 09:05 -0400, David Bank wrote: > Re-reading the ARM, it seemed to me that I needed to add a After adding the zone and the response-policy statement to named.conf, I presume you did: rndc reconfig To test that you can:

Re: [External] Re: Request assistance configuring RPZ

2019-05-29 Thread David Bank
On Tue, 28 May 2019, Carl Byington via bind-users wrote: Hi, Carl - thanks for replying. On zurg, add a new dns zone rpz.ncdot.gov Your suggestion didn't work for me. To test your suggestion, I had to add a "forwarders" statement to get zurg to query buzz/woody; prior to testing,

Re: bug in ifiter_getifaddrs.c cannot find include file: ??

2019-05-29 Thread Michał Kępień
> Not sure where the need for ifaddrs.h came from but it doesn't exist in > ye old Solaris 10 sparc boxen : It comes from getifaddrs() being the only supported network interface enumeration mechanism supported in BIND 9.14+. Other such mechanisms were removed as part of code cleanups during the

Re: bug in ifiter_getifaddrs.c cannot find include file: ??

2019-05-29 Thread Ondřej Surý
Hi Dennis, see PLATFORMS.md from the distribution. Unfortunately, Solaris 10 is just too old to be supported. You will either need to upgrade to Solaris 11 or use BIND 9.11 ESV —cut here— […] ## Supported platforms In general, this version of BIND will build and run on any POSIX-compliant sys